This IP address has been reported a total of
41
times from
37 distinct
sources.
49.205.147.246 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd[1610728]: Invalid user joao from 49.205.147.246 port 14 ...
show moreSSH Brute Force (3 attempts). Evidence: sshd[1610728]: Invalid user joao from 49.205.147.246 port 14235;sshd[1610728]: Disconnected from invalid user joao 49.205.147.246 port 14235 [preauth]
show less
2026-06-20T06:44:04.190018milloweb sshd[9368]: Invalid user jayden from 49.205.147.246 port 14578
20 ...
show more2026-06-20T06:44:04.190018milloweb sshd[9368]: Invalid user jayden from 49.205.147.246 port 14578
2026-06-20T06:44:04.194363milloweb sshd[9368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246
2026-06-20T06:44:06.646659milloweb sshd[9368]: Failed password for invalid user jayden from 49.205.147.246 port 14578 ssh2
...
show less
(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs ...
show more(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 19 23:39:04 14072 sshd[5842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246 user=root
Jun 19 23:39:07 14072 sshd[5842]: Failed password for root from 49.205.147.246 port 14069 ssh2
Jun 19 23:41:23 14072 sshd[6965]: Invalid user share from 49.205.147.246 port 14542
Jun 19 23:41:25 14072 sshd[6965]: Failed password for invalid user share from 49.205.147.246 port 14542 ssh2
Jun 19 23:43:23 14072 sshd[8036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246 user=root
show less
(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs ...
show more(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 19 23:14:49 13646 sshd[16115]: Invalid user oakland from 49.205.147.246 port 13502
Jun 19 23:14:51 13646 sshd[16115]: Failed password for invalid user oakland from 49.205.147.246 port 13502 ssh2
Jun 19 23:16:26 13646 sshd[17036]: Invalid user certificados from 49.205.147.246 port 15093
Jun 19 23:16:28 13646 sshd[17036]: Failed password for invalid user certificados from 49.205.147.246 port 15093 ssh2
Jun 19 23:17:11 13646 sshd[17440]: Invalid user pms from 49.205.147.246 port 14879
show less
Fail2Ban report from jail 'sshd': 2026-06-20T06:15:18.915062+02:00 mail sshd[262917]: Invalid user o ...
show moreFail2Ban report from jail 'sshd': 2026-06-20T06:15:18.915062+02:00 mail sshd[262917]: Invalid user oakland from 49.205.147.246 port 14078
...
show less
Jun 20 05:24:50 Servo sshd[484108]: Invalid user bob from 49.205.147.246 port 14079
Jun 20 05:28:18 ...
show moreJun 20 05:24:50 Servo sshd[484108]: Invalid user bob from 49.205.147.246 port 14079
Jun 20 05:28:18 Servo sshd[487045]: Invalid user test from 49.205.147.246 port 13714
Jun 20 05:28:31 Servo sshd[487226]: Invalid user kontakt from 49.205.147.246 port 14281
...
show less
Brute-Force
SSH
Anonymous
Jun 20 10:46:34 vm50 sshd[73791]: Connection from 49.205.147.246 port 13441 on 103.3.61.195 port 22 ...
show moreJun 20 10:46:34 vm50 sshd[73791]: Connection from 49.205.147.246 port 13441 on 103.3.61.195 port 22 rdomain ""
Jun 20 10:46:35 vm50 sshd[73791]: Invalid user splunk from 49.205.147.246 port 13441
Jun 20 10:46:35 vm50 sshd[73791]: Disconnected from invalid user splunk 49.205.147.246 port 13441 [preauth]
Jun 20 10:47:09 vm50 sshd[73795]: Connection from 49.205.147.246 port 13928 on 103.3.61.195 port 22 rdomain ""
Jun 20 10:47:09 vm50 sshd[73795]: Invalid user dev from 49.205.147.246 port 13928
...
show less
2026-06-20T04:53:10.581502+03:00 nexus6 sshd[1523620]: Invalid user music from 49.205.147.246 port 1 ...
show more2026-06-20T04:53:10.581502+03:00 nexus6 sshd[1523620]: Invalid user music from 49.205.147.246 port 13737
...
show less
2026-06-20T01:47:21.503050Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.205.147.246:142 ...
show more2026-06-20T01:47:21.503050Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.205.147.246:14218 (158.69.22.11:2222) [session: b9308a32fae1]
2026-06-20T01:49:41.389421Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.205.147.246:13962 (158.69.22.11:2222) [session: 3947560cb88a]
...
show less
(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs ...
show more(sshd) Failed SSH login from 49.205.147.246 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 19 20:34:35 14048 sshd[5604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246 user=root
Jun 19 20:34:37 14048 sshd[5604]: Failed password for root from 49.205.147.246 port 14778 ssh2
Jun 19 20:35:02 14048 sshd[5612]: Invalid user op from 49.205.147.246 port 14720
Jun 19 20:35:03 14048 sshd[5612]: Failed password for invalid user op from 49.205.147.246 port 14720 ssh2
Jun 19 20:37:35 14048 sshd[7018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246 user=root
show less
Brute-Force
SSH
Anonymous
Jun 20 03:27:33 gateway1-old sshd[328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJun 20 03:27:33 gateway1-old sshd[328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246
Jun 20 03:27:35 gateway1-old sshd[328]: Failed password for invalid user intern from 49.205.147.246 port 14786 ssh2
Jun 20 03:31:34 gateway1-old sshd[838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.147.246
show less
Brute-Force
SSH
Showing 1 to
15
of 41 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩