This IP address has been reported a total of
27
times from
17 distinct
sources.
49.156.39.242 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 17
reports;
Germany
with 5
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Port Scan
24
times;
Hacking
8
times;
Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unsolicited TCP connection from 49.156.39.242 to port 0 at 2026-10-24T07:33:48Z. Source IP completed ...
show moreUnsolicited TCP connection from 49.156.39.242 to port 0 at 2026-10-24T07:33:48Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 52665) to a p ...
show more🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 52665) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities).
show less
Hacking
Anonymous
2026-10-23T17:07:57.691026+02:00 vps kernel: [9138843.222396] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-23T17:07:57.691026+02:00 vps kernel: [9138843.222396] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=49.156.39.242 DST=54.37.14.118 LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=17560 DF PROTO=TCP SPT=57934 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Unsolicited TCP connection from 49.156.39.242 to port 0 at 2026-10-22T20:28:59Z. Source IP completed ...
show moreUnsolicited TCP connection from 49.156.39.242 to port 0 at 2026-10-22T20:28:59Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-10-22T05:15:52Z.
show less
