This IP address has been reported a total of
25
times from
24 distinct
sources.
49.207.246.161 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
Czechia
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
SSH
23
times;
Brute-Force
22
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T19:15:08.935223+01:00 thelists sshd[1491901]: Invalid user pavel from 49.207.246.161 port ...
show more2026-10-26T19:15:08.935223+01:00 thelists sshd[1491901]: Invalid user pavel from 49.207.246.161 port 64795
2026-10-26T19:15:09.087306+01:00 thelists sshd[1491901]: Disconnected from invalid user pavel 49.207.246.161 port 64795 [preauth]
2026-10-26T19:17:00.922458+01:00 thelists sshd[1494085]: Invalid user deploy from 49.207.246.161 port 65348
2026-10-26T19:17:01.063420+01:00 thelists sshd[1494085]: Disconnected from invalid user deploy 49.207.246.161 port 65348 [preauth]
...
show less
2026-10-26T17:53:43.427886AnicoreLive sshd[17060]: Failed password for root from 49.207.246.161 port ...
show more2026-10-26T17:53:43.427886AnicoreLive sshd[17060]: Failed password for root from 49.207.246.161 port 65359 ssh2
2026-10-26T17:54:12.089390AnicoreLive sshd[17062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.246.161 user=root
2026-10-26T17:54:14.049898AnicoreLive sshd[17062]: Failed password for root from 49.207.246.161 port 63878 ssh2
...
show less
Malware payload written over SSH: 'authorized_keys' (389 Bytes), SHA256: a8460f446be540410004b1a8db4 ...
show moreMalware payload written over SSH: 'authorized_keys' (389 Bytes), SHA256: a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2.
show less
Hacking
SSH
Anonymous
(sshd) Failed SSH login from 49.207.246.161 (IN/India/broadband.actcorp.in)
2026-10-26T16:18:18.012406+00:00 thelemmy.club sshd-session[2138029]: Received disconnect from 49.20 ...
show more2026-10-26T16:18:18.012406+00:00 thelemmy.club sshd-session[2138029]: Received disconnect from 49.207.246.161 port 64886:11: Bye Bye [preauth]
2026-10-26T16:18:18.012429+00:00 thelemmy.club sshd-session[2138029]: Disconnected from invalid user root 49.207.246.161 port 64886 [preauth]
...
show less
Abuse detected by crowdsec (crowdsecurity/ssh-bf): repeated failed authentication or attack pattern. ...
show moreAbuse detected by crowdsec (crowdsecurity/ssh-bf): repeated failed authentication or attack pattern. Reported by bantower.
show less
2026-10-26T22:17:22.535564+09:00 wazuh-server sshd[156300]: Failed password for root from 49.207.246 ...
show more2026-10-26T22:17:22.535564+09:00 wazuh-server sshd[156300]: Failed password for root from 49.207.246.161 port 63432 ssh2
2026-10-26T22:17:30.283280+09:00 wazuh-server sshd[156306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.246.161 user=root
2026-10-26T22:17:32.409902+09:00 wazuh-server sshd[156306]: Failed password for root from 49.207.246.161 port 64098 ssh2
...
show less
Oct 26 13:41:38 v22019058497090703 sshd[24445]: Failed password for root from 49.207.246.161 port 63 ...
show moreOct 26 13:41:38 v22019058497090703 sshd[24445]: Failed password for root from 49.207.246.161 port 63816 ssh2
...
show less
SSH Brute force: 3 attempts were recorded from 49.207.246.161
2026-10-26T12:34:06+0100 Connection cl ...
show moreSSH Brute force: 3 attempts were recorded from 49.207.246.161
2026-10-26T12:34:06+0100 Connection closed by authenticating user root 49.207.246.161 [preauth]
2026-10-26T12:34:27+0100 Connection closed by authenticating user root 49.207.246.161 [preauth]
2026-10-26T12:35:12+0100 Connection closed by authenticating user root 49.207.246.161 [preauth]
show less
