JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.13.167.158

Neutral Activity

Abuse Confidence Score

0% Low Risk

70 reports

42 reporters · latest 6 months ago

ISP: Hetzner Online GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS24940
Hostname(s): static.158.167.13.49.clients.your-server.de
Domain Name: hetzner.com
Country: 🇩🇪 Germany
City: Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.13.167.158 has been reported 70 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

70 from 42 distinct reporters

First reported

November 3rd 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:25 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-05 20:09:45 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-11-04 23:41:49 UTC · (1 year ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/49.13.167.158	SSH
🇹🇷 rtbh.com.tr	2025-11-04 20:09:44 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-11-04 03:00:44 UTC · (1 year ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇺🇸 bigscoots.com	2025-11-03 16:21:59 UTC · (1 year ago)	49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 10:19:32 14123 sshd[7250]: pam_unix(sshd:auth): a ... show more 49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 10:19:32 14123 sshd[7250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.249.245.22 user=root Nov 3 10:19:34 14123 sshd[7250]: Failed password for root from 45.249.245.22 port 47224 ssh2 Nov 3 10:20:59 14123 sshd[7390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 10:21:00 14123 sshd[7390]: Failed password for root from 49.13.167.158 port 57578 ssh2 Nov 3 10:21:42 14123 sshd[7455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.225.146.23 user=root IP Addresses Blocked: 45.249.245.22 (HK/Hong Kong/-) show less	Brute-Force SSH
🇪🇸 hispasign	2025-11-03 15:48:11 UTC · (1 year ago)	SSH Bruteforce Attempt [node 6]	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-03 15:44:14 UTC · (1 year ago)	49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 09:43:24 15070 sshd[11349]: pam_unix(sshd:auth): ... show more 49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 09:43:24 15070 sshd[11349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 09:43:25 15070 sshd[11349]: Failed password for root from 49.13.167.158 port 55970 ssh2 Nov 3 09:44:03 15070 sshd[11408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.136.219 user=root Nov 3 09:39:55 15070 sshd[11050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 09:39:57 15070 sshd[11050]: Failed password for root from 49.13.167.158 port 36262 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 SirHiltonBradley	2025-11-03 15:43:27 UTC · (1 year ago)	2025-11-03T07:49:11.845259-08:00 dc sshd[1520592]: Disconnected from authenticating user root 49.13.167.158 port 38140 [preauth] 2025-11-03T07:52:35.638344-08:00 dc sshd[1520750]: Disconnected from authenticating user root 49.13.167.158 port 47854 [p ... show more 2025-11-03T07:49:11.845259-08:00 dc sshd[1520592]: Disconnected from authenticating user root 49.13.167.158 port 38140 [preauth] 2025-11-03T07:52:35.638344-08:00 dc sshd[1520750]: Disconnected from authenticating user root 49.13.167.158 port 47854 [preauth] ... show less	Hacking Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-03 15:03:12 UTC · (1 year ago)	49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 09:02:50 15701 sshd[5223]: pam_unix(sshd:auth): a ... show more 49.13.167.158 (DE/Germany/static.158.167.13.49.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 3 09:02:50 15701 sshd[5223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 09:00:40 15701 sshd[5063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 09:00:43 15701 sshd[5063]: Failed password for root from 49.13.167.158 port 42504 ssh2 Nov 3 08:58:32 15701 sshd[4904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.144.65 user=root Nov 3 08:58:34 15701 sshd[4904]: Failed password for root from 103.217.144.65 port 42592 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 altux	2025-11-03 15:02:39 UTC · (1 year ago)	2025-11-03T16:00:03.626216firelutry sshd[2940811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root 2025-11-03T16:00:05.959508firelutry sshd[2940811]: Failed password for invalid user ro ... show more 2025-11-03T16:00:03.626216firelutry sshd[2940811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root 2025-11-03T16:00:05.959508firelutry sshd[2940811]: Failed password for invalid user root from 49.13.167.158 port 47874 ssh2 2025-11-03T16:02:39.241544firelutry sshd[2941340]: User root from 49.13.167.158 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2025-11-03 15:02:12 UTC · (1 year ago)	Nov 3 16:02:10 myserver sshd[1867357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 16:02:12 myserver sshd[1867357]: Failed password for root from 49.13.167.158 port 41054 ss ... show more Nov 3 16:02:10 myserver sshd[1867357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.13.167.158 user=root Nov 3 16:02:12 myserver sshd[1867357]: Failed password for root from 49.13.167.158 port 41054 ssh2 ... show less	Brute-Force SSH
🇺🇸 anon333	2025-11-03 14:34:02 UTC · (1 year ago)	Hacker syslog review 1762180441	Hacking
🇺🇦 venko	2025-11-03 14:26:24 UTC · (1 year ago)	F2B/SSH	Brute-Force SSH
Anonymous	2025-11-03 14:23:48 UTC · (1 year ago)		Brute-Force SSH

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 189.81.214.149

🇺🇸 137.184.155.25

🇺🇸 135.222.174.121

🇺🇸 134.209.117.89

🇸🇬 114.119.154.186

🇺🇸 104.168.67.144

🇩🇪 69.5.169.104

🇺🇸 45.146.55.225

🇩🇪 193.124.20.252

🇺🇸 192.253.209.123

🇺🇸 192.241.135.210

🇲🇽 189.224.43.153

🇲🇽 187.190.35.163

🇲🇽 187.188.64.40

🇺🇸 136.60.164.62

🇨🇳 120.86.180.143

🇳🇱 109.160.32.147

🇿🇦 102.66.181.23

🇳🇱 64.205.72.206

🇮🇩 43.165.198.144