This IP address has been reported a total of
39
times from
18 distinct
sources.
49.1.11.254 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Indonesia
with 8
reports;
Hong Kong
with 6
reports;
France
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
30
times;
SSH
26
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-13T00:44:41.625527+08:00 rosemary sshd-session[3527051]: Connection closed by 49.1.11.254 po ...
show more2026-10-13T00:44:41.625527+08:00 rosemary sshd-session[3527051]: Connection closed by 49.1.11.254 port 46636 [preauth]
2026-10-13T00:48:04.565903+08:00 rosemary sshd-session[3535603]: Connection closed by authenticating user root 49.1.11.254 port 52940 [preauth]
2026-10-13T00:48:16.466936+08:00 rosemary sshd-session[3535987]: Connection closed by authenticating user root 49.1.11.254 port 47050 [preauth]
...
show less
2026-10-12T08:25:28.658180+00:00 rahwana-edge-1 sshd[3119409]: pam_unix(sshd:auth): authentication f ...
show more2026-10-12T08:25:28.658180+00:00 rahwana-edge-1 sshd[3119409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254 user=root
2026-10-12T08:25:31.306613+00:00 rahwana-edge-1 sshd[3119409]: Failed password for invalid user root from 49.1.11.254 port 53978 ssh2
2026-10-12T08:25:38.648605+00:00 rahwana-edge-1 sshd[3119443]: User root from 49.1.11.254 not allowed because not listed in AllowUsers
...
show less
2026-10-09T16:15:07.849887+00:00 vps-gabsamw sshd[907770]: Failed password for root from 49.1.11.254 ...
show more2026-10-09T16:15:07.849887+00:00 vps-gabsamw sshd[907770]: Failed password for root from 49.1.11.254 port 59994 ssh2
2026-10-09T16:15:18.043998+00:00 vps-gabsamw sshd[909691]: Invalid user pengyh from 49.1.11.254 port 41782
2026-10-09T16:15:18.282784+00:00 vps-gabsamw sshd[909691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254
2026-10-09T16:15:19.613814+00:00 vps-gabsamw sshd[909691]: Failed password for invalid user pengyh from 49.1.11.254 port 41782 ssh2
2026-10-09T16:15:28.740094+00:00 vps-gabsamw sshd[911465]: Invalid user postgres from 49.1.11.254 port 44316
...
show less
2026-10-07T07:45:59.332013-06:00 KLAS-A sshd[45638]: Connection closed by 49.1.11.254 port 58024 [pr ...
show more2026-10-07T07:45:59.332013-06:00 KLAS-A sshd[45638]: Connection closed by 49.1.11.254 port 58024 [preauth]
...
show less
Fail2Ban sshd: Oct 5 10:26:05 srv-sp sshd[1468934]: Invalid user zzh from 49.1.11.254 port 57076
Oc ...
show moreFail2Ban sshd: Oct 5 10:26:05 srv-sp sshd[1468934]: Invalid user zzh from 49.1.11.254 port 57076
Oct 5 10:26:08 srv-sp sshd[1468934]: Failed password for invalid user zzh from 49.1.11.254 port 57076 ssh2
Oct 5 10:26:22 srv-sp sshd[1468944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254 user=root
Oct 5 10:26:24 srv-sp sshd[1468944]: Failed password for root from 49.1.11.254 port 48216 ssh2
Oct 5 10:26:32 srv-sp sshd[1468950]: Invalid user kkye from 49.1.11.254 port 32942
show less
Oct 4 06:51:05 hkphoto sshd[1616655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show moreOct 4 06:51:05 hkphoto sshd[1616655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254
Oct 4 06:51:07 hkphoto sshd[1616655]: Failed password for invalid user ftpuser from 49.1.11.254 port 56446 ssh2
Oct 4 06:51:16 hkphoto sshd[1616657]: Invalid user wc from 49.1.11.254 port 59054
Oct 4 06:51:16 hkphoto sshd[1616657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254
Oct 4 06:51:17 hkphoto sshd[1616657]: Failed password for invalid user wc from 49.1.11.254 port 59054 ssh2
...
show less
2026-10-03T21:37:03.981711+08:00 rosemary sshd-session[932984]: Connection closed by 49.1.11.254 por ...
show more2026-10-03T21:37:03.981711+08:00 rosemary sshd-session[932984]: Connection closed by 49.1.11.254 port 44684 [preauth]
2026-10-03T21:39:09.944997+08:00 rosemary sshd-session[937976]: Connection closed by authenticating user root 49.1.11.254 port 44548 [preauth]
2026-10-03T21:39:19.420277+08:00 rosemary sshd-session[938339]: Invalid user yyh from 49.1.11.254 port 44554
...
show less
Brute-Force
SSH
Anonymous
2026-10-03T15:31:17.572017 blueonyx.sky-en.ru sshd[1014474]: Invalid user zhangxiaoqin from 49.1.11. ...
show more2026-10-03T15:31:17.572017 blueonyx.sky-en.ru sshd[1014474]: Invalid user zhangxiaoqin from 49.1.11.254 port 53986
2026-10-03T15:31:37.764349 blueonyx.sky-en.ru sshd[1014489]: Invalid user imc from 49.1.11.254 port 49434
2026-10-03T15:31:47.013848 blueonyx.sky-en.ru sshd[1014492]: Invalid user syslog from 49.1.11.254 port 37500
...
show less
2026-10-02T18:23:19.579899host.enerserver.co.uk sshd[7604]: pam_unix(sshd:auth): authentication fail ...
show more2026-10-02T18:23:19.579899host.enerserver.co.uk sshd[7604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254
2026-10-02T18:23:21.989294host.enerserver.co.uk sshd[7604]: Failed password for invalid user node2 from 49.1.11.254 port 47596 ssh2
2026-10-02T18:23:29.770265host.enerserver.co.uk sshd[7607]: Invalid user shell from 49.1.11.254 port 51144
2026-10-02T18:23:29.998518host.enerserver.co.uk sshd[7607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.1.11.254
2026-10-02T18:23:32.112629host.enerserver.co.uk sshd[7607]: Failed password for invalid user shell from 49.1.11.254 port 51144 ssh2
...
show less
2026-10-01T09:43:58.526021+03:00 t-service-ubs-fi sshd[406437]: Invalid user wcx from 49.1.11.254 po ...
show more2026-10-01T09:43:58.526021+03:00 t-service-ubs-fi sshd[406437]: Invalid user wcx from 49.1.11.254 port 56786
2026-10-01T09:44:10.128645+03:00 t-service-ubs-fi sshd[406443]: Invalid user jhjeong from 49.1.11.254 port 47112
2026-10-01T09:44:22.743821+03:00 t-service-ubs-fi sshd[406447]: Invalid user zhangmengqi from 49.1.11.254 port 36392
2026-10-01T09:44:32.150007+03:00 t-service-ubs-fi sshd[406451]: Invalid user hadoop from 49.1.11.254 port 58556
2026-10-01T09:44:40.885207+03:00 t-service-ubs-fi sshd[406455]: Invalid user xielab from 49.1.11.254 port 34152
...
show less
