This IP address has been reported a total of
56
times from
30 distinct
sources.
185.239.49.240 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-16T03:54:41.992562+00:00 ks6.hofud.com sshd[559587]: Invalid user zahid from 185.239.49.240 ...
show more2026-09-16T03:54:41.992562+00:00 ks6.hofud.com sshd[559587]: Invalid user zahid from 185.239.49.240 port 47364
2026-09-16T03:54:42.139900+00:00 ks6.hofud.com sshd[559587]: Disconnected from invalid user zahid 185.239.49.240 port 47364 [preauth]
2026-09-16T03:56:42.969353+00:00 ks6.hofud.com sshd[559714]: Invalid user admin from 185.239.49.240 port 58908
2026-09-16T03:56:43.113073+00:00 ks6.hofud.com sshd[559714]: Disconnected from invalid user admin 185.239.49.240 port 58908 [preauth]
2026-09-16T03:58:41.454149+00:00 ks6.hofud.com sshd[559826]: Invalid user gameserver from 185.239.49.240 port 42784
...
show less
Sep 16 05:54:12 mail1 sshd[2608972]: Invalid user zahid from 185.239.49.240 port 51214
Sep 16 05:54: ...
show moreSep 16 05:54:12 mail1 sshd[2608972]: Invalid user zahid from 185.239.49.240 port 51214
Sep 16 05:54:12 mail1 sshd[2608972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.49.240
Sep 16 05:54:15 mail1 sshd[2608972]: Failed password for invalid user zahid from 185.239.49.240 port 51214 ssh2
...
show less
2026-09-16T03:32:38.456959+00:00 ks6.hofud.com sshd[557765]: Disconnected from authenticating user r ...
show more2026-09-16T03:32:38.456959+00:00 ks6.hofud.com sshd[557765]: Disconnected from authenticating user root 185.239.49.240 port 33132 [preauth]
2026-09-16T03:34:40.695622+00:00 ks6.hofud.com sshd[557848]: Invalid user web from 185.239.49.240 port 50562
2026-09-16T03:34:40.839232+00:00 ks6.hofud.com sshd[557848]: Disconnected from invalid user web 185.239.49.240 port 50562 [preauth]
2026-09-16T03:38:43.137794+00:00 ks6.hofud.com sshd[558094]: Disconnected from authenticating user root 185.239.49.240 port 33572 [preauth]
2026-09-16T03:42:43.071295+00:00 ks6.hofud.com sshd[558467]: Invalid user alex from 185.239.49.240 port 38098
...
show less
2026-09-16T03:15:16.195311+00:00 ks6.hofud.com sshd[556449]: Invalid user admin1 from 185.239.49.240 ...
show more2026-09-16T03:15:16.195311+00:00 ks6.hofud.com sshd[556449]: Invalid user admin1 from 185.239.49.240 port 42506
2026-09-16T03:15:16.343788+00:00 ks6.hofud.com sshd[556449]: Disconnected from invalid user admin1 185.239.49.240 port 42506 [preauth]
2026-09-16T03:20:21.678704+00:00 ks6.hofud.com sshd[556880]: Invalid user servidor from 185.239.49.240 port 35976
2026-09-16T03:20:21.828924+00:00 ks6.hofud.com sshd[556880]: Disconnected from invalid user servidor 185.239.49.240 port 35976 [preauth]
2026-09-16T03:22:29.380758+00:00 ks6.hofud.com sshd[556965]: Invalid user mas from 185.239.49.240 port 44906
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
[SynFast] Auto banned by Fail2Ban. Reason: Brute-force SSH login attempt detected. Evidence:
2026-0 ...
show more[SynFast] Auto banned by Fail2Ban. Reason: Brute-force SSH login attempt detected. Evidence:
2026-09-15T23:54:31.707995+00:00 sshd[3254080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.49.240
2026-09-15T23:54:33.756843+00:00 sshd[3254080]: Failed password for invalid user svnadmin from 185.239.49.240 port 45836 ssh2
2026-09-15T23:56:31.034549+00:00 sshd[3254170]: Invalid user dev from 185.239.49.240 port 60550
2026-09-15T23:56:31.039072+00:00 sshd[3254170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.49.240
2026-09-15T23:56:32.892718+00:00 sshd[3254170]: Failed password for invalid user dev from 185.239.49.240 port 60550 ssh2
show less
Failed password for bob from 185.239.49.240 port 38426 ssh2
Disconnected from bob 185.239.49.240 por ...
show moreFailed password for bob from 185.239.49.240 port 38426 ssh2
Disconnected from bob 185.239.49.240 port 38426 [preauth]
Failed password for laptop from 185.239.49.240 port 56116 ssh2
show less
2026-09-15T14:52:33.472146-07:00 maoyue-yyz1 sshd-session[3736536]: Disconnected from authenticating ...
show more2026-09-15T14:52:33.472146-07:00 maoyue-yyz1 sshd-session[3736536]: Disconnected from authenticating user root 185.239.49.240 port 60542 [preauth]
2026-09-15T14:58:58.602235-07:00 maoyue-yyz1 sshd-session[3737745]: Disconnected from authenticating user root 185.239.49.240 port 46152 [preauth]
2026-09-15T15:03:09.516085-07:00 maoyue-yyz1 sshd-session[3738699]: Disconnected from authenticating user root 185.239.49.240 port 56282 [preauth]
2026-09-15T15:05:10.175907-07:00 maoyue-yyz1 sshd-session[3739119]: Invalid user jose from 185.239.49.240 port 46746
...
show less
Sep 15 23:52:53 NODE-1 sshd[596923]: Disconnected from authenticating user root 185.239.49.240 port ...
show moreSep 15 23:52:53 NODE-1 sshd[596923]: Disconnected from authenticating user root 185.239.49.240 port 40780 [preauth]
Sep 15 23:56:49 NODE-1 sshd[656302]: Invalid user ftpuser from 185.239.49.240 port 38860
Sep 15 23:56:49 NODE-1 sshd[656302]: Disconnected from invalid user ftpuser 185.239.49.240 port 38860 [preauth]
Sep 16 00:01:07 NODE-1 sshd[741791]: Disconnected from authenticating user root 185.239.49.240 port 35380 [preauth]
Sep 16 00:03:11 NODE-1 sshd[817247]: Disconnected from authenticating user root 185.239.49.240 port 51356 [preauth]
...
show less
Sep 15 23:26:02 EMIRATESofBULGARIA sshd[1740953]: Invalid user user from 185.239.49.240 port 47734
S ...
show moreSep 15 23:26:02 EMIRATESofBULGARIA sshd[1740953]: Invalid user user from 185.239.49.240 port 47734
Sep 15 23:26:02 EMIRATESofBULGARIA sshd[1740953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.49.240
Sep 15 23:26:02 EMIRATESofBULGARIA sshd[1740953]: Invalid user user from 185.239.49.240 port 47734
Sep 15 23:26:05 EMIRATESofBULGARIA sshd[1740953]: Failed password for invalid user user from 185.239.49.240 port 47734 ssh2
Sep 15 23:27:59 EMIRATESofBULGARIA sshd[1740957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.49.240 user=root
Sep 15 23:28:01 EMIRATESofBULGARIA sshd[1740957]: Failed password for root from 185.239.49.240 port 48010 ssh2
Sep 15 23:29:54 EMIRATESofBULGARIA sshd[1740963]: Invalid user admin from 185.239.49.240 port 52136
...
show less