This IP address has been reported a total of
32
times from
29 distinct
sources.
149.118.49.109 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 10 03:44:10 gen sshd[2254647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJul 10 03:44:10 gen sshd[2254647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.118.49.109
Jul 10 03:44:13 gen sshd[2254647]: Failed password for invalid user admin from 149.118.49.109 port 36006 ssh2
Jul 10 03:44:50 gen sshd[2254654]: Invalid user orangepi from 149.118.49.109 port 60348
...
show less
2026-07-09T22:56:19.910904 rhel-20gb-ash-1 sshd[112375]: Invalid user admin from 149.118.49.109 port ...
show more2026-07-09T22:56:19.910904 rhel-20gb-ash-1 sshd[112375]: Invalid user admin from 149.118.49.109 port 39616
...
show less
Jul 10 01:39:27 garden01 sshd[344416]: Invalid user admin from 149.118.49.109 port 59362
Jul 10 01:4 ...
show moreJul 10 01:39:27 garden01 sshd[344416]: Invalid user admin from 149.118.49.109 port 59362
Jul 10 01:40:01 garden01 sshd[344764]: Invalid user orangepi from 149.118.49.109 port 58560
Jul 10 01:44:06 garden01 sshd[347432]: Invalid user test from 149.118.49.109 port 43410
Jul 10 01:44:42 garden01 sshd[347857]: Invalid user user from 149.118.49.109 port 39206
Jul 10 01:45:56 garden01 sshd[348634]: Invalid user admin from 149.118.49.109 port 54168
...
show less
2026-07-10T02:59:39.080359 ******* sshd[2075928]: Invalid user admin from 149.118.49.109 port 53522
...
show more2026-07-10T02:59:39.080359 ******* sshd[2075928]: Invalid user admin from 149.118.49.109 port 53522
2026-07-10T02:59:39.497116 ******* sshd[2075928]: Connection closed by invalid user admin 149.118.49.109 port 53522 [preauth]
2026-07-10T03:00:18.339969 ******* sshd[2076043]: Invalid user orangepi from 149.118.49.109 port 53772
show less
SSH Brute force: 2 attempts were recorded from 149.118.49.109
2026-07-10T00:42:37+02:00 Invalid user ...
show moreSSH Brute force: 2 attempts were recorded from 149.118.49.109
2026-07-10T00:42:37+02:00 Invalid user admin from 149.118.49.109 port 47878
2026-07-10T00:43:13+02:00 Invalid user orangepi from 149.118.49.109 port 38642
show less
2026-07-10T00:28:26.873793+02:00 router01.dtm.de.mersrv.de sshd[923071]: Connection closed by authen ...
show more2026-07-10T00:28:26.873793+02:00 router01.dtm.de.mersrv.de sshd[923071]: Connection closed by authenticating user admin 149.118.49.109 port 37048 [preauth]
2026-07-10T00:29:01.768066+02:00 router01.dtm.de.mersrv.de sshd[923162]: Invalid user orangepi from 149.118.49.109 port 38310
2026-07-10T00:29:02.287290+02:00 router01.dtm.de.mersrv.de sshd[923162]: Connection closed by invalid user orangepi 149.118.49.109 port 38310 [preauth]
2026-07-10T00:29:39.933356+02:00 router01.dtm.de.mersrv.de sshd[923333]: Connection closed by authenticating user root 149.118.49.109 port 40626 [preauth]
2026-07-10T00:30:17.182856+02:00 router01.dtm.de.mersrv.de sshd[923581]: Connection closed by authenticating user root 149.118.49.109 port 54260 [preauth]
show less
Brute-Force
Showing 1 to
15
of 32 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩