AbuseIPDB » 20.197.49.246

20.197.49.246 was found in our database!

This IP was reported 2,680 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 20.197.49.246

Whois 20.197.49.246

IP Abuse Reports for 20.197.49.246:

This IP address has been reported a total of 2,680 times from 752 distinct sources. 20.197.49.246 was first reported on March 25th 2021, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
security.rdmc.fr	2024-09-16 03:43:46 (4 hours ago)	IP in Malicious Database	Web App Attack
Filli Group	2024-09-16 03:16:31 (4 hours ago)	2024-09-16T05:12:05.092561+02:00 tor01.ca.pop.as202427.net sshd[2541783]: User root from 20.197.49.2 ... show more2024-09-16T05:12:05.092561+02:00 tor01.ca.pop.as202427.net sshd[2541783]: User root from 20.197.49.246 not allowed because not listed in AllowUsers 2024-09-16T05:15:38.476187+02:00 tor01.ca.pop.as202427.net sshd[2542937]: User root from 20.197.49.246 not allowed because not listed in AllowUsers 2024-09-16T05:16:31.049423+02:00 tor01.ca.pop.as202427.net sshd[2543182]: User root from 20.197.49.246 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
zmb.pl	2024-09-16 00:45:50 (7 hours ago)	Sep 16 02:43:14 srv3 sshd\[21691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ... show moreSep 16 02:43:14 srv3 sshd\[21691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 16 02:43:16 srv3 sshd\[21691\]: Failed password for root from 20.197.49.246 port 28870 ssh2 Sep 16 02:44:04 srv3 sshd\[21718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 16 02:44:06 srv3 sshd\[21718\]: Failed password for root from 20.197.49.246 port 3848 ssh2 Sep 16 02:45:47 srv3 sshd\[21842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root ... show less	Brute-Force SSH
hl.admin	2024-09-15 23:28:53 (8 hours ago)	Fail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: Sep 15 23:28:51 HephaestusLab ... show moreFail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: Sep 15 23:28:51 HephaestusLabs sshd[873701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 15 23:28:53 HephaestusLabs sshd[873701]: Failed password for root from 20.197.49.246 port 14209 ssh2 ... show less	Brute-Force SSH
OHOST.BG	2024-09-15 22:32:32 (9 hours ago)	Sep 16 01:26:29 mirrors sshd[4028414]: Failed password for root from 20.197.49.246 port 17729 ssh2<b ... show moreSep 16 01:26:29 mirrors sshd[4028414]: Failed password for root from 20.197.49.246 port 17729 ssh2 Sep 16 01:29:57 mirrors sshd[4036469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 16 01:29:59 mirrors sshd[4036469]: Failed password for root from 20.197.49.246 port 34305 ssh2 Sep 16 01:32:30 mirrors sshd[4042486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 16 01:32:32 mirrors sshd[4042486]: Failed password for root from 20.197.49.246 port 8707 ssh2 ... show less	Brute-Force SSH
MumcularHoneypot	2024-09-15 16:10:03 (16 hours ago)	Detected SSH Brute Force by Mumcular Honeypot.	Brute-Force SSH
Anonymous	2024-09-15 16:04:54 (16 hours ago)	20.197.49.246 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more20.197.49.246 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 15 12:01:23 server2 sshd[27747]: Failed password for root from 185.22.67.50 port 48380 ssh2 Sep 15 12:01:24 server2 sshd[27753]: Failed password for root from 20.197.49.247 port 11164 ssh2 Sep 15 12:03:07 server2 sshd[28270]: Failed password for root from 20.197.49.246 port 49724 ssh2 Sep 15 12:04:51 server2 sshd[28886]: Failed password for root from 20.197.49.241 port 41848 ssh2 Sep 15 12:03:56 server2 sshd[28570]: Failed password for root from 20.197.49.241 port 23742 ssh2 IP Addresses Blocked: 185.22.67.50 (KZ/Kazakhstan/-) 20.197.49.247 (US/United States/-) show less	Brute-Force
aorth	2024-09-15 14:12:24 (18 hours ago)	Sep 15 15:05:24 Failed password for invalid user root from 20.197.49.246 port 61060	Brute-Force SSH
dvce.us	2024-09-15 10:05:29 (22 hours ago)	Sep 15 05:05:27 mail sshd[876378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreSep 15 05:05:27 mail sshd[876378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 15 05:05:29 mail sshd[876378]: Failed password for root from 20.197.49.246 port 57362 ssh2 ... show less	Brute-Force SSH
yzfdude1	2024-09-15 09:01:53 (23 hours ago)	Sep 15 02:55:10 b146-52 sshd[2121968]: Failed password for root from 20.197.49.246 port 48493 ssh2<b ... show moreSep 15 02:55:10 b146-52 sshd[2121968]: Failed password for root from 20.197.49.246 port 48493 ssh2 Sep 15 03:01:50 b146-52 sshd[2122747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root Sep 15 03:01:52 b146-52 sshd[2122747]: Failed password for root from 20.197.49.246 port 28040 ssh2 ... show less	Brute-Force SSH
nickto	2024-09-15 07:41:15 (1 day ago)		Brute-Force SSH
gszasz	2024-09-15 02:53:53 (1 day ago)	2024-09-15T04:53:49.741070+02:00 thor sshd[72649]: Connection from 20.197.49.246 port 24356 on 147.2 ... show more2024-09-15T04:53:49.741070+02:00 thor sshd[72649]: Connection from 20.197.49.246 port 24356 on 147.251.27.48 port 22 rdomain "" 2024-09-15T04:53:50.510333+02:00 thor sshd[72649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.197.49.246 user=root 2024-09-15T04:53:52.546172+02:00 thor sshd[72649]: Failed password for root from 20.197.49.246 port 24356 ssh2 ... show less	Brute-Force SSH
ZeroAttackVector	2024-09-15 02:14:38 (1 day ago)	zrh: 3 unauthorised SSH/Telnet login attempts between 2024-09-15T01:56:30Z and 2024-09-15T02:14:38Z	Brute-Force SSH
xor.st	2024-09-15 01:51:12 (1 day ago)	SSH bruteforce attempt from IP 20.197.49.246 for username root at 2024-09-15T01:51:12Z	Brute-Force SSH
VHosting	2024-09-15 00:34:17 (1 day ago)	Attempt from 20.197.49.246	Brute-Force SSH