This IP address has been reported a total of
27
times from
24 distinct
sources.
49.207.241.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-23T16:22:03.558219+02:00 guac-host01.view.srvfarm.net sshd-session[232007]: Invalid user vic ...
show more2026-07-23T16:22:03.558219+02:00 guac-host01.view.srvfarm.net sshd-session[232007]: Invalid user victor from 49.207.241.148 port 13108
2026-07-23T16:22:03.758676+02:00 guac-host01.view.srvfarm.net sshd-session[232007]: Disconnected from invalid user victor 49.207.241.148 port 13108 [preauth]
2026-07-23T16:26:59.208197+02:00 guac-host01.view.srvfarm.net sshd-session[232190]: Invalid user whz from 49.207.241.148 port 11512
2026-07-23T16:26:59.413665+02:00 guac-host01.view.srvfarm.net sshd-session[232190]: Disconnected from invalid user whz 49.207.241.148 port 11512 [preauth]
2026-07-23T16:29:46.303177+02:00 guac-host01.view.srvfarm.net sshd-session[232324]: Disconnected from authenticating user root 49.207.241.148 port 12966 [preauth]
show less
2026-07-23T14:24:45.116242+00:00 fynn-epyc3 sshd-session[436716]: pam_unix(sshd:auth): authenticatio ...
show more2026-07-23T14:24:45.116242+00:00 fynn-epyc3 sshd-session[436716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.241.148
2026-07-23T14:24:46.900717+00:00 fynn-epyc3 sshd-session[436716]: Failed password for invalid user victor from 49.207.241.148 port 12166 ssh2
...
show less
2026-07-23T14:02:24.261148+02:00 de-fsn1-host1 sshd-session[3799721]: Invalid user dev from 49.207.2 ...
show more2026-07-23T14:02:24.261148+02:00 de-fsn1-host1 sshd-session[3799721]: Invalid user dev from 49.207.241.148 port 11684
2026-07-23T14:04:59.762256+02:00 de-fsn1-host1 sshd-session[3800658]: Invalid user padmin from 49.207.241.148 port 12965
2026-07-23T14:07:44.605551+02:00 de-fsn1-host1 sshd-session[3801643]: Invalid user dev from 49.207.241.148 port 12180
...
show less
2026-07-23T12:47:55.821997+02:00 de-fsn1-host1 sshd-session[3770550]: Invalid user ubuntu from 49.20 ...
show more2026-07-23T12:47:55.821997+02:00 de-fsn1-host1 sshd-session[3770550]: Invalid user ubuntu from 49.207.241.148 port 12990
2026-07-23T12:54:15.835401+02:00 de-fsn1-host1 sshd-session[3772792]: Invalid user speedtest from 49.207.241.148 port 12460
2026-07-23T13:02:08.213580+02:00 de-fsn1-host1 sshd-session[3776132]: Invalid user tauro from 49.207.241.148 port 13074
...
show less
Jul 23 10:48:20 mc sshd[3989043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJul 23 10:48:20 mc sshd[3989043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.241.148
Jul 23 10:48:23 mc sshd[3989043]: Failed password for invalid user ubuntu from 49.207.241.148 port 11732 ssh2
Jul 23 10:54:25 mc sshd[3994687]: Invalid user speedtest from 49.207.241.148 port 12224
...
show less
SSH Brute force: 32 attempts were recorded from 49.207.241.148
2026-07-23T11:21:52+02:00 Disconnecte ...
show moreSSH Brute force: 32 attempts were recorded from 49.207.241.148
2026-07-23T11:21:52+02:00 Disconnected from authenticating user root 49.207.241.148 port 12850 [preauth]
2026-07-23T11:26:43+02:00 Disconnected from authenticating user root 49.207.241.148 port 11540 [preauth]
2026-07-23T11:29:36+02:00 Invalid user ubuntu from 49.207.241.148 port 12236
2026-07-23T11:32:06+02:00 Invalid user test from 49.207.241.148 port 12206
2026-07-23T11:33:29+02:00 Invalid user devops from 49.207.241.148 port 12622
2026-07-23T11:35:58+02:00 Invalid user jerry from 49.207.241.148 port 11741
2026-07-23T11:38:55+02:00 Disconnected from authenticating user root 49.207.241.148 port 11465 [preauth]
2026-07-23T11:41:33+02:00 Disconnected from authenticating user root 49.207.241.148 port 11842 [preauth]
2026-07-23T11:44:10+02:00 Invalid user mohammad from 49.207.241.148 port 12022
2026-07-23T11:46:52+02:00 Invalid
show less
2026-07-23T09:30:18.065175+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1613928]: Invalid user ubuntu fr ...
show more2026-07-23T09:30:18.065175+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1613928]: Invalid user ubuntu from 49.207.241.148 port 11667
2026-07-23T09:36:06.030862+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1614919]: Invalid user jerry from 49.207.241.148 port 12059
2026-07-23T09:36:45.205332+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1614995]: Invalid user teamspeak from 49.207.241.148 port 11834
...
show less
Report 2569197 with IP 3616764 for SSH brute-force attack by source 3611422 via ssh-honeypot/0.2.0+h ...
show moreReport 2569197 with IP 3616764 for SSH brute-force attack by source 3611422 via ssh-honeypot/0.2.0+http
show less
2026-07-23T18:25:24.238548+09:00 *** sshd-session[182497]: pam_unix(sshd:auth): authentication fail ...
show more2026-07-23T18:25:24.238548+09:00 *** sshd-session[182497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.241.148 user=root
2026-07-23T18:25:26.546242+09:00 *** sshd-session[182497]: Failed password for root from 49.207.241.148 port 12278 ssh2
2026-07-23T18:28:17.870885+09:00 *** sshd-session[183180]: Invalid user ubuntu from 49.207.241.148 port 11840
show less