This IP address has been reported a total of
40
times from
31 distinct
sources.
149.118.48.73 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on amperetwo [5522/tcp]
Source port: 47529
TTL: 253
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on amperetwo [5522/tcp]
Source port: 47529
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on vps4 [5522/tcp]
Source port: 55087
TTL: 253
Packet length: 40
TOS: 0x00
This repo ...
show moreBlocked by UFW on vps4 [5522/tcp]
Source port: 55087
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on vps2 [5522/tcp]
Source port: 46913
TTL: 253
Packet length: 40
TOS: 0x00
This repo ...
show moreBlocked by UFW on vps2 [5522/tcp]
Source port: 46913
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on amperetwo [5522/tcp]
Source port: 41227
TTL: 253
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on amperetwo [5522/tcp]
Source port: 41227
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW on ampereone [5522/tcp]
Source port: 56652
TTL: 253
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on ampereone [5522/tcp]
Source port: 56652
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
👿 149.118.48.73 has been involved in malicious and brute-force activity. Reported by umarmohammad.xy ...
show more👿 149.118.48.73 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz
show less
2026-06-18T08:17:44.386324+00:00 ktj-nc sshd[299873]: Connection closed by authenticating user root ...
show more2026-06-18T08:17:44.386324+00:00 ktj-nc sshd[299873]: Connection closed by authenticating user root 149.118.48.73 port 49680 [preauth]
2026-06-18T08:17:44.678820+00:00 ktj-nc sshd[299875]: Connection closed by authenticating user root 149.118.48.73 port 49692 [preauth]
...
show less
2026-06-18T02:06:36.400984 rhel-20gb-ash-1 sshd[1220356]: Connection closed by authenticating user r ...
show more2026-06-18T02:06:36.400984 rhel-20gb-ash-1 sshd[1220356]: Connection closed by authenticating user root 149.118.48.73 port 32594 [preauth]
...
show less
2026-06-18T05:21:52.241761+00:00 kyana sshd[639452]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-06-18T05:21:52.241761+00:00 kyana sshd[639452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.118.48.73 user=root
2026-06-18T05:21:54.288221+00:00 kyana sshd[639452]: Failed password for root from 149.118.48.73 port 16784 ssh2
2026-06-18T05:21:55.502263+00:00 kyana sshd[639450]: Connection closed by authenticating user root 149.118.48.73 port 16778 [preauth]
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:LeitboGi0r ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:LeitboGi0ro, root:123@@@
• Number of login attempts: 2
• Client: SSH-2.0-paramiko_5.0.0
show less