This IP address has been reported a total of
130
times from
115 distinct
sources.
161.132.49.130 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
Oct 26 20:19:59 system-status sshd[3426848]: Failed password for root from 161.132.49.130 port 46768 ...
show moreOct 26 20:19:59 system-status sshd[3426848]: Failed password for root from 161.132.49.130 port 46768 ssh2
Oct 26 20:21:42 system-status sshd[3429023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.49.130 user=root
Oct 26 20:21:44 system-status sshd[3429023]: Failed password for root from 161.132.49.130 port 60756 ssh2
...
show less
2026-10-26T18:42:13.132688+00:00 node1 sshd-session[57916]: Failed password for root from 161.132.49 ...
show more2026-10-26T18:42:13.132688+00:00 node1 sshd-session[57916]: Failed password for root from 161.132.49.130 port 47820 ssh2
2026-10-26T18:43:57.686546+00:00 node1 sshd-session[57942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.49.130 user=root
2026-10-26T18:43:59.878801+00:00 node1 sshd-session[57942]: Failed password for root from 161.132.49.130 port 33524 ssh2
...
show less
2026-10-26T18:41:05.655389+00:00 sshd[78231]: Failed password for root from 161.132.49.130 port 506 ...
show more2026-10-26T18:41:05.655389+00:00 sshd[78231]: Failed password for root from 161.132.49.130 port 50610 ssh2
...
show less
Automated honeypot probe on TCP/2222: unused service port was contacted (likely scanner/botnet). Rep ...
show moreAutomated honeypot probe on TCP/2222: unused service port was contacted (likely scanner/botnet). Reported by Banua Cloud MikroTik router "Distri249". Source: Banua Cloud MikroTik abuse desk.
show less
2026-10-26T19:25:38.113772+02:00 server sshd[191214]: Failed password for root from 161.132.49.130 p ...
show more2026-10-26T19:25:38.113772+02:00 server sshd[191214]: Failed password for root from 161.132.49.130 port 34676 ssh2
2026-10-26T19:27:20.837264+02:00 server sshd[192878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.49.130 user=root
2026-10-26T19:27:23.161876+02:00 server sshd[192878]: Failed password for root from 161.132.49.130 port 46064 ssh2
show less
Oct 26 16:40:01 vps-eb8e942e sshd-session[2036920]: Disconnected from invalid user root 161.132.49.1 ...
show moreOct 26 16:40:01 vps-eb8e942e sshd-session[2036920]: Disconnected from invalid user root 161.132.49.130 port 40304 [preauth]
Oct 26 16:48:10 vps-eb8e942e sshd-session[2037383]: Connection from 161.132.49.130 port 51674 on 57.128.195.69 port 2222 rdomain ""
Oct 26 16:48:11 vps-eb8e942e sshd-session[2037383]: Invalid user highgo from 161.132.49.130 port 51674
...
show less
Brute-Force
SSH
Anonymous
Automated block on a production VoIP/web server: SSH authentication attempts on port 22/tcp after 5 ...
show moreAutomated block on a production VoIP/web server: SSH authentication attempts on port 22/tcp after 5 detected failures. Blocked automatically at the host.
show less
2026-10-26T18:13:22.2959671721589.xorek.cloud sshd[108499]: Failed password for root from 161.132.49 ...
show more2026-10-26T18:13:22.2959671721589.xorek.cloud sshd[108499]: Failed password for root from 161.132.49.130 port 58132 ssh2
2026-10-26T18:15:05.3702791721589.xorek.cloud sshd[108506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.49.130 user=root
2026-10-26T18:15:07.0283611721589.xorek.cloud sshd[108506]: Failed password for root from 161.132.49.130 port 33400 ssh2
...
show less