This IP address has been reported a total of
137
times from
120 distinct
sources.
149.78.186.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-22T11:57:10.377135de sshd[46102]: Invalid user maria from 149.78.186.49 port 40578
2026-10-2 ...
show more2026-10-22T11:57:10.377135de sshd[46102]: Invalid user maria from 149.78.186.49 port 40578
2026-10-22T11:57:10.379962de sshd[46102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.78.186.49
2026-10-22T11:57:12.725782de sshd[46102]: Failed password for invalid user maria from 149.78.186.49 port 40578 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-22T12:16:50.833113+02:00 mail.uninetlab.de sshd[1738919]: Invalid user admin from 149.78.186 ...
show more2026-10-22T12:16:50.833113+02:00 mail.uninetlab.de sshd[1738919]: Invalid user admin from 149.78.186.49 port 45376
2026-10-22T12:23:44.911075+02:00 mail.uninetlab.de sshd[1742910]: Invalid user user from 149.78.186.49 port 52602
2026-10-22T12:37:49.122343+02:00 mail.uninetlab.de sshd[1751418]: Invalid user user from 149.78.186.49 port 53080
...
show less
Detected via HAProxyScanner at 2026-10-22 09:41:02 UTC on destination port WEB (80/443). Repeated sc ...
show moreDetected via HAProxyScanner at 2026-10-22 09:41:02 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
2026-10-22T11:42:43.203250+03:00 kotia sshd-session[20142]: Invalid user admin from 149.78.186.49 po ...
show more2026-10-22T11:42:43.203250+03:00 kotia sshd-session[20142]: Invalid user admin from 149.78.186.49 port 52024
...
show less
Blocked by UFW (TCP on 2375)
Source port: 41276
TTL: 54
Packet length: 40
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 2375)
Source port: 41276
TTL: 54
Packet length: 40
TOS: 0x00
This report (for 149.78.186.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
Vulnerability probe of page /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, not found on the se ...
show moreVulnerability probe of page /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, not found on the server.
show less
Malformed or malicious web request
149.78.186.49 - - [22/Oct/2026:05:55:02 +0200] "POST /cgi-bin/.%2 ...
show moreMalformed or malicious web request
149.78.186.49 - - [22/Oct/2026:05:55:02 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-"
show less
Hacking
Web App Attack
Showing 1 to
15
of 137 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩