This IP address has been reported a total of
189
times from
121 distinct
sources.
158.49.70.49 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-05-23T03:10:02.798800+02:00 vps sshd[3776836]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-05-23T03:10:02.798800+02:00 vps sshd[3776836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.49.70.49 user=root
2026-05-23T03:10:04.246087+02:00 vps sshd[3776836]: Failed password for root from 158.49.70.49 port 44002 ssh2
2026-05-23T03:13:24.477856+02:00 vps sshd[3778427]: Invalid user git from 158.49.70.49 port 43062
...
show less
2026-05-23T03:00:16.357612+02:00 zrh02-ch-pop.as202427.net sshd[724387]: User root from 158.49.70.49 ...
show more2026-05-23T03:00:16.357612+02:00 zrh02-ch-pop.as202427.net sshd[724387]: User root from 158.49.70.49 not allowed because not listed in AllowUsers
2026-05-23T03:08:30.517022+02:00 zrh02-ch-pop.as202427.net sshd[724822]: User root from 158.49.70.49 not allowed because not listed in AllowUsers
2026-05-23T03:11:46.408441+02:00 zrh02-ch-pop.as202427.net sshd[724909]: Invalid user git from 158.49.70.49 port 60314
...
show less
2026-05-23T04:08:27.031675+03:00 fra.hmhomegate.net sshd-session[96967]: Failed password for root fr ...
show more2026-05-23T04:08:27.031675+03:00 fra.hmhomegate.net sshd-session[96967]: Failed password for root from 158.49.70.49 port 53134 ssh2
2026-05-23T04:08:27.098664+03:00 fra.hmhomegate.net sshd-session[96967]: Disconnected from authenticating user root 158.49.70.49 port 53134 [preauth]
2026-05-23T04:11:41.414406+03:00 fra.hmhomegate.net sshd-session[97159]: Invalid user git from 158.49.70.49 port 51140
2026-05-23T04:11:41.420855+03:00 fra.hmhomegate.net sshd-session[97159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.49.70.49
2026-05-23T04:11:43.460894+03:00 fra.hmhomegate.net sshd-session[97159]: Failed password for invalid user git from 158.49.70.49 port 51140 ssh2
...
show less
2026-05-23T03:03:12.054922+02:00 aligw01.aneirin.net sshd-session[37254]: Failed password for root f ...
show more2026-05-23T03:03:12.054922+02:00 aligw01.aneirin.net sshd-session[37254]: Failed password for root from 158.49.70.49 port 33486 ssh2
2026-05-23T03:03:12.138030+02:00 aligw01.aneirin.net sshd-session[37254]: Disconnected from authenticating user root 158.49.70.49 port 33486 [preauth]
2026-05-23T03:09:35.316933+02:00 aligw01.aneirin.net sshd-session[37277]: Failed password for root from 158.49.70.49 port 41274 ssh2
...
show less
2026-05-22T20:41:48.418393-04:00 debian sshd[461288]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-05-22T20:41:48.418393-04:00 debian sshd[461288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.49.70.49 user=root
2026-05-22T20:41:50.971888-04:00 debian sshd[461288]: Failed password for root from 158.49.70.49 port 39172 ssh2
2026-05-22T20:44:56.426278-04:00 debian sshd[464185]: Invalid user rose from 158.49.70.49 port 58132
2026-05-22T20:44:56.429533-04:00 debian sshd[464185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.49.70.49
2026-05-22T20:44:58.126051-04:00 debian sshd[464185]: Failed password for invalid user rose from 158.49.70.49 port 58132 ssh2
...
show less
2026-05-23T02:12:51.676396+02:00 87hcet sshd[528400]: Invalid user user2 from 158.49.70.49 port 5601 ...
show more2026-05-23T02:12:51.676396+02:00 87hcet sshd[528400]: Invalid user user2 from 158.49.70.49 port 56012
2026-05-23T02:12:51.735359+02:00 87hcet sshd[528400]: Disconnected from invalid user user2 158.49.70.49 port 56012 [preauth]
2026-05-23T02:16:35.179339+02:00 87hcet sshd[530063]: Invalid user ftpuser from 158.49.70.49 port 54324
...
show less
2026-05-23T02:12:13.914897firelutry sshd[3612155]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-05-23T02:12:13.914897firelutry sshd[3612155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.49.70.49
2026-05-23T02:12:16.791598firelutry sshd[3612155]: Failed password for invalid user user2 from 158.49.70.49 port 55996 ssh2
2026-05-23T02:16:22.437339firelutry sshd[3612692]: Invalid user ftpuser from 158.49.70.49 port 32818
...
show less
Brute-Force
SSH
Showing 121 to
135
of 189 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩