JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.118.158.41

Neutral Activity

Abuse confidence score ?

0% Low Risk

27 reports

13 reporters · latest 8 months ago

ISP	CHINANET xinjiang province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	xjtelecom.com.cn
Country	🇨🇳 China
City	Urumqi, Xinjiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.118.158.41 has been reported 27 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 49.118.158.41

Export CSV

This IP address has been reported a total of 27 times from 13 distinct sources. 49.118.158.41 was first reported on September 16th 2024, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 darksaumon.fr	2026-01-16 17:01:58 (8 months ago)	SSH-Multi login Attempt	Brute-Force SSH
🇫🇷 darksaumon.fr	2026-01-14 13:45:19 (8 months ago)	SSH-Multi login Attempt	Brute-Force SSH
🇫🇷 darksaumon.fr	2025-01-29 17:07:09 (1 year ago)	SSH-Multi login Attempt	Brute-Force SSH
🇫🇷 darksaumon.fr	2024-10-07 12:18:36 (1 year ago)	SSH-Multi login Attempt	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-09-25 20:54:18 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-24 20:54:20 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2024-09-23 14:21:15 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇳🇱 ak47suk1.my	2024-09-23 04:46:54 (2 years ago)	Sep 23 04:46:23 horseguai sshd[262703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 23 04:46:23 horseguai sshd[262703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.118.158.41 Sep 23 04:46:26 horseguai sshd[262703]: Failed password for invalid user bxy from 49.118.158.41 port 9526 ssh2 Sep 23 04:46:51 horseguai sshd[262738]: Invalid user zhangchi from 49.118.158.41 port 11632 Sep 23 04:46:52 horseguai sshd[262738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.118.158.41 Sep 23 04:46:53 horseguai sshd[262738]: Failed password for invalid user zhangchi from 49.118.158.41 port 11632 ssh2 ... show less	Brute-Force SSH
🇬🇧 Birdo	2024-09-23 00:39:38 (2 years ago)	[Birdo Server] SSH-Multi login Attempt	Port Scan Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-09-22 20:54:24 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-22 00:54:25 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-21 20:54:26 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 ak47suk1.my	2024-09-21 12:47:37 (2 years ago)	Sep 21 12:47:03 horseguai sshd[181960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 21 12:47:03 horseguai sshd[181960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.118.158.41 Sep 21 12:47:05 horseguai sshd[181960]: Failed password for invalid user user from 49.118.158.41 port 12942 ssh2 Sep 21 12:47:34 horseguai sshd[181962]: Invalid user hhy from 49.118.158.41 port 11021 Sep 21 12:47:34 horseguai sshd[181962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.118.158.41 Sep 21 12:47:36 horseguai sshd[181962]: Failed password for invalid user hhy from 49.118.158.41 port 11021 ssh2 ... show less	Brute-Force SSH
🇦🇪 abusiveIntelligence	2024-09-21 09:20:00 (2 years ago)	SSH Authentication Brute Force Attempt	Brute-Force
🇬🇧 Birdo	2024-09-21 04:04:27 (2 years ago)	[Birdo Server] SSH-Multi login Attempt	Port Scan Brute-Force SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 109.160.32.176

🇨🇳 203.189.221.17

🇬🇧 193.163.125.195

🇺🇸 191.96.196.91

🇮🇩 152.32.153.235

🇺🇸 146.190.149.85

🇺🇸 136.70.51.242

🇺🇸 129.121.139.106

🇨🇳 119.185.26.250

🇻🇳 103.200.22.154

🇨🇮 102.209.222.5

🇬🇧 82.140.134.127

🇺🇸 66.132.172.188

🇫🇷 51.75.119.69

🇺🇸 44.201.163.116

🇺🇸 40.80.204.123

🇺🇸 23.94.66.4

🇺🇸 216.75.132.221

🇺🇸 207.90.244.28

🇬🇧 195.206.182.202