This IP address has been reported a total of
121
times from
116 distinct
sources.
49.207.245.148 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 21
reports;
United States of America
with 18
reports;
France
with 16
reports.
The most common categories in these recent reports were:
Brute-Force
108
times;
SSH
108
times;
Web App Attack
5
times;
Port Scan
4
times;
Exploited Host
4
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-10T13:03:18.692927+02:00 ds61523 sshd[2298055]: Invalid user user1 from 49.207.245.148 port ...
show more2026-10-10T13:03:18.692927+02:00 ds61523 sshd[2298055]: Invalid user user1 from 49.207.245.148 port 36600
2026-10-10T13:05:33.739762+02:00 ds61523 sshd[2298502]: Invalid user bench from 49.207.245.148 port 37013
2026-10-10T13:05:53.397368+02:00 ds61523 sshd[2298558]: Invalid user arkserver from 49.207.245.148 port 35791
...
show less
2026-10-10T12:12:02.604807+02:00 pve-osd-101 sshd[3544718]: Invalid user ljl from 49.207.245.148 por ...
show more2026-10-10T12:12:02.604807+02:00 pve-osd-101 sshd[3544718]: Invalid user ljl from 49.207.245.148 port 36761
2026-10-10T12:12:02.610451+02:00 pve-osd-101 sshd[3544718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148
2026-10-10T12:12:02.617110+02:00 pve-osd-101 sshd[3544718]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148 user=ljl
2026-10-10T12:12:04.287463+02:00 pve-osd-101 sshd[3544718]: Failed password for invalid user ljl from 49.207.245.148 port 36761 ssh2
2026-10-10T12:12:05.082466+02:00 pve-osd-101 sshd[3544718]: Disconnected from invalid user ljl 49.207.245.148 port 36761 [preauth]
2026-10-10T12:12:33.040248+02:00 pve-osd-101 sshd[3544723]: Invalid user kiran from 49.207.245.148 port 37374
...
show less
2026-10-10T09:53:59.691606 socky.stom66.co.uk proftpd[3689666]: session[3689666] 0.0.0.0 (49.207.245 ...
show more2026-10-10T09:53:59.691606 socky.stom66.co.uk proftpd[3689666]: session[3689666] 0.0.0.0 (49.207.245.148[49.207.245.148]): USER dev: no such user found from 49.207.245.148 [49.207.245.148] to ::ffff:5.79.80.26:2222
...
show less
The dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
. ...
show moreThe dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
...
show less
2026-10-10T10:48:31.502828+02:00 host1 sshd[885912]: Failed password for invalid user popo from 49.2 ...
show more2026-10-10T10:48:31.502828+02:00 host1 sshd[885912]: Failed password for invalid user popo from 49.207.245.148 port 35424 ssh2
2026-10-10T10:50:37.998888+02:00 host1 sshd[886485]: Invalid user kyu from 49.207.245.148 port 35553
2026-10-10T10:50:38.001825+02:00 host1 sshd[886485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148
2026-10-10T10:50:40.184239+02:00 host1 sshd[886485]: Failed password for invalid user kyu from 49.207.245.148 port 35553 ssh2
2026-10-10T10:51:16.366940+02:00 host1 sshd[886635]: Invalid user oracle from 49.207.245.148 port 37268
...
show less
2026-10-10T02:33:26.279111-06:00 leda sshd[3029193]: Failed password for root from 49.207.245.148 po ...
show more2026-10-10T02:33:26.279111-06:00 leda sshd[3029193]: Failed password for root from 49.207.245.148 port 35440 ssh2
2026-10-10T02:34:32.486966-06:00 leda sshd[3029651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148 user=root
2026-10-10T02:34:34.719986-06:00 leda sshd[3029651]: Failed password for root from 49.207.245.148 port 35636 ssh2
...
show less
Brute-Force
SSH
Anonymous
Oct 10 16:01:12 mail sshd[22970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreOct 10 16:01:12 mail sshd[22970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148
Oct 10 16:01:14 mail sshd[22970]: Failed password for invalid user ekp from 49.207.245.148 port 35913 ssh2
show less
2026-10-10T09:25:30.455930+02:00 phoeve sshd-session[827914]: Invalid user eder from 49.207.245.148 ...
show more2026-10-10T09:25:30.455930+02:00 phoeve sshd-session[827914]: Invalid user eder from 49.207.245.148 port 36310
...
show less
2026-10-10T09:14:10.649266+02:00 ezri sshd[842042]: User root from 49.207.245.148 not allowed becaus ...
show more2026-10-10T09:14:10.649266+02:00 ezri sshd[842042]: User root from 49.207.245.148 not allowed because not listed in AllowUsers
2026-10-10T09:14:10.833776+02:00 ezri sshd[842042]: Disconnected from invalid user root 49.207.245.148 port 36054 [preauth]
2026-10-10T09:16:15.633117+02:00 ezri sshd[842213]: User root from 49.207.245.148 not allowed because not listed in AllowUsers
...
show less
10 invalid SSH login attempts from 49.207.245.148 in the last 4.6 hours
Brute-Force
SSH
Anonymous
2026-10-10T08:03:27.834978+02:00 vm986549.cloud.nuxt.network sshd-session[17563]: Invalid user ftpse ...
show more2026-10-10T08:03:27.834978+02:00 vm986549.cloud.nuxt.network sshd-session[17563]: Invalid user ftpsecure from 49.207.245.148 port 37111
2026-10-10T08:03:27.839852+02:00 vm986549.cloud.nuxt.network sshd-session[17563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148
2026-10-10T08:03:30.015454+02:00 vm986549.cloud.nuxt.network sshd-session[17563]: Failed password for invalid user ftpsecure from 49.207.245.148 port 37111 ssh2
...
show less
Oct 10 00:56:00 mailman sshd[8533]: Disconnected from 49.207.245.148 port 35677 [preauth]
Oct 10 00: ...
show moreOct 10 00:56:00 mailman sshd[8533]: Disconnected from 49.207.245.148 port 35677 [preauth]
Oct 10 00:58:04 mailman sshd[8716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.245.148 user=root
Oct 10 00:58:06 mailman sshd[8716]: Failed password for root from 49.207.245.148 port 35688 ssh2
show less
