JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

210.79.191.49

Recent Activity

Abuse Confidence Score

97% Critical

25 reports

22 reporters · latest 2 days ago

ISP: PT Kebun Nara Santosa
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136052
Domain Name: kebuna.my.id
Country: 🇮🇩 Indonesia
City: Rengasdengklok, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

25 from 22 distinct reporters

First reported

July 29th 2024

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 5 🇳🇱 Netherlands 3

Most common categories SSH 18 Brute-Force 16 Port Scan 3 Exploited Host 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Petre 21_ip	2026-11-08 21:48:01 UTC · (2 days ago)	2026-11-08T22:48:00.538446+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=210.79.191.49 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=39306 DF PROTO=TCP SPT=40748 DPT=2222 WINDOW=64240 RES= ... show more 2026-11-08T22:48:00.538446+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=210.79.191.49 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x20 TTL=49 ID=39306 DF PROTO=TCP SPT=40748 DPT=2222 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇭🇺 miszterx.hu	2026-11-08 12:01:06 UTC · (3 days ago)	XORP (SSH auth): 30x failed SSH authentication (auth_result:FAIL) in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)	Brute-Force SSH
🇫🇮 botwork.se	2026-11-08 10:29:32 UTC · (3 days ago)	2026-11-08T10:28:22.944889+00:00 debian-4gb-hel1-2 sshd[2273235]: Failed password for root from 210.79.191.49 port 51050 ssh2 2026-11-08T10:28:56.574185+00:00 debian-4gb-hel1-2 sshd[2274405]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more 2026-11-08T10:28:22.944889+00:00 debian-4gb-hel1-2 sshd[2273235]: Failed password for root from 210.79.191.49 port 51050 ssh2 2026-11-08T10:28:56.574185+00:00 debian-4gb-hel1-2 sshd[2274405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-08T10:28:58.022362+00:00 debian-4gb-hel1-2 sshd[2274405]: Failed password for root from 210.79.191.49 port 37662 ssh2 2026-11-08T10:29:30.313733+00:00 debian-4gb-hel1-2 sshd[2275541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-08T10:29:31.762047+00:00 debian-4gb-hel1-2 sshd[2275541]: Failed password for root from 210.79.191.49 port 60690 ssh2 ... show less	Brute-Force SSH
🇵🇱 lns.bz	2026-11-08 10:27:50 UTC · (3 days ago)	SSH bruteforce [BY]	SSH
🇫🇷 kisiek	2026-11-08 04:27:47 UTC · (3 days ago)	(sshd) Failed SSH login from 210.79.191.49 (ID/Indonesia/ip210-79-191-49.cloudhost.web.id): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 8 05:26:29 zone sshd[2669347]: pam_unix(sshd:auth): authentication failure; ... show more (sshd) Failed SSH login from 210.79.191.49 (ID/Indonesia/ip210-79-191-49.cloudhost.web.id): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 8 05:26:29 zone sshd[2669347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root Nov 8 05:26:31 zone sshd[2669347]: Failed password for root from 210.79.191.49 port 40990 ssh2 Nov 8 05:27:04 zone sshd[2669486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root Nov 8 05:27:06 zone sshd[2669486]: Failed password for root from 210.79.191.49 port 37376 ssh2 Nov 8 05:27:42 zone sshd[2669601]: Invalid user cic from 210.79.191.49 port 40322 show less	Port Scan
🇩🇪 mxpgmbh	2026-11-07 22:30:06 UTC · (3 days ago)	2026-11-07T23:29:29.298992+01:00 ** sshd-session[60063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-07T23:29:30.674426+01:00 sshd-session[60063]: Failed password for ... show more 2026-11-07T23:29:29.298992+01:00 sshd-session[60063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-07T23:29:30.674426+01:00 sshd-session[60063]: Failed password for root from 210.79.191.49 port 48394 ssh2 2026-11-07T23:30:02.422437+01:00 sshd-session[60114]: Invalid user from 210.79.191.49 port 59538 2026-11-07T23:30:02.428159+01:00 sshd-session[60114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 2026-11-07T23:30:04.574956+01:00 sshd-session[60114]: Failed password for invalid user ** from 210.79.191.49 port 59538 ssh2 show less	Brute-Force SSH
🇺🇸 hostseries	2026-11-07 10:23:37 UTC · (4 days ago)	Trigger: LF_SSHD	Brute-Force
Anonymous	2026-11-07 07:23:32 UTC · (4 days ago)	(sshd) Failed SSH login from 210.79.191.49 (ID/Indonesia/ip210-79-191-49.cloudhost.web.id): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 7 17:35:18 syd2 sshd[1370017]: Invalid user analog from 210.79.191.49 port 4 ... show more (sshd) Failed SSH login from 210.79.191.49 (ID/Indonesia/ip210-79-191-49.cloudhost.web.id): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 7 17:35:18 syd2 sshd[1370017]: Invalid user analog from 210.79.191.49 port 47964 Nov 7 17:35:20 syd2 sshd[1370017]: Failed password for invalid user analog from 210.79.191.49 port 47964 ssh2 Nov 7 18:22:48 syd2 sshd[1374360]: Invalid user mobiel from 210.79.191.49 port 56336 Nov 7 18:22:50 syd2 sshd[1374360]: Failed password for invalid user mobiel from 210.79.191.49 port 56336 ssh2 Nov 7 18:23:25 syd2 sshd[1374392]: Invalid user suse from 210.79.191.49 port 39538 show less	Port Scan
🇨🇦 SSH-Admin	2026-11-07 04:00:15 UTC · (4 days ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇳🇱 DIICOT	2026-11-06 19:19:20 UTC · (4 days ago)	Sustained SSH dictionary attack with 3 attempts targeting common service accounts (root, admin, oracle).	SSH
🇩🇪 mxpgmbh	2026-11-05 22:21:35 UTC · (5 days ago)	2026-11-05T23:20:56.250402+01:00 ** sshd-session[19350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-05T23:20:57.686608+01:00 sshd-session[19350]: Failed password for ... show more 2026-11-05T23:20:56.250402+01:00 sshd-session[19350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root 2026-11-05T23:20:57.686608+01:00 sshd-session[19350]: Failed password for root from 210.79.191.49 port 52544 ssh2 2026-11-05T23:21:32.580205+01:00 sshd-session[21457]: Invalid user from 210.79.191.49 port 32940 2026-11-05T23:21:32.581768+01:00 sshd-session[21457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 2026-11-05T23:21:34.435076+01:00 sshd-session[21457]: Failed password for invalid user ** from 210.79.191.49 port 32940 ssh2 show less	Brute-Force SSH
🇺🇸 k3rn3l109	2026-11-05 22:17:08 UTC · (5 days ago)	Sentinel honeypot: cowrie-ssh-bait hit on fake SSH service (server-01-CA) UA=cowrie/ssh	Brute-Force SSH Hacking
🇺🇸 sh97	2026-11-05 19:17:46 UTC · (5 days ago)	US01-CB-WA: SSH Brute Force from 210.79.191.49 at 2026-11-06 00:47:46 IST	Brute-Force SSH
🇺🇸 66691337	2026-11-05 13:17:57 UTC · (6 days ago)	Nov 5 08:16:33 mail sshd[3394962]: Invalid user victor from 210.79.191.49 port 47812 Nov 5 08:16:33 mail sshd[3394962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 Nov 5 08:16:35 mail sshd ... show more Nov 5 08:16:33 mail sshd[3394962]: Invalid user victor from 210.79.191.49 port 47812 Nov 5 08:16:33 mail sshd[3394962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 Nov 5 08:16:35 mail sshd[3394962]: Failed password for invalid user victor from 210.79.191.49 port 47812 ssh2 Nov 5 08:17:13 mail sshd[3395059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 user=root Nov 5 08:17:15 mail sshd[3395059]: Failed password for root from 210.79.191.49 port 53432 ssh2 Nov 5 08:17:53 mail sshd[3395147]: Invalid user marc from 210.79.191.49 port 49142 Nov 5 08:17:53 mail sshd[3395147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 Nov 5 08:17:56 mail sshd[3395147]: Failed password for invalid user marc from 210.79.191.49 port 49142 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-04 19:13:18 UTC · (6 days ago)	2026-11-04T21:06:58.753912+02:00 mail.chill.at sshd[3823135]: Failed password for invalid user piyush from 210.79.191.49 port 38154 ssh2 2026-11-04T21:12:41.489114+02:00 mail.chill.at sshd[3824365]: Invalid user cyber from 210.79.191.49 port 57184 20 ... show more 2026-11-04T21:06:58.753912+02:00 mail.chill.at sshd[3823135]: Failed password for invalid user piyush from 210.79.191.49 port 38154 ssh2 2026-11-04T21:12:41.489114+02:00 mail.chill.at sshd[3824365]: Invalid user cyber from 210.79.191.49 port 57184 2026-11-04T21:12:41.496305+02:00 mail.chill.at sshd[3824365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.79.191.49 2026-11-04T21:12:43.856816+02:00 mail.chill.at sshd[3824365]: Failed password for invalid user cyber from 210.79.191.49 port 57184 ssh2 2026-11-04T21:13:17.433047+02:00 mail.chill.at sshd[3824404]: Invalid user steam from 210.79.191.49 port 56640 show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 40.80.203.62

🇲🇦 196.64.222.65

🇺🇸 172.59.137.200

🇨🇳 123.245.85.5

🇧🇩 103.41.245.26

🇬🇧 89.37.172.153

🇺🇸 34.74.242.206

🇺🇸 212.87.218.35

🇵🇰 111.92.130.210

🇭🇰 101.36.106.78

🇺🇸 89.19.35.112

🇷🇴 2.57.121.112

🇺🇦 176.98.89.226

🇬🇧 104.194.141.138

🇰🇿 95.57.239.26

🇨🇦 85.217.149.71

🇺🇸 84.32.53.99

🇬🇧 82.18.76.112

🇺🇸 45.135.1.70

🇺🇸 185.61.222.123