JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.23.49.107

158.23.49.107 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Singapore Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.23.49.107

Whois 158.23.49.107

IP Abuse Reports for 158.23.49.107:

This IP address has been reported a total of 30 times from 26 distinct sources. 158.23.49.107 was first reported on December 1st 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 John Doe	2026-07-17 09:01:19 (1 hour ago)	$f2bV_matches	Brute-Force SSH
🇫🇷 SiyCah	2026-07-17 06:00:06 (4 hours ago)	158.23.49.107 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 158.23.49.107 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 278B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 applemooz	2026-07-17 02:44:17 (7 hours ago)	Jul 17 04:44:07 lnxmail62 sshd[1295025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 17 04:44:07 lnxmail62 sshd[1295025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 user=root Jul 17 04:44:08 lnxmail62 sshd[1295025]: Failed password for root from 158.23.49.107 port 56406 ssh2 Jul 17 04:44:11 lnxmail62 sshd[1296138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 user=root Jul 17 04:44:14 lnxmail62 sshd[1296138]: Failed password for root from 158.23.49.107 port 56972 ssh2 Jul 17 04:44:16 lnxmail62 sshd[1297302]: Invalid user admin from 158.23.49.107 port 56258 ... show less	Brute-Force SSH
🇫🇷 NetEye	2026-07-17 02:31:29 (7 hours ago)	SSH brute force login attempt	Brute-Force SSH
🇫🇷 sthoyer.de	2026-07-17 00:57:06 (9 hours ago)	Jul 17 02:57:05 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 17 02:57:05 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.23.49.107 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=43427 DF PROTO=TCP SPT=59620 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Coco Bongo	2026-07-16 22:24:19 (11 hours ago)	Jul 17 00:24:16 [redacted] sshd[1172621]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Jul 17 00:24:16 [redacted] sshd[1172621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 Jul 17 00:24:18 [redacted] sshd[1172621]: Failed password ... show less	Brute-Force SSH
🇫🇷 maxxsense	2026-07-16 20:34:28 (13 hours ago)	(sshd) Failed SSH login from 158.23.49.107 (MX/Mexico/-)	Brute-Force SSH
🇫🇷 asemen	2026-07-16 20:03:46 (13 hours ago)	2026-07-16T22:03:36.846044mbox.semen.de sshd[594312]: Failed password for invalid user ubuntu from 1 ... show more 2026-07-16T22:03:36.846044mbox.semen.de sshd[594312]: Failed password for invalid user ubuntu from 158.23.49.107 port 37132 ssh2 2026-07-16T22:03:38.894077mbox.semen.de sshd[594353]: Invalid user ubuntu from 158.23.49.107 port 60382 2026-07-16T22:03:38.899662mbox.semen.de sshd[594353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 2026-07-16T22:03:41.044604mbox.semen.de sshd[594353]: Failed password for invalid user ubuntu from 158.23.49.107 port 60382 ssh2 2026-07-16T22:03:43.769374mbox.semen.de sshd[594355]: Invalid user user from 158.23.49.107 port 36106 2026-07-16T22:03:43.775589mbox.semen.de sshd[594355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 2026-07-16T22:03:45.604927mbox.semen.de sshd[594355]: Failed password for invalid user user from 158.23.49.107 port 36106 ssh2 ... show less	Port Scan Brute-Force SSH
🇫🇷 HerrWolf	2026-07-16 15:45:05 (18 hours ago)	CrowdSec Detection: crowdsecurity/ssh-bf	Brute-Force SSH
🇫🇷 suble.org	2026-07-16 12:40:49 (21 hours ago)	2026-07-16T14:40:45.295095+02:00 swsrv sshd[342417]: Invalid user ubuntu from 158.23.49.107 port 400 ... show more 2026-07-16T14:40:45.295095+02:00 swsrv sshd[342417]: Invalid user ubuntu from 158.23.49.107 port 40084 2026-07-16T14:40:46.432651+02:00 swsrv sshd[342483]: Invalid user ubuntu from 158.23.49.107 port 37358 2026-07-16T14:40:47.579686+02:00 swsrv sshd[342545]: Invalid user ubuntu from 158.23.49.107 port 37612 2026-07-16T14:40:48.791731+02:00 swsrv sshd[342607]: Invalid user debian from 158.23.49.107 port 39678 ... show less	Brute-Force SSH
🇫🇷 andruida.hu	2026-07-16 10:22:08 (23 hours ago)		Brute-Force SSH
🇫🇷 EvoX	2026-07-16 08:30:39 (1 day ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credentials: root:Admin2020, ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credentials: root:Admin2020, root:Zaq1@WSXzaq1@WSX • Number of login attempts: 2 • Client: SSH-2.0-paramiko_5.0.0 show less	Brute-Force SSH
🇫🇷 NikkoCasa34	2026-07-16 08:10:25 (1 day ago)	Fail2ban jail sshd: 3 tentatives. Dernier log: $f2bV_matches	Brute-Force SSH
🇫🇷 floofy.tech	2026-07-16 05:58:00 (1 day ago)	2026-07-16T07:58:00.587879 yip.floofy.tech sshd-session[873569]: pam_unix(sshd:auth): authentication ... show more 2026-07-16T07:58:00.587879 yip.floofy.tech sshd-session[873569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.23.49.107 2026-07-16T07:58:02.626532 yip.floofy.tech sshd-session[873569]: Failed password for invalid user debian from 158.23.49.107 port 52880 ssh2 2026-07-16T07:58:04.886734 yip.floofy.tech sshd-session[873608]: Invalid user debian from 158.23.49.107 port 58906 ... show less	Brute-Force SSH
Anonymous	2026-07-16 03:48:00 (1 day ago)	SSH login attempts with user ubuntu	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 213.238.183.231

🇹🇼 198.235.24.94

🇨🇳 123.233.235.65

🇺🇸 104.207.44.133

🇮🇳 103.182.132.154

🇫🇮 83.97.78.224

🇩🇪 57.129.29.136

🇻🇳 27.71.230.31

🇺🇸 2604:a880:2:d1:0:1:51df:c001

🇸🇬 2406:ef80:2:878f:ef3f:86ca:f184:3f4d

🇨🇱 200.73.20.104

🇧🇪 198.235.24.243

🇹🇼 198.235.24.72

🇹🇼 198.235.24.30

🇳🇱 195.178.110.30

🇧🇷 189.50.142.82

🇧🇷 186.239.41.74

🇵🇱 176.53.159.197

🇫🇷 152.228.228.233

🇨🇳 124.163.202.215