This IP address has been reported a total of
72
times from
59 distinct
sources.
49.162.255.210 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Brute-Force
SSH
Anonymous
[Firewall] SSH Brute-Force | Proto: TCP (NEW) | Src port: 53359 | Dst port: 22 (SSH) | Pkt len: 44 | ...
show more[Firewall] SSH Brute-Force | Proto: TCP (NEW) | Src port: 53359 | Dst port: 22 (SSH) | Pkt len: 44 | Attempts logged: 2 | ISP: LG POWERCOMM | Origin: Yongsan-dong, South Korea | Prior AbuseIPDB score: 100% (68 reports) | Detected: 2026-07-27 21:23 CST | Promoted to blacklist after repeated attempts | Banned: 6d20h23m22s
show less
Jul 27 01:08:00 kore sshd[230005]: Failed password for root from 49.162.255.210 port 36463 ssh2
Jul ...
show moreJul 27 01:08:00 kore sshd[230005]: Failed password for root from 49.162.255.210 port 36463 ssh2
Jul 27 01:08:03 kore sshd[230005]: Failed password for root from 49.162.255.210 port 36463 ssh2
Jul 27 01:08:15 kore sshd[230005]: Failed password for root from 49.162.255.210 port 36463 ssh2
...
show less
2026-07-26T16:13:22.754395-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49. ...
show more2026-07-26T16:13:22.754395-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49.162.255.210 port 34724 ssh2
2026-07-26T16:13:26.696837-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49.162.255.210 port 34724 ssh2
2026-07-26T16:13:29.730786-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49.162.255.210 port 34724 ssh2
2026-07-26T16:13:32.683807-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49.162.255.210 port 34724 ssh2
2026-07-26T16:13:35.630906-07:00 shadownetworks.org sshd[2791162]: Failed password for root from 49.162.255.210 port 34724 ssh2
...
show less
2026-07-27T01:17:00.503729tim.mtkrbti.by sshd[8467]: Failed password for root from 49.162.255.210 po ...
show more2026-07-27T01:17:00.503729tim.mtkrbti.by sshd[8467]: Failed password for root from 49.162.255.210 port 50613 ssh2
2026-07-27T01:17:02.567653tim.mtkrbti.by sshd[8467]: Failed password for root from 49.162.255.210 port 50613 ssh2
2026-07-27T01:17:05.239758tim.mtkrbti.by sshd[8467]: Failed password for root from 49.162.255.210 port 50613 ssh2
...
show less
Wazuh Fail2Ban jail sshd source-log excerpt: 2026-07-26T16:47:24+00:00 Wazuh sshd[176527]: Disconnec ...
show moreWazuh Fail2Ban jail sshd source-log excerpt: 2026-07-26T16:47:24+00:00 Wazuh sshd[176527]: Disconnecting authenticating user root 49.162.255.210 port 37912: Too many authentication failures [preauth] 2026-07-26T16:47:35+00:00 Wazuh sshd[176530]: Disconnecting authenticating user root 49.162.255.210 port 37950: Too many authentication failures [preauth] 2026-07-26T16:47:54+00:00 Wazuh sshd[176566]: Invalid user admin from 49.162.255.210 port 38017 2026-07-26T16:47:56+00:00 Wazuh sshd[176566]: error: maximum authentication attempts exceeded for invalid user admin from 49.162.255.210 port 38017 ssh2 [preauth] 2026-07-26T16:47:56+00:00 Wazuh sshd[176566]: Disconnecting invalid user admin 49.162.255.210 port 38017: Too many authentication failures [preauth]
show less
Jul 26 05:03:15 obsidian sshd[3796711]: Failed password for root from 49.162.255.210 port 39692 ssh2 ...
show moreJul 26 05:03:15 obsidian sshd[3796711]: Failed password for root from 49.162.255.210 port 39692 ssh2
Jul 26 05:03:18 obsidian sshd[3796711]: Failed password for root from 49.162.255.210 port 39692 ssh2
Jul 26 05:03:22 obsidian sshd[3796711]: Failed password for root from 49.162.255.210 port 39692 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 72 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩