This IP address has been reported a total of
237
times from
206 distinct
sources.
201.79.49.206 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 61
reports;
United States of America
with 32
reports;
France
with 27
reports.
The most common categories in these recent reports were:
SSH
220
times;
Brute-Force
220
times;
Port Scan
10
times;
Hacking
6
times;
Web App Attack
3
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-25T07:43:47.549159+00:00 de-fra2-mirror1 sshd[1096098]: Invalid user db2fenc1 from 201.79.49 ...
show more2026-10-25T07:43:47.549159+00:00 de-fra2-mirror1 sshd[1096098]: Invalid user db2fenc1 from 201.79.49.206 port 59796
2026-10-25T07:46:37.524836+00:00 de-fra2-mirror1 sshd[1096110]: Invalid user stone from 201.79.49.206 port 43044
2026-10-25T07:48:03.942545+00:00 de-fra2-mirror1 sshd[1096586]: Invalid user admin from 201.79.49.206 port 43468
...
show less
2026-10-25T08:43:31.978666+01:00 gigahost-vm-cm21-2c2g-sfj sshd[2069393]: Invalid user db2fenc1 from ...
show more2026-10-25T08:43:31.978666+01:00 gigahost-vm-cm21-2c2g-sfj sshd[2069393]: Invalid user db2fenc1 from 201.79.49.206 port 47948
2026-10-25T08:46:21.671074+01:00 gigahost-vm-cm21-2c2g-sfj sshd[2069412]: Invalid user stone from 201.79.49.206 port 36304
2026-10-25T08:47:49.941812+01:00 gigahost-vm-cm21-2c2g-sfj sshd[2069419]: Invalid user admin from 201.79.49.206 port 57098
...
show less
2026-10-25T01:51:32.685050-05:00 Bot2 sshd-session[84873]: Failed password for root from 201.79.49.2 ...
show more2026-10-25T01:51:32.685050-05:00 Bot2 sshd-session[84873]: Failed password for root from 201.79.49.206 port 47814 ssh2
2026-10-25T01:52:59.806264-05:00 Bot2 sshd-session[84891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.79.49.206 user=root
2026-10-25T01:53:01.729128-05:00 Bot2 sshd-session[84891]: Failed password for root from 201.79.49.206 port 44984 ssh2
...
show less
2026-10-25T06:50:34.743152+00:00 arrow-ch1 sshd-session[107129]: Failed password for root from 201.7 ...
show more2026-10-25T06:50:34.743152+00:00 arrow-ch1 sshd-session[107129]: Failed password for root from 201.79.49.206 port 43612 ssh2
2026-10-25T06:52:01.786361+00:00 arrow-ch1 sshd-session[107163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.79.49.206 user=root
2026-10-25T06:52:03.414658+00:00 arrow-ch1 sshd-session[107163]: Failed password for root from 201.79.49.206 port 34346 ssh2
...
show less
2026-10-25T08:49:32.181357+02:00 ozelot sshd-session[3209721]: Failed password for root from 201.79. ...
show more2026-10-25T08:49:32.181357+02:00 ozelot sshd-session[3209721]: Failed password for root from 201.79.49.206 port 60140 ssh2
2026-10-25T08:51:02.339553+02:00 ozelot sshd-session[3229711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.79.49.206 user=root
2026-10-25T08:51:04.628395+02:00 ozelot sshd-session[3229711]: Failed password for root from 201.79.49.206 port 46474 ssh2
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (4 attempts).
show less
(sshd_preauth) SSH pre-auth abort from 201.79.49.206 (US/United States/-): 5 in the last 3600 secs; ...
show more(sshd_preauth) SSH pre-auth abort from 201.79.49.206 (US/United States/-): 5 in the last 3600 secs; IP: 201.79.49.206; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-10-25T07:22:31.081734+01:00 vps1 sshd-session[967304]: Received disconnect from 201.79.49.206 port 51264:11: Bye Bye [preauth] 2026-10-25T07:22:31.086404+01:00 vps1 sshd-session[967304]: Disconnected from authenticating user root 201.79.49.206 port 51264 [preauth] 2026-10-25T07:30:00.182594+01:00 vps1 sshd-session[974831]: Received disconnect from 201.79.49.206 port 35030:11: Bye Bye [preauth] 2026-10-25T07:30:00.183740+01:00 vps1 sshd-session[974831]: Disconnected from authenticating user root 201.79.49.206 port 35030 [preauth] 2026-10-25T07:34:34.995708+01:00 vps1 sshd-session[979383]: Received disconnect from 201.79.49.206 port 50850:11: Bye Bye [preauth]
show less
This IP address carried out 240 port scanning attempts on 24-10-2026. For more information or to rep ...
show moreThis IP address carried out 240 port scanning attempts on 24-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
👿 201.79.49.206 has been involved in malicious and brute-force activity. Reported by umarmohammad.xy ...
show more👿 201.79.49.206 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz
show less
