This IP address has been reported a total of
20
times from
20 distinct
sources.
149.40.248.154 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Germany
with 4
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
13
times;
SSH
12
times;
Port Scan
7
times;
Hacking
3
times;
Web App Attack
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-10T16:40:54.442426+00:00 passbolt sshd-session[110146]: Invalid user ubuntu from 149.40.248. ...
show more2026-10-10T16:40:54.442426+00:00 passbolt sshd-session[110146]: Invalid user ubuntu from 149.40.248.154 port 40414
2026-10-10T16:40:54.682316+00:00 passbolt sshd-session[110146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.40.248.154
2026-10-10T16:40:56.978595+00:00 passbolt sshd-session[110146]: Failed password for invalid user ubuntu from 149.40.248.154 port 40414 ssh2
show less
Brute-Force
SSH
Anonymous
2026-10-10T18:32:06.550530+02:00 hvs sshd-session[209915]: Connection reset by 149.40.248.154 port 4 ...
show more2026-10-10T18:32:06.550530+02:00 hvs sshd-session[209915]: Connection reset by 149.40.248.154 port 49258 [preauth]
2026-10-10T18:34:35.370540+02:00 hvs sshd-session[209947]: Connection closed by authenticating user root 149.40.248.154 port 35786 [preauth]
2026-10-10T18:34:35.970483+02:00 hvs sshd-session[209949]: Invalid user ubuntu from 149.40.248.154 port 35790
2026-10-10T18:34:36.110514+02:00 hvs sshd-session[209949]: Connection closed by invalid user ubuntu 149.40.248.154 port 35790 [preauth]
2026-10-10T18:34:36.736217+02:00 hvs sshd-session[209952]: Invalid user hduser from 149.40.248.154 port 35794
...
show less
byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-10-05T14:31:43Z. Source por ...
show morebyebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-10-05T14:31:43Z. Source port 46434. TCP flags: SYN. Packet: 40B, TTL 49, window 35418, IP id 54860. Single packet, dropped at firewall. p0f: 15 hops.
show less
2026-10-01T15:22:52.172767+00:00 Debian sshd-session[3792379]: kex_exchange_identification: Connecti ...
show more2026-10-01T15:22:52.172767+00:00 Debian sshd-session[3792379]: kex_exchange_identification: Connection closed by remote host
2026-10-01T15:22:52.172807+00:00 Debian sshd-session[3792379]: Connection closed by 149.40.248.154 port 34632
...
show less
Sep 30 20:20:55 gzdatacloud01 sshd[1589520]: Invalid user admin from 149.40.248.154 port 34952
Sep 3 ...
show moreSep 30 20:20:55 gzdatacloud01 sshd[1589520]: Invalid user admin from 149.40.248.154 port 34952
Sep 30 20:20:55 gzdatacloud01 sshd[1589520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.40.248.154
Sep 30 20:20:55 gzdatacloud01 sshd[1589520]: Invalid user admin from 149.40.248.154 port 34952
Sep 30 20:20:56 gzdatacloud01 sshd[1589520]: Failed password for invalid user admin from 149.40.248.154 port 34952 ssh2
Sep 30 20:21:40 gzdatacloud01 sshd[1589674]: Invalid user www from 149.40.248.154 port 47362
...
show less
FTP Brute-Force
Port Scan
Hacking
Bad Web Bot
Brute-Force
Web App Attack
SSH
2026-09-30T10:35:28.585578-07:00 server sshd[1562625]: Failed password for invalid user user from 14 ...
show more2026-09-30T10:35:28.585578-07:00 server sshd[1562625]: Failed password for invalid user user from 149.40.248.154 port 50192 ssh2
2026-09-30T10:35:31.537641-07:00 server sshd[1562699]: Invalid user admin from 149.40.248.154 port 50198
2026-09-30T10:35:31.823757-07:00 server sshd[1562699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.40.248.154
2026-09-30T10:35:34.293592-07:00 server sshd[1562699]: Failed password for invalid user admin from 149.40.248.154 port 50198 ssh2
2026-09-30T10:35:36.731687-07:00 server sshd[1562748]: Invalid user www from 149.40.248.154 port 60510
...
show less
2026-09-30T18:51:14.177672+02:00 web3 sshd-session[4046687]: Failed password for invalid user user f ...
show more2026-09-30T18:51:14.177672+02:00 web3 sshd-session[4046687]: Failed password for invalid user user from 149.40.248.154 port 44838 ssh2
2026-09-30T18:51:15.479934+02:00 web3 sshd-session[4046689]: Invalid user admin from 149.40.248.154 port 44844
2026-09-30T18:51:15.621872+02:00 web3 sshd-session[4046689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.40.248.154
2026-09-30T18:51:16.755568+02:00 web3 sshd-session[4046689]: Failed password for invalid user admin from 149.40.248.154 port 44844 ssh2
show less
2026-09-30T16:48:06.600031+00:00 kocer-main-webserver sshd[3056829]: Invalid user user from 149.40.2 ...
show more2026-09-30T16:48:06.600031+00:00 kocer-main-webserver sshd[3056829]: Invalid user user from 149.40.248.154 port 36180
2026-09-30T16:48:08.064997+00:00 kocer-main-webserver sshd[3056831]: Invalid user admin from 149.40.248.154 port 36188
2026-09-30T16:48:09.588467+00:00 kocer-main-webserver sshd[3056833]: Invalid user www from 149.40.248.154 port 36196
...
show less
