This IP address has been reported a total of
20
times from
11 distinct
sources.
49.173.155.66 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 4
reports;
Brazil
with 1
report.
The most common categories in these recent reports were:
Port Scan
15
times;
IoT Targeted
8
times;
Brute-Force
4
times;
SSH
3
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=49.173.155.66; proto=TCP; source_port=36767; target_port=5555; flags=SYN
show less
2026-09-01T18:13:52.316424-03:00 wazuh sshd[607055]: Invalid user user from 49.173.155.66 port 35729 ...
show more2026-09-01T18:13:52.316424-03:00 wazuh sshd[607055]: Invalid user user from 49.173.155.66 port 35729
2026-09-01T18:13:52.836129-03:00 wazuh sshd[607055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.173.155.66
2026-09-01T18:13:54.603292-03:00 wazuh sshd[607055]: Failed password for invalid user user from 49.173.155.66 port 35729 ssh2
...
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=49.173.155.66; proto=TCP; source_port=36767; target_port=5555; flags=SYN
show less
