This IP address has been reported a total of
85
times from
67 distinct
sources.
49.207.247.135 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jun 20 02:46:08 sshd-session[22997]: Invalid user hery from 49.207.247.135 port 10236
Jun 20 02:46: ...
show moreJun 20 02:46:08 sshd-session[22997]: Invalid user hery from 49.207.247.135 port 10236
Jun 20 02:46:08 sshd-session[22997]: Received disconnect from 49.207.247.135 port 10236:11: Bye Bye [preauth]
...
show less
2026-06-19T23:56:34.576555+00:00 prod-westeu sshd[3637815]: pam_unix(sshd:auth): authentication fail ...
show more2026-06-19T23:56:34.576555+00:00 prod-westeu sshd[3637815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.247.135
2026-06-19T23:56:36.573897+00:00 prod-westeu sshd[3637815]: Failed password for invalid user lc1 from 49.207.247.135 port 10547 ssh2
2026-06-19T23:58:46.113230+00:00 prod-westeu sshd[3638389]: Invalid user pop3s from 49.207.247.135 port 10121
...
show less
2026-06-19T23:46:44.938426+00:00 kansas1 sshd[3150936]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-19T23:46:44.938426+00:00 kansas1 sshd[3150936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.247.135
2026-06-19T23:46:47.603527+00:00 kansas1 sshd[3150936]: Failed password for invalid user postgres from 49.207.247.135 port 10688 ssh2
2026-06-19T23:48:33.409158+00:00 kansas1 sshd[3150948]: Invalid user postgres from 49.207.247.135 port 9629
...
show less
2026-06-20T08:39:02.538214 vps1.chirorist.org sshd[2218197]: Invalid user deploy from 49.207.247.135 ...
show more2026-06-20T08:39:02.538214 vps1.chirorist.org sshd[2218197]: Invalid user deploy from 49.207.247.135 port 10662
2026-06-20T08:39:02.541015 vps1.chirorist.org sshd[2218197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.247.135
2026-06-20T08:39:04.778219 vps1.chirorist.org sshd[2218197]: Failed password for invalid user deploy from 49.207.247.135 port 10662 ssh2
2026-06-20T08:41:13.834829 vps1.chirorist.org sshd[2218209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.247.135 user=root
2026-06-20T08:41:16.058546 vps1.chirorist.org sshd[2218209]: Failed password for root from 49.207.247.135 port 10934 ssh2
...
show less
2026-06-20T00:17:12.637498+01:00 NYC-MC-2 sshd-session[954434]: Invalid user paula from 49.207.247.1 ...
show more2026-06-20T00:17:12.637498+01:00 NYC-MC-2 sshd-session[954434]: Invalid user paula from 49.207.247.135 port 11081
2026-06-20T00:18:30.760337+01:00 NYC-MC-2 sshd-session[979831]: Invalid user test6 from 49.207.247.135 port 11301
2026-06-20T00:20:35.772785+01:00 NYC-MC-2 sshd-session[1019515]: Invalid user user8 from 49.207.247.135 port 10443
2026-06-20T00:21:43.595595+01:00 NYC-MC-2 sshd-session[1041864]: Invalid user vlad from 49.207.247.135 port 10159
2026-06-20T00:22:11.880220+01:00 NYC-MC-2 sshd-session[1051070]: Invalid user ubuntu from 49.207.247.135 port 9820
...
show less
Jun 20 00:06:58 wh02 sshd[3209415]: Received disconnect from 49.207.247.135 port 9543:11: Bye Bye [p ...
show moreJun 20 00:06:58 wh02 sshd[3209415]: Received disconnect from 49.207.247.135 port 9543:11: Bye Bye [preauth]
Jun 20 00:06:58 wh02 sshd[3209415]: Disconnected from authenticating user root 49.207.247.135 port 9543 [preauth]
Jun 20 00:09:15 wh02 sshd[3210454]: Received disconnect from 49.207.247.135 port 9570:11: Bye Bye [preauth]
Jun 20 00:09:15 wh02 sshd[3210454]: Disconnected from authenticating user root 49.207.247.135 port 9570 [preauth]
Jun 20 00:10:45 wh02 sshd[3210702]: Invalid user amit from 49.207.247.135 port 11048
Jun 20 00:10:45 wh02 sshd[3210702]: Received disconnect from 49.207.247.135 port 11048:11: Bye Bye [preauth]
Jun 20 00:10:45 wh02 sshd[3210702]: Disconnected from invalid user amit 49.207.247.135 port 11048 [preauth]
Jun 20 00:11:41 wh02 sshd[3211681]: Invalid user ubuntu from 49.207.247.135 port 10779
Jun 20 00:11:41 wh02 sshd[3211681]: Received disconnect from 49.207.247.135 port 10779:11: Bye Bye [preauth]
Jun 20 00:11:41 wh02 sshd[3211681]: Disconnected from inva
show less
2026-06-19T19:00:50.630012-04:00 site sshd-session[27615]: Invalid user pippin from 49.207.247.135 p ...
show more2026-06-19T19:00:50.630012-04:00 site sshd-session[27615]: Invalid user pippin from 49.207.247.135 port 11375
2026-06-19T19:03:49.332752-04:00 site sshd-session[27623]: Invalid user rms from 49.207.247.135 port 10079
2026-06-19T19:04:12.157075-04:00 site sshd-session[27625]: Invalid user import from 49.207.247.135 port 9891
...
show less
SSH brute-force detected. Evidence: 2026-06-19T22:26:11.580594[HOSTNAME] sshd[1169037]: Invalid user ...
show moreSSH brute-force detected. Evidence: 2026-06-19T22:26:11.580594[HOSTNAME] sshd[1169037]: Invalid user mohamed from 49.207.247.135 port 10000
2026-06-19T22:32:05.007506[HOSTNAME] sshd[1169238]: Invalid user appuser from 49.207.247.135 port 10611
show less
Brute-Force
SSH
Showing 1 to
15
of 85 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩