AbuseIPDB » 218.78.49.42

218.78.49.42 was found in our database!

This IP was reported 651 times. Confidence of Abuse is 100%: ?

100%

ISP	ChinaNet Shanghai Province Network
Usage Type	Unknown
Hostname(s)	42.49.78.218.dial.xw.sh.dynamic.163data.com.cn
Domain Name	chinatelecom.com.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 218.78.49.42

Whois 218.78.49.42

IP Abuse Reports for 218.78.49.42:

This IP address has been reported a total of 651 times from 364 distinct sources. 218.78.49.42 was first reported on September 6th 2024, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Mike	2024-10-04 14:55:01 (14 minutes ago)	Brute force sshd	Brute-Force SSH
amit177	2024-10-04 13:58:48 (1 hour ago)		Brute-Force SSH
heybrodes.com	2024-10-04 10:41:35 (4 hours ago)	Oct 4 10:33:43 phpbb3 sshd[2647235]: Invalid user frappe from 218.78.49.42 port 34696 Oct 4 ... show moreOct 4 10:33:43 phpbb3 sshd[2647235]: Invalid user frappe from 218.78.49.42 port 34696 Oct 4 10:41:35 phpbb3 sshd[2647715]: Invalid user postgres from 218.78.49.42 port 45390 show less	Brute-Force SSH
Jnthn	2024-10-04 08:30:41 (6 hours ago)	Oct 4 10:30:38 AbuseCatcher sshd[252317]: Invalid user debian from 218.78.49.42 port 46306 .. ... show moreOct 4 10:30:38 AbuseCatcher sshd[252317]: Invalid user debian from 218.78.49.42 port 46306 ... show less	Brute-Force SSH
ranklord	2024-10-04 08:29:40 (6 hours ago)	Oct 4 08:29:39 webo sshd[338428]: Invalid user debian from 218.78.49.42 port 56932 Oct 4 08: ... show moreOct 4 08:29:39 webo sshd[338428]: Invalid user debian from 218.78.49.42 port 56932 Oct 4 08:29:39 webo sshd[338428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 ... show less	Brute-Force SSH
dj-packet	2024-10-04 08:20:48 (6 hours ago)	Oct 4 01:16:49 nunnother sshd\[22138\]: Invalid user git from 218.78.49.42 port 42270 Oct 4 ... show moreOct 4 01:16:49 nunnother sshd\[22138\]: Invalid user git from 218.78.49.42 port 42270 Oct 4 01:16:49 nunnother sshd\[22138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 Oct 4 01:16:52 nunnother sshd\[22138\]: Failed password for invalid user git from 218.78.49.42 port 42270 ssh2 Oct 4 01:20:46 nunnother sshd\[22274\]: Invalid user ftpuser from 218.78.49.42 port 50422 Oct 4 01:20:46 nunnother sshd\[22274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 ... show less	Brute-Force SSH
Your_Top	2024-10-04 07:40:14 (7 hours ago)	Oct 4 00:35:46 cm0zabbbix00 sshd[487601]: Invalid user testuser from 218.78.49.42 port 54254 ... show moreOct 4 00:35:46 cm0zabbbix00 sshd[487601]: Invalid user testuser from 218.78.49.42 port 54254 Oct 4 00:37:45 cm0zabbbix00 sshd[487687]: Invalid user ftpuser from 218.78.49.42 port 47720 Oct 4 00:38:38 cm0zabbbix00 sshd[487781]: Invalid user dev from 218.78.49.42 port 59784 Oct 4 00:39:24 cm0zabbbix00 sshd[487929]: Invalid user sammy from 218.78.49.42 port 43622 Oct 4 00:40:13 cm0zabbbix00 sshd[487946]: Invalid user newuser from 218.78.49.42 port 55692 ... show less	Brute-Force SSH
Anonymous	2024-10-04 07:38:08 (7 hours ago)	2024-10-04T07:31:10.744890+00:00 mail sshd[944906]: Invalid user testuser from 218.78.49.42 port 515 ... show more2024-10-04T07:31:10.744890+00:00 mail sshd[944906]: Invalid user testuser from 218.78.49.42 port 51554 2024-10-04T07:37:16.873064+00:00 mail sshd[945100]: Invalid user ftpuser from 218.78.49.42 port 50122 2024-10-04T07:38:07.764861+00:00 mail sshd[945162]: Invalid user dev from 218.78.49.42 port 33960 ... show less	Brute-Force SSH
Markus Media	2024-10-04 07:31:02 (7 hours ago)	Excessive number of failed login attempts detected by Fail2Ban on ssh	Brute-Force
Anonymous	2024-10-04 06:59:13 (8 hours ago)	218.78.49.42 (CN/China/-), 7 distributed sshd attacks on account [ftpuser] in the last 3600 secs; Po ... show more218.78.49.42 (CN/China/-), 7 distributed sshd attacks on account [ftpuser] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 4 02:56:18 server2 sshd[1846]: Invalid user ftpuser from 60.53.226.62 port 45972 Oct 4 02:56:18 server2 sshd[1846]: Failed password for invalid user ftpuser from 60.53.226.62 port 45972 ssh2 Oct 4 02:58:06 server2 sshd[2167]: Invalid user ftpuser from 218.78.49.42 port 60936 Oct 4 02:58:06 server2 sshd[2167]: Failed password for invalid user ftpuser from 218.78.49.42 port 60936 ssh2 Oct 4 02:59:06 server2 sshd[2431]: Invalid user ftpuser from 36.111.175.18 port 35008 Oct 4 02:30:30 server2 sshd[27651]: Invalid user ftpuser from 222.253.33.98 port 34250 Oct 4 02:30:30 server2 sshd[27651]: Failed password for invalid user ftpuser from 222.253.33.98 port 34250 ssh2 IP Addresses Blocked: 60.53.226.62 (MY/Malaysia/-) show less	Brute-Force
diego	2024-10-04 06:29:27 (8 hours ago)	[rede-44-49] (sshd) Failed SSH login from 218.78.49.42 (CN/China/42.49.78.218.dial.xw.sh.dynamic.163 ... show more[rede-44-49] (sshd) Failed SSH login from 218.78.49.42 (CN/China/42.49.78.218.dial.xw.sh.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 4 03:27:21 sshd[10528]: Invalid user [USERNAME] from 218.78.49.42 port 50650 Oct 4 03:27:23 sshd[10528]: Failed password for invalid user [USERNAME] from 218.78.49.42 port 50650 ssh2 Oct 4 03:28:30 sshd[10847]: Invalid user [USERNAME] from 218.78.49.42 port 37474 Oct 4 03:28:32 sshd[10847]: Failed password for invalid user [USERNAME] from 218.78.49.42 port 37474 ssh2 Oct 4 03:29:21 sshd[11037]: Invalid user [USERNAME] from 218.78.49.42 port 49620 show less	Port Scan
ForumPlayer	2024-10-04 06:18:05 (8 hours ago)	2024-10-04T06:08:51.813356+00:00 arch.xny sshd[548332]: Failed password for invalid user steam from ... show more2024-10-04T06:08:51.813356+00:00 arch.xny sshd[548332]: Failed password for invalid user steam from 218.78.49.42 port 38354 ssh2 2024-10-04T06:17:45.975424+00:00 arch.xny sshd[548437]: Invalid user user from 218.78.49.42 port 59582 2024-10-04T06:17:45.985894+00:00 arch.xny sshd[548437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 2024-10-04T06:17:48.156012+00:00 arch.xny sshd[548437]: Failed password for invalid user user from 218.78.49.42 port 59582 ssh2 2024-10-04T06:18:04.867076+00:00 arch.xny sshd[548440]: Invalid user user from 218.78.49.42 port 34996 ... show less	Brute-Force SSH
UB	2024-10-04 05:28:48 (9 hours ago)	<brute-forcing>	Brute-Force SSH
Gamer Man	2024-10-04 04:43:01 (10 hours ago)	Oct 4 07:39:27 ubuntu-MQTT sshd[27026]: Failed password for invalid user jenkins from 218.78.49.42 ... show moreOct 4 07:39:27 ubuntu-MQTT sshd[27026]: Failed password for invalid user jenkins from 218.78.49.42 port 35924 ssh2 Oct 4 07:42:08 ubuntu-MQTT sshd[27053]: Invalid user es from 218.78.49.42 port 34388 Oct 4 07:42:08 ubuntu-MQTT sshd[27053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 Oct 4 07:42:10 ubuntu-MQTT sshd[27053]: Failed password for invalid user es from 218.78.49.42 port 34388 ssh2 Oct 4 07:43:00 ubuntu-MQTT sshd[27085]: Invalid user jenkins from 218.78.49.42 port 46284 ... show less	Brute-Force SSH
miklos_akos	2024-10-04 03:54:04 (11 hours ago)	Oct 4 05:54:01 nsmailweb sshd[1240049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreOct 4 05:54:01 nsmailweb sshd[1240049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.49.42 Oct 4 05:54:04 nsmailweb sshd[1240049]: Failed password for invalid user postgres from 218.78.49.42 port 42898 ssh2 ... show less	Brute-Force SSH