This IP address has been reported a total of
105
times from
72 distinct
sources.
159.194.200.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-06T04:43:04.440462+03:00 fastdl sshd[755774]: Invalid user admin2 from 159.194.200.49 port 4 ...
show more2026-06-06T04:43:04.440462+03:00 fastdl sshd[755774]: Invalid user admin2 from 159.194.200.49 port 41844
2026-06-06T04:43:04.449746+03:00 fastdl sshd[755774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49
2026-06-06T04:43:06.334673+03:00 fastdl sshd[755774]: Failed password for invalid user admin2 from 159.194.200.49 port 41844 ssh2
2026-06-06T04:44:48.800519+03:00 fastdl sshd[755881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49 user=root
2026-06-06T04:44:51.298899+03:00 fastdl sshd[755881]: Failed password for root from 159.194.200.49 port 45098 ssh2
...
show less
[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ...
show more[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
2026-06-06T01:40:52.648720+00:00 sshd-session[1087704]: Failed password for invalid user administrator from 159.194.200.49 port 47306 ssh2
2026-06-06T01:42:39.329549+00:00 sshd-session[1087779]: Invalid user zenith from 159.194.200.49 port 33326
2026-06-06T01:42:39.333149+00:00 sshd-session[1087779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49
2026-06-06T01:42:41.348087+00:00 sshd-session[1087779]: Failed password for invalid user zenith from 159.194.200.49 port 33326 ssh2
2026-06-06T01:44:26.142118+00:00 sshd-session[1087787]: Invalid user admin2 from 159.194.200.49 port 33922
show less
Brute-Force
SSH
Anonymous
2026-06-06T02:37:15.598573+01:00 vps sshd[2160565]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-06-06T02:37:15.598573+01:00 vps sshd[2160565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49
2026-06-06T02:37:17.236963+01:00 vps sshd[2160565]: Failed password for invalid user administrator from 159.194.200.49 port 41546 ssh2
2026-06-06T02:42:14.250874+01:00 vps sshd[2167300]: Invalid user zenith from 159.194.200.49 port 60694
...
show less
Jun 6 01:30:41 instance1 sshd[1330421]: Disconnected from invalid user administrator 159.194.200.49 ...
show moreJun 6 01:30:41 instance1 sshd[1330421]: Disconnected from invalid user administrator 159.194.200.49 port 45122 [preauth]
...
show less
(sshd) Failed SSH login from 159.194.200.49 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direct ...
show more(sshd) Failed SSH login from 159.194.200.49 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 5 19:22:15 13766 sshd[15157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49 user=root
Jun 5 19:22:17 13766 sshd[15157]: Failed password for root from 159.194.200.49 port 45014 ssh2
Jun 5 19:25:57 13766 sshd[16977]: Invalid user gecko from 159.194.200.49 port 35330
Jun 5 19:25:58 13766 sshd[16977]: Failed password for invalid user gecko from 159.194.200.49 port 35330 ssh2
Jun 5 19:28:09 13766 sshd[18276]: Invalid user sina from 159.194.200.49 port 50562
show less
2026-06-06T02:25:40.699232+02:00 pve-osd-101 sshd[3335664]: Invalid user gecko from 159.194.200.49 p ...
show more2026-06-06T02:25:40.699232+02:00 pve-osd-101 sshd[3335664]: Invalid user gecko from 159.194.200.49 port 58100
2026-06-06T02:25:40.701217+02:00 pve-osd-101 sshd[3335664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49
2026-06-06T02:25:40.706971+02:00 pve-osd-101 sshd[3335664]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49 user=gecko
2026-06-06T02:25:42.716731+02:00 pve-osd-101 sshd[3335664]: Failed password for invalid user gecko from 159.194.200.49 port 58100 ssh2
2026-06-06T02:25:44.348827+02:00 pve-osd-101 sshd[3335664]: Disconnected from invalid user gecko 159.194.200.49 port 58100 [preauth]
2026-06-06T02:27:51.489018+02:00 pve-osd-101 sshd[3335716]: Invalid user sina from 159.194.200.49 port 34972
...
show less
(sshd) Failed SSH login from 159.194.200.49 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direct ...
show more(sshd) Failed SSH login from 159.194.200.49 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 5 23:13:38 23159 sshd[3448]: Invalid user git from 159.194.200.49 port 41434
Jun 5 23:13:40 23159 sshd[3448]: Failed password for invalid user git from 159.194.200.49 port 41434 ssh2
Jun 5 23:22:47 23159 sshd[8202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49 user=root
Jun 5 23:22:49 23159 sshd[8202]: Failed password for root from 159.194.200.49 port 60078 ssh2
Jun 5 23:24:29 23159 sshd[9140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.194.200.49 user=root
show less
Jun 6 00:18:57 bongen-tmp-rt.local sshd[1326338]: Disconnected from authenticating user root 159.19 ...
show moreJun 6 00:18:57 bongen-tmp-rt.local sshd[1326338]: Disconnected from authenticating user root 159.194.200.49 port 44928 [preauth]
Jun 6 00:20:43 bongen-tmp-rt.local sshd[1326557]: Disconnected from authenticating user root 159.194.200.49 port 60536 [preauth]
Jun 6 00:22:32 bongen-tmp-rt.local sshd[1326751]: Disconnected from authenticating user root 159.194.200.49 port 40590 [preauth]
Jun 6 00:24:20 bongen-tmp-rt.local sshd[1326945]: Invalid user es from 159.194.200.49 port 35278
Jun 6 00:24:20 bongen-tmp-rt.local sshd[1326945]: Disconnected from invalid user es 159.194.200.49 port 35278 [preauth]
show less
2026-06-05T21:09:26.764501+00:00 edge-thn-par02.int.pdx.net.uk sshd[139094]: Invalid user giulia fro ...
show more2026-06-05T21:09:26.764501+00:00 edge-thn-par02.int.pdx.net.uk sshd[139094]: Invalid user giulia from 159.194.200.49 port 49048
2026-06-05T21:11:13.949954+00:00 edge-thn-par02.int.pdx.net.uk sshd[139206]: Invalid user mohsen from 159.194.200.49 port 33886
2026-06-05T21:14:45.933049+00:00 edge-thn-par02.int.pdx.net.uk sshd[139439]: Invalid user testftp from 159.194.200.49 port 33242
...
show less
2026-06-06T00:04:58.028684+03:00 kotia sshd-session[192062]: Invalid user tao from 159.194.200.49 po ...
show more2026-06-06T00:04:58.028684+03:00 kotia sshd-session[192062]: Invalid user tao from 159.194.200.49 port 38240
...
show less
Brute-Force
SSH
Showing 1 to
15
of 105 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩