This IP address has been reported a total of
67
times from
58 distinct
sources.
49.207.242.30 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
49.207.242.30 (IN/India/broadband.actcorp.in), 5 distributed sshd attacks on account [root] in the l ...
show more49.207.242.30 (IN/India/broadband.actcorp.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 2 23:14:22 15634 sshd[578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30 user=root
Jul 2 23:14:25 15634 sshd[578]: Failed password for root from 49.207.242.30 port 43622 ssh2
Jul 2 22:59:49 15634 sshd[25704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.43.115.198 user=root
Jul 2 22:57:22 15634 sshd[24581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.43.115.198 user=root
Jul 2 22:57:24 15634 sshd[24581]: Failed password for root from 196.43.115.198 port 40748 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
Anonymous
ez: User root from 49.207.242.30 not allowed because not listed in AllowUsers ez: User root from 49. ...
show moreez: User root from 49.207.242.30 not allowed because not listed in AllowUsers ez: User root from 49.207.242.30 not allowed because not listed in AllowUsers
show less
2026-07-03T04:28:21.236346+02:00 dokploy sshd-session[791935]: pam_unix(sshd:auth): authentication f ...
show more2026-07-03T04:28:21.236346+02:00 dokploy sshd-session[791935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30
2026-07-03T04:28:23.361824+02:00 dokploy sshd-session[791935]: Failed password for invalid user dev from 49.207.242.30 port 44599 ssh2
2026-07-03T04:28:24.015207+02:00 dokploy sshd-session[791935]: Disconnected from invalid user dev 49.207.242.30 port 44599 [preauth]
...
show less
Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: ycbf:123456, teamwo ...
show moreHoneypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: ycbf:123456, teamwork:teamwork123, tutos:tutos123, 345gs5662d34:345gs5662d34, tutos:3245gs5662d34, miss:miss
• Number of login attempts: 6
• 20 command(s) were executed during the session
• Client: SSH-2.0-libssh_0.9.6
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Jul 3 04:00:04 plesk sshd[29011]: Failed password for invalid user ycbf from 49.207.242.30 port 446 ...
show moreJul 3 04:00:04 plesk sshd[29011]: Failed password for invalid user ycbf from 49.207.242.30 port 44678 ssh2
Jul 3 04:00:59 plesk sshd[29278]: Invalid user zhaopin from 49.207.242.30 port 44286
Jul 3 04:00:59 plesk sshd[29278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30
Jul 3 04:01:01 plesk sshd[29278]: Failed password for invalid user zhaopin from 49.207.242.30 port 44286 ssh2
Jul 3 04:01:10 plesk sshd[29298]: Invalid user net from 49.207.242.30 port 44494
show less
2026-07-02T21:04:05.401106-04:00 debian sshd[770442]: Invalid user oracle from 49.207.242.30 port 43 ...
show more2026-07-02T21:04:05.401106-04:00 debian sshd[770442]: Invalid user oracle from 49.207.242.30 port 43842
2026-07-02T21:04:05.404658-04:00 debian sshd[770442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30
2026-07-02T21:04:07.327357-04:00 debian sshd[770442]: Failed password for invalid user oracle from 49.207.242.30 port 43842 ssh2
2026-07-02T21:13:15.444174-04:00 debian sshd[776714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30 user=root
2026-07-02T21:13:17.875376-04:00 debian sshd[776714]: Failed password for root from 49.207.242.30 port 44923 ssh2
...
show less
2026-07-03T03:07:33.084661+02:00 jane sshd-session[2260197]: Failed password for invalid user lighth ...
show more2026-07-03T03:07:33.084661+02:00 jane sshd-session[2260197]: Failed password for invalid user lighthouse from 49.207.242.30 port 43462 ssh2
2026-07-03T03:10:54.764113+02:00 jane sshd-session[2263887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.242.30 user=root
2026-07-03T03:10:56.806794+02:00 jane sshd-session[2263887]: Failed password for root from 49.207.242.30 port 44023 ssh2
...
show less
2026-07-03T02:54:06.824956+02:00 medusa sshd-session[2643044]: Invalid user ups2 from 49.207.242.30 ...
show more2026-07-03T02:54:06.824956+02:00 medusa sshd-session[2643044]: Invalid user ups2 from 49.207.242.30 port 45005
...
show less
2026-07-03T00:34:18.753921Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.207.242.30:4373 ...
show more2026-07-03T00:34:18.753921Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.207.242.30:43732 (158.69.22.11:2222) [session: c0464cc17d7a]
2026-07-03T00:37:08.039764Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 49.207.242.30:44556 (158.69.22.11:2222) [session: c05184ba4d8a]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]