This IP address has been reported a total of
2,107
times from
369 distinct
sources.
49.206.194.29 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-21 05:02:12 login_server authenticator failed for ([142.54.235.12]) [49.206.194.29]: 535 Inc ...
show more2026-06-21 05:02:12 login_server authenticator failed for ([142.54.235.12]) [49.206.194.29]: 535 Incorrect authentication data ([email protected])
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-OpenSSH_7.4
show less
2026-06-20T19:11:56+02:00 <masked> exim[554036]: fixed_login authenticator failed for ([128.185.217. ...
show more2026-06-20T19:11:56+02:00 <masked> exim[554036]: fixed_login authenticator failed for ([128.185.217.150]) [49.206.194.29]: 535 Incorrect authentication data ([email protected])
show less
2026-06-20T19:50:33.019320+03:30 digitalogic sshd-session[3659502]: pam_unix(sshd:auth): authenticat ...
show more2026-06-20T19:50:33.019320+03:30 digitalogic sshd-session[3659502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.206.194.29
2026-06-20T19:50:35.039720+03:30 digitalogic sshd-session[3659502]: Failed password for invalid user config from 49.206.194.29 port 41354 ssh2
2026-06-20T19:50:36.855773+03:30 digitalogic sshd-session[3659502]: Connection closed by invalid user config 49.206.194.29 port 41354 [preauth]
...
show less
SMTP/IMAP authentication failures. Attempts: 1, Service: SMTP-IN, First seen: 2026-06-20%2016:50:54, ...
show moreSMTP/IMAP authentication failures. Attempts: 1, Service: SMTP-IN, First seen: 2026-06-20%2016:50:54, Last seen: 2026-06-20%2016:50:54. Included attempts on non-existent accounts (honeypot). Blocked by axiban on mail.kmalu.com / mojinter.net.
show less