This IP address has been reported a total of
35
times from
34 distinct
sources.
49.204.152.71 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-16T15:58:25.348271+00:00 noctra sshd[340721]: Invalid user user from 49.204.152.71 port 5548 ...
show more2026-07-16T15:58:25.348271+00:00 noctra sshd[340721]: Invalid user user from 49.204.152.71 port 55482
2026-07-16T15:58:26.348503+00:00 noctra sshd[340723]: Invalid user user from 49.204.152.71 port 55490
2026-07-16T15:58:32.165173+00:00 noctra sshd[340725]: Invalid user user from 49.204.152.71 port 55492
...
show less
Jul 16 14:37:39 rotator sshd\[25954\]: Failed password for root from 49.204.152.71 port 48746 ssh2Ju ...
show moreJul 16 14:37:39 rotator sshd\[25954\]: Failed password for root from 49.204.152.71 port 48746 ssh2Jul 16 14:37:46 rotator sshd\[25957\]: Address 49.204.152.71 maps to broadband.actcorp.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 16 14:37:48 rotator sshd\[25957\]: Failed password for root from 49.204.152.71 port 44762 ssh2Jul 16 14:37:49 rotator sshd\[25960\]: Address 49.204.152.71 maps to broadband.actcorp.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
...
show less
2026-07-16T12:09:31.467878+00:00 debian-4gb-nbg1-1 sshd-session[1134284]: Invalid user user from 49. ...
show more2026-07-16T12:09:31.467878+00:00 debian-4gb-nbg1-1 sshd-session[1134284]: Invalid user user from 49.204.152.71 port 54040
2026-07-16T12:09:32.277598+00:00 debian-4gb-nbg1-1 sshd-session[1134286]: Invalid user user from 49.204.152.71 port 54048
2026-07-16T12:09:33.126652+00:00 debian-4gb-nbg1-1 sshd-session[1134288]: Invalid user user from 49.204.152.71 port 48754
...
show less
(sshd) Failed SSH login from 49.204.152.71 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; ...
show more(sshd) Failed SSH login from 49.204.152.71 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 16 13:40:20 da057 sshd[528830]: Invalid user user from 49.204.152.71 port 48448
Jul 16 13:40:21 da057 sshd[528858]: Invalid user user from 49.204.152.71 port 48462
Jul 16 13:40:22 da057 sshd[528886]: Invalid user user from 49.204.152.71 port 48468
Jul 16 13:40:23 da057 sshd[528898]: Invalid user user from 49.204.152.71 port 59440
Jul 16 13:40:24 da057 sshd[528907]: Invalid user user from 49.204.152.71 port 59448
show less
2026-07-16T13:08:49.387737+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725189]: Connection clos ...
show more2026-07-16T13:08:49.387737+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725189]: Connection closed by authenticating user root 49.204.152.71 port 42628 [preauth]
2026-07-16T13:08:50.482606+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725191]: Connection closed by authenticating user root 49.204.152.71 port 42640 [preauth]
2026-07-16T13:08:51.504147+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725193]: Connection closed by authenticating user root 49.204.152.71 port 42656 [preauth]
2026-07-16T13:08:52.584604+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725195]: Connection closed by authenticating user root 49.204.152.71 port 42658 [preauth]
2026-07-16T13:08:53.595318+02:00 mqtt-host01.mqtt.srvfarm.net sshd-session[1725198]: Connection closed by authenticating user root 49.204.152.71 port 34478 [preauth]
show less
Jul 16 08:15:29 mail sshd[793268]: Invalid user user from 49.204.152.71 port 53276
Jul 16 08:15:30 m ...
show moreJul 16 08:15:29 mail sshd[793268]: Invalid user user from 49.204.152.71 port 53276
Jul 16 08:15:30 mail sshd[793270]: Invalid user user from 49.204.152.71 port 53288
Jul 16 08:15:32 mail sshd[793273]: Invalid user user from 49.204.152.71 port 53296
...
show less
Jul 16 00:39:06 LU-VPS01 sshd[8699]: Failed password for root from 49.204.152.71 port 57738 ssh2
Jul ...
show moreJul 16 00:39:06 LU-VPS01 sshd[8699]: Failed password for root from 49.204.152.71 port 57738 ssh2
Jul 16 00:39:11 LU-VPS01 sshd[8703]: Failed password for root from 49.204.152.71 port 57744 ssh2
...
show less
Brute-Force
SSH
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
Port Scan
Showing 1 to
15
of 35 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ