This IP address has been reported a total of
5,580
times from
1,208 distinct
sources.
20.49.0.100 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-28T10:43:20.287184+00:00 rc01 sshd-session[3871777]: Invalid user ubuntu from 20.49.0.100 po ...
show more2026-05-28T10:43:20.287184+00:00 rc01 sshd-session[3871777]: Invalid user ubuntu from 20.49.0.100 port 59560
2026-05-28T10:44:58.406064+00:00 rc01 sshd-session[3871809]: Invalid user deployer from 20.49.0.100 port 57752
2026-05-28T10:46:35.440564+00:00 rc01 sshd-session[3871862]: Invalid user developer from 20.49.0.100 port 57134
...
show less
2026-05-28T18:42:50.821766 jp3.cdn.420422709.xyz sshd[64918]: Failed password for invalid user ubunt ...
show more2026-05-28T18:42:50.821766 jp3.cdn.420422709.xyz sshd[64918]: Failed password for invalid user ubuntu from 20.49.0.100 port 37146 ssh2
2026-05-28T18:43:36.743551 jp3.cdn.420422709.xyz sshd[64937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.49.0.100 user=root
2026-05-28T18:43:38.373033 jp3.cdn.420422709.xyz sshd[64937]: Failed password for root from 20.49.0.100 port 55598 ssh2
...
show less
2026-05-28T11:04:35.501957+02:00 axisverse sshd-session[3523872]: Invalid user anna from 20.49.0.100 ...
show more2026-05-28T11:04:35.501957+02:00 axisverse sshd-session[3523872]: Invalid user anna from 20.49.0.100 port 49498
2026-05-28T11:06:20.275922+02:00 axisverse sshd-session[3527246]: Invalid user ubuntu from 20.49.0.100 port 39610
2026-05-28T11:07:11.563818+02:00 axisverse sshd-session[3528952]: Invalid user develop from 20.49.0.100 port 58328
...
show less
Brute-Force
SSH
Anonymous
2026-05-28T07:33:13.640750+02:00 de-fsn1-host1 sshd-session[1368988]: Invalid user user2 from 20.49. ...
show more2026-05-28T07:33:13.640750+02:00 de-fsn1-host1 sshd-session[1368988]: Invalid user user2 from 20.49.0.100 port 41618
2026-05-28T07:34:09.550880+02:00 de-fsn1-host1 sshd-session[1369293]: Invalid user newftpuser from 20.49.0.100 port 40890
2026-05-28T07:35:56.804974+02:00 de-fsn1-host1 sshd-session[1369974]: Invalid user ops from 20.49.0.100 port 56176
...
show less
(sshd) Failed SSH login from 20.49.0.100 (US/United States/-): 5 in the last 3600 secs; Ports: *; Di ...
show more(sshd) Failed SSH login from 20.49.0.100 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 28 07:09:10 zone sshd[1324001]: Invalid user mailadmin from 20.49.0.100 port 41560
May 28 07:09:12 zone sshd[1324001]: Failed password for invalid user mailadmin from 20.49.0.100 port 41560 ssh2
May 28 07:33:32 zone sshd[1328658]: Invalid user user2 from 20.49.0.100 port 41296
May 28 07:33:34 zone sshd[1328658]: Failed password for invalid user user2 from 20.49.0.100 port 41296 ssh2
May 28 07:34:27 zone sshd[1328804]: Invalid user newftpuser from 20.49.0.100 port 42408
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T03:24:59Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T03:24:59Z and 2026-05-28T04:34:23Z
show less
2026-05-28T04:08:13.589153+02:00 gw-de21-01.guestgw.net sshd[608701]: Disconnected from authenticati ...
show more2026-05-28T04:08:13.589153+02:00 gw-de21-01.guestgw.net sshd[608701]: Disconnected from authenticating user root 20.49.0.100 port 34330 [preauth]
2026-05-28T04:09:03.912505+02:00 gw-de21-01.guestgw.net sshd[608956]: Invalid user radio from 20.49.0.100 port 50802
2026-05-28T04:09:04.091372+02:00 gw-de21-01.guestgw.net sshd[608956]: Disconnected from invalid user radio 20.49.0.100 port 50802 [preauth]
2026-05-28T04:09:56.190119+02:00 gw-de21-01.guestgw.net sshd[609148]: Disconnected from authenticating user root 20.49.0.100 port 60004 [preauth]
2026-05-28T04:10:49.296416+02:00 gw-de21-01.guestgw.net sshd[609436]: Disconnected from authenticating user root 20.49.0.100 port 33598 [preauth]
show less
2026-05-28T02:26:20.240229+02:00 axisverse sshd-session[2392621]: Invalid user sammy from 20.49.0.10 ...
show more2026-05-28T02:26:20.240229+02:00 axisverse sshd-session[2392621]: Invalid user sammy from 20.49.0.100 port 45488
2026-05-28T02:28:48.094789+02:00 axisverse sshd-session[2397656]: Invalid user grid from 20.49.0.100 port 56336
2026-05-28T02:30:26.527612+02:00 axisverse sshd-session[2400967]: Invalid user admin from 20.49.0.100 port 35248
...
show less
CSF/LFD blocked 20.49.0.100 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH lo ...
show moreCSF/LFD blocked 20.49.0.100 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 20.49.0.100 (US/United States/-): 5 in the last 3600 secs. Evidence: May 27 18:43:17 paladin sshd[3403938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.49.0.100 user=root
show less
2026-05-28T02:25:17.810446+02:00 prod1 sshd-session[4108991]: Failed password for root from 20.49.0. ...
show more2026-05-28T02:25:17.810446+02:00 prod1 sshd-session[4108991]: Failed password for root from 20.49.0.100 port 44610 ssh2
2026-05-28T02:25:18.676804+02:00 prod1 sshd-session[4108991]: Disconnected from authenticating user root 20.49.0.100 port 44610 [preauth]
2026-05-28T02:26:04.777365+02:00 prod1 sshd-session[4109174]: Invalid user sammy from 20.49.0.100 port 47500
...
show less
{"event":{"DateTime":"2026-05-27T14:55:25Z","RemoteAddr":"20.49.0.100:51098","Protocol":"SSH","Comma ...
show more{"event":{"DateTime":"2026-05-27T14:55:25Z","RemoteAddr":"20.49.0.100:51098","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"98f80335-44c8-4b10-9dd6-4f6d63477824","Environ":"","User":"dd","Password":"dd","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"20.49.0.100","SourcePort":"51098","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-05-27T15:50:46Z","RemoteAddr":"20.49.0.100:34168","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"bcba72aa-42b8-4e68-9ed0-177880d360c4","Environ":"","User":"ubuntu","Password":"fjbdfdjkdsfs541544AA@@","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"",
show less
Hacking
Port Scan
Brute-Force
SSH
Showing 121 to
135
of 5580 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩