This IP address has been reported a total of
299
times from
242 distinct
sources.
161.18.77.49 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 64
reports;
United States of America
with 60
reports;
France
with 28
reports.
The most common categories in these recent reports were:
Brute-Force
281
times;
SSH
280
times;
Port Scan
13
times;
Hacking
6
times;
Web App Attack
3
times;
Other
13
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T22:37:35.461043+00:00 thelemmy.club sshd-session[2444059]: Received disconnect from 161.1 ...
show more2026-10-26T22:37:35.461043+00:00 thelemmy.club sshd-session[2444059]: Received disconnect from 161.18.77.49 port 51030:11: Bye Bye [preauth]
2026-10-26T22:37:35.461067+00:00 thelemmy.club sshd-session[2444059]: Disconnected from invalid user root 161.18.77.49 port 51030 [preauth]
...
show less
Oct 26 22:16:53 mc sshd[1630549]: Failed password for invalid user boot from 161.18.77.49 port 48086 ...
show moreOct 26 22:16:53 mc sshd[1630549]: Failed password for invalid user boot from 161.18.77.49 port 48086 ssh2
Oct 26 22:25:41 mc sshd[1645371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.18.77.49 user=root
Oct 26 22:25:44 mc sshd[1645371]: Failed password for root from 161.18.77.49 port 33798 ssh2
...
show less
2026-10-27T00:02:40.074877+02:00 MNZ-1 sshd-session[220570]: User root from 161.18.77.49 not allowed ...
show more2026-10-27T00:02:40.074877+02:00 MNZ-1 sshd-session[220570]: User root from 161.18.77.49 not allowed because not listed in AllowUsers
2026-10-27T00:07:46.637499+02:00 MNZ-1 sshd-session[220963]: User root from 161.18.77.49 not allowed because not listed in AllowUsers
2026-10-27T00:09:27.029506+02:00 MNZ-1 sshd-session[221090]: User root from 161.18.77.49 not allowed because not listed in AllowUsers
2026-10-27T00:11:13.598177+02:00 MNZ-1 sshd-session[221219]: User root from 161.18.77.49 not allowed because not listed in AllowUsers
2026-10-27T00:12:57.961677+02:00 MNZ-1 sshd-session[221365]: User root from 161.18.77.49 not allowed because not listed in AllowUsers
...
show less
2026-10-26T17:07:43.879848 rhel-20gb-ash-1 sshd[3461122]: Disconnected from authenticating user root ...
show more2026-10-26T17:07:43.879848 rhel-20gb-ash-1 sshd[3461122]: Disconnected from authenticating user root 161.18.77.49 port 35542 [preauth]
...
show less
2026-10-26T20:42:32.996798+00:00 thecount sshd[130384]: Invalid user test1 from 161.18.77.49 port 58 ...
show more2026-10-26T20:42:32.996798+00:00 thecount sshd[130384]: Invalid user test1 from 161.18.77.49 port 58882
...
show less
2026-10-26T21:14:33.710869+01:00 akvorado sshd-session[638982]: Disconnected from authenticating use ...
show more2026-10-26T21:14:33.710869+01:00 akvorado sshd-session[638982]: Disconnected from authenticating user root 161.18.77.49 port 33660 [preauth]
2026-10-26T21:17:19.866374+01:00 akvorado sshd-session[643270]: Invalid user a from 161.18.77.49 port 42872
2026-10-26T21:17:19.873899+01:00 akvorado sshd-session[643270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.18.77.49
2026-10-26T21:17:21.903907+01:00 akvorado sshd-session[643270]: Failed password for invalid user a from 161.18.77.49 port 42872 ssh2
2026-10-26T21:17:22.216048+01:00 akvorado sshd-session[643270]: Disconnected from invalid user a 161.18.77.49 port 42872 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-10-26T19:58:10.148074AnicoreLive sshd[17316]: Failed password for root from 161.18.77.49 port 5 ...
show more2026-10-26T19:58:10.148074AnicoreLive sshd[17316]: Failed password for root from 161.18.77.49 port 58608 ssh2
2026-10-26T19:59:51.997861AnicoreLive sshd[17320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.18.77.49 user=root
2026-10-26T19:59:54.263501AnicoreLive sshd[17320]: Failed password for root from 161.18.77.49 port 33912 ssh2
...
show less
Oct 26 15:39:34 gen sshd[3459880]: Failed password for root from 161.18.77.49 port 51316 ssh2
Oct 26 ...
show moreOct 26 15:39:34 gen sshd[3459880]: Failed password for root from 161.18.77.49 port 51316 ssh2
Oct 26 15:41:17 gen sshd[3459908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.18.77.49 user=root
Oct 26 15:41:19 gen sshd[3459908]: Failed password for root from 161.18.77.49 port 55046 ssh2
...
show less
Oct 26 14:36:59 mailman sshd[19105]: Disconnected from 161.18.77.49 port 55444 [preauth]
Oct 26 14:3 ...
show moreOct 26 14:36:59 mailman sshd[19105]: Disconnected from 161.18.77.49 port 55444 [preauth]
Oct 26 14:39:46 mailman sshd[19426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.18.77.49 user=root
Oct 26 14:39:48 mailman sshd[19426]: Failed password for root from 161.18.77.49 port 35988 ssh2
show less
