JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.159.201.61

49.159.201.61 was found in our database!

This IP was reported 412 times. Confidence of Abuse is 0%: ?

ISP	TFN MEDIA CO., LTD.
Usage Type	Fixed Line ISP
ASN	AS24163
Hostname(s)	49-159-201-61.dynamic.elinx.com.tw
Domain Name	tfn.net.tw
Country	🇹🇼 Taiwan
City	Yilan, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.159.201.61

Whois 49.159.201.61

IP Abuse Reports for 49.159.201.61:

This IP address has been reported a total of 412 times from 156 distinct sources. 49.159.201.61 was first reported on January 13th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AdrianT	2023-03-06 15:29:41 (3 years ago)	SSH brute force	Brute-Force SSH
🇩🇪 itbyhf	2023-02-16 09:02:29 (3 years ago)	Feb 16 10:02:09 pve05 sshd[3659032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Feb 16 10:02:09 pve05 sshd[3659032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.159.201.61 Feb 16 10:02:11 pve05 sshd[3659032]: Failed password for invalid user oracle from 49.159.201.61 port 37013 ssh2 Feb 16 10:02:19 pve05 sshd[3659032]: Failed password for invalid user oracle from 49.159.201.61 port 37013 ssh2 Feb 16 10:02:25 pve05 sshd[3659032]: Failed password for invalid user oracle from 49.159.201.61 port 37013 ssh2 Feb 16 10:02:28 pve05 sshd[3659032]: Failed password for invalid user oracle from 49.159.201.61 port 37013 ssh2 ... show less	Brute-Force SSH
🇿🇦 IrisFlower	2023-02-15 22:17:01 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-02-14 22:29:58 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
🇩🇪 Bernhard Fürst	2023-02-14 20:07:25 (3 years ago)	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 49.159.201.61, Reason:[4 ... show more Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 49.159.201.61, Reason:[49.159.201.61 (TW/Taiwan/49-159-201-61.dynamic.elinx.com.tw), 5 distributed sshd attacks on account [root] in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇿🇦 IrisFlower	2023-02-14 19:47:24 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
🇩🇪 JavaStart	2023-02-14 18:41:26 (3 years ago)	Feb 14 19:41:16 vmi174663 sshd[308749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Feb 14 19:41:16 vmi174663 sshd[308749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.159.201.61 Feb 14 19:41:18 vmi174663 sshd[308749]: Failed password for invalid user gitlab-runner from 49.159.201.61 port 56396 ssh2 Feb 14 19:41:22 vmi174663 sshd[308749]: Failed password for invalid user gitlab-runner from 49.159.201.61 port 56396 ssh2 Feb 14 19:41:25 vmi174663 sshd[308749]: Failed password for invalid user gitlab-runner from 49.159.201.61 port 56396 ssh2 Feb 14 19:41:26 vmi174663 sshd[308749]: Failed password for invalid user gitlab-runner from 49.159.201.61 port 56396 ssh2 ... show less	Brute-Force SSH
🇹🇭 Sawasdee	2023-02-14 15:51:12 (3 years ago)	SSH break in attempt ...	SSH
🇨🇳 ThreatBook.io	2023-02-13 22:51:09 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.159.201.61	SSH
🇿🇦 IrisFlower	2023-02-13 21:47:55 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
🇩🇪 bret.dk	2023-02-13 19:48:18 (3 years ago)	Feb 13 19:48:16 dev sshd[1231803]: Invalid user ONTUSER from 49.159.201.61 port 33195 Feb 13 19:48:1 ... show more Feb 13 19:48:16 dev sshd[1231803]: Invalid user ONTUSER from 49.159.201.61 port 33195 Feb 13 19:48:17 dev sshd[1231803]: Failed password for invalid user ONTUSER from 49.159.201.61 port 33195 ssh2 ... show less	Brute-Force SSH
🇿🇦 IrisFlower	2023-02-13 19:15:50 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-02-13 01:50:47 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking
Anonymous	2023-02-13 00:19:40 (3 years ago)	Feb 13 00:19:37 scw-6657dc sshd[15490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Feb 13 00:19:37 scw-6657dc sshd[15490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.159.201.61 Feb 13 00:19:37 scw-6657dc sshd[15490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.159.201.61 Feb 13 00:19:39 scw-6657dc sshd[15490]: Failed password for invalid user admin from 49.159.201.61 port 33807 ssh2 ... show less	Brute-Force SSH
🇿🇦 IrisFlower	2023-02-12 22:42:44 (3 years ago)	Unauthorized connection attempt detected from IP address 49.159.201.61 to port 22 [J]	Port Scan Hacking

Showing 1 to 15 of 412 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 217.65.79.156

🇩🇪 207.154.230.149

🇭🇰 199.45.155.109

🇺🇸 157.245.245.246

🇯🇵 140.238.42.208

🇨🇳 122.231.161.37

🇺🇸 35.212.223.231

🇺🇸 15.204.211.98

🇬🇧 185.247.137.181

🇹🇭 150.95.82.21

🇫🇮 147.185.133.40

🇻🇳 112.137.143.2

🇯🇵 57.182.87.25

🇺🇸 34.228.52.169

🇭🇺 193.68.57.43

🇰🇷 152.67.209.202

🇭🇰 152.32.212.226

🇨🇳 113.57.186.99

🇯🇵 218.251.80.200

🇨🇳 182.124.133.226