This IP address has been reported a total of
697
times from
328 distinct
sources.
148.216.49.99 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-01-08T14:29:08.244086+01:00 transfer-srv sshd[1504263]: Failed password for invalid user admin1 ...
show more2026-01-08T14:29:08.244086+01:00 transfer-srv sshd[1504263]: Failed password for invalid user admin1 from 148.216.49.99 port 34880 ssh2
2026-01-08T14:29:40.575128+01:00 transfer-srv sshd[1504351]: Connection from 148.216.49.99 port 51348 on 192.168.1.201 port 22 rdomain ""
2026-01-08T14:29:41.478053
...
show less
2026-01-08T22:00:19.935488+09:00 xtom-vm-cloud-2c1g-nrt sshd-session[323362]: Invalid user ubuntu fr ...
show more2026-01-08T22:00:19.935488+09:00 xtom-vm-cloud-2c1g-nrt sshd-session[323362]: Invalid user ubuntu from 148.216.49.99 port 36566
2026-01-08T22:02:33.751498+09:00 xtom-vm-cloud-2c1g-nrt sshd-session[323422]: Invalid user deploy from 148.216.49.99 port 58348
2026-01-08T22:03:47.823464+09:00 xtom-vm-cloud-2c1g-nrt sshd-session[323472]: Invalid user deploy from 148.216.49.99 port 52432
...
show less
Jan 8 13:57:39 mail.srvfarm.net sshd[2120317]: Invalid user ubuntu from 148.216.49.99 port 45460
Ja ...
show moreJan 8 13:57:39 mail.srvfarm.net sshd[2120317]: Invalid user ubuntu from 148.216.49.99 port 45460
Jan 8 13:57:39 mail.srvfarm.net sshd[2120317]: Disconnected from invalid user ubuntu 148.216.49.99 port 45460 [preauth]
Jan 8 14:02:21 mail.srvfarm.net sshd[2162094]: Invalid user deploy from 148.216.49.99 port 59838
Jan 8 14:02:21 mail.srvfarm.net sshd[2162094]: Disconnected from invalid user deploy 148.216.49.99 port 59838 [preauth]
Jan 8 14:02:56 mail.srvfarm.net sshd[2162190]: Disconnected from authenticating user root 148.216.49.99 port 58334 [preauth]
show less
Brute-Force
Anonymous
2026-01-08T13:25:04.842666+01:00 hvs sshd-session[1669]: Invalid user admin from 148.216.49.99 port ...
show more2026-01-08T13:25:04.842666+01:00 hvs sshd-session[1669]: Invalid user admin from 148.216.49.99 port 44672
2026-01-08T13:25:05.003033+01:00 hvs sshd-session[1669]: Disconnected from invalid user admin 148.216.49.99 port 44672 [preauth]
2026-01-08T13:25:42.314770+01:00 hvs sshd-session[1678]: Invalid user ubuntu from 148.216.49.99 port 40874
2026-01-08T13:25:42.478529+01:00 hvs sshd-session[1678]: Disconnected from invalid user ubuntu 148.216.49.99 port 40874 [preauth]
2026-01-08T13:26:21.658659+01:00 hvs sshd-session[1687]: Disconnected from authenticating user root 148.216.49.99 port 57988 [preauth]
...
show less
Jan 8 20:07:07 odroid sshd[742261]: Invalid user user from 148.216.49.99 port 42890
Jan 8 20:09:15 ...
show moreJan 8 20:07:07 odroid sshd[742261]: Invalid user user from 148.216.49.99 port 42890
Jan 8 20:09:15 odroid sshd[742274]: Invalid user root2 from 148.216.49.99 port 34200
Jan 8 20:11:12 odroid sshd[742302]: Invalid user ubuntu from 148.216.49.99 port 51988
Jan 8 20:13:45 odroid sshd[742348]: Invalid user admin1 from 148.216.49.99 port 47720
Jan 8 20:14:20 odroid sshd[742363]: Invalid user user from 148.216.49.99 port 35904
...
show less
Brute-Force
SSH
Anonymous
2026-01-08T13:06:01.628783+01:00 hvs sshd-session[1314]: Invalid user user from 148.216.49.99 port 3 ...
show more2026-01-08T13:06:01.628783+01:00 hvs sshd-session[1314]: Invalid user user from 148.216.49.99 port 34934
2026-01-08T13:06:01.791280+01:00 hvs sshd-session[1314]: Disconnected from invalid user user 148.216.49.99 port 34934 [preauth]
2026-01-08T13:09:10.225294+01:00 hvs sshd-session[1381]: Invalid user root2 from 148.216.49.99 port 41194
2026-01-08T13:09:10.386579+01:00 hvs sshd-session[1381]: Disconnected from invalid user root2 148.216.49.99 port 41194 [preauth]
2026-01-08T13:09:49.201361+01:00 hvs sshd-session[1391]: Disconnected from authenticating user root 148.216.49.99 port 47274 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 697 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ