This IP address has been reported a total of
13
times from
12 distinct
sources.
49.76.149.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
"Unauthorized connection attempt on SSHD detected"
Jul 23 02:57:57 routing0301 sshd[4170369]: pam_unix(sshd:auth): authentication failure; logname= uid ...
show moreJul 23 02:57:57 routing0301 sshd[4170369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.76.149.66
Jul 23 02:57:57 routing0301 sshd[4170369]: Invalid user denise from 49.76.149.66 port 38116
Jul 23 02:57:59 routing0301 sshd[4170369]: Failed password for invalid user denise from 49.76.149.66 port 38116 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-07-23T00:49:32.927119+02:00 mail.chill.at sshd[837056]: Invalid user zhonglh from 49.76.149.66 ...
show more2026-07-23T00:49:32.927119+02:00 mail.chill.at sshd[837056]: Invalid user zhonglh from 49.76.149.66 port 39246
2026-07-23T00:49:33.130909+02:00 mail.chill.at sshd[837056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.76.149.66
2026-07-23T00:49:35.216830+02:00 mail.chill.at sshd[837056]: Failed password for invalid user zhonglh from 49.76.149.66 port 39246 ssh2
2026-07-23T00:49:50.068634+02:00 mail.chill.at sshd[837070]: Invalid user wx from 49.76.149.66 port 40576
2026-07-23T00:50:47.786122+02:00 mail.chill.at sshd[837170]: Invalid user nexus from 49.76.149.66 port 44470
show less
2026-07-21T13:03:17.040029+02:00 server01vp.huettersen.org sshd-session[83595]: Invalid user village ...
show more2026-07-21T13:03:17.040029+02:00 server01vp.huettersen.org sshd-session[83595]: Invalid user village from 49.76.149.66 port 53494
2026-07-21T13:03:40.502647+02:00 server01vp.huettersen.org sshd-session[83760]: Invalid user admin from 49.76.149.66 port 54792
2026-07-21T13:04:01.495098+02:00 server01vp.huettersen.org sshd-session[84134]: Invalid user wxt from 49.76.149.66 port 56054
2026-07-21T13:04:43.342543+02:00 server01vp.huettersen.org sshd-session[84498]: Invalid user zhoucong from 49.76.149.66 port 58490
2026-07-21T13:07:07.689426+02:00 server01vp.huettersen.org sshd-session[86219]: Invalid user tdk from 49.76.149.66 port 38856
show less
Jul 20 04:46:39 servercloud sshd[3179452]: Connection closed by 49.76.149.66 port 45054 [preauth]
Ju ...
show moreJul 20 04:46:39 servercloud sshd[3179452]: Connection closed by 49.76.149.66 port 45054 [preauth]
Jul 20 04:48:16 servercloud sshd[3179566]: Connection closed by authenticating user root 49.76.149.66 port 47060 [preauth]
Jul 20 04:48:36 servercloud sshd[3179573]: Invalid user sn from 49.76.149.66 port 48380
...
show less
2026-07-19T23:19:54.948383+00:00 loadbal sshd[2799020]: Invalid user hyz from 49.76.149.66 port 4176 ...
show more2026-07-19T23:19:54.948383+00:00 loadbal sshd[2799020]: Invalid user hyz from 49.76.149.66 port 41766
2026-07-19T23:20:15.421796+00:00 loadbal sshd[2799026]: Invalid user sn from 49.76.149.66 port 43096
...
show less
2026-07-17T18:36:55.566215+00:00 Linux101 sshd[3484894]: Failed password for invalid user user from ...
show more2026-07-17T18:36:55.566215+00:00 Linux101 sshd[3484894]: Failed password for invalid user user from 49.76.149.66 port 34962 ssh2
2026-07-17T18:37:37.136267+00:00 Linux101 sshd[3491055]: Invalid user router8 from 49.76.149.66 port 38112
2026-07-17T18:37:37.360717+00:00 Linux101 sshd[3491055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.76.149.66
2026-07-17T18:37:39.540398+00:00 Linux101 sshd[3491055]: Failed password for invalid user router8 from 49.76.149.66 port 38112 ssh2
2026-07-17T18:37:50.994319+00:00 Linux101 sshd[3492329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.76.149.66 user=root
2026-07-17T18:37:52.958215+00:00 Linux101 sshd[3492329]: Failed password for root from 49.76.149.66 port 39158 ssh2
2026-07-17T18:38:48.071349+00:00 Linux101 sshd[3498813]: Invalid user eod from 49.76.149.66 port 43334
2026-07-17T18:38:48.256053+00:00 Linux101 sshd[3498813]: pam_unix(sshd:auth): authent
...
show less
Brute-Force
SSH
Anonymous
2026-07-16T06:59:44.077866-03:00 vmi1230637 sshd[3347439]: Invalid user lhc from 49.76.149.66 port 3 ...
show more2026-07-16T06:59:44.077866-03:00 vmi1230637 sshd[3347439]: Invalid user lhc from 49.76.149.66 port 37028
...
show less
2026-07-16T06:56:43.845047+00:00 loadbal sshd[2738835]: User root from 49.76.149.66 not allowed beca ...
show more2026-07-16T06:56:43.845047+00:00 loadbal sshd[2738835]: User root from 49.76.149.66 not allowed because not listed in AllowUsers
2026-07-16T06:58:21.128956+00:00 loadbal sshd[2738888]: Invalid user weijinghuan from 49.76.149.66 port 42012
2026-07-16T06:58:44.561288+00:00 loadbal sshd[2738914]: Invalid user shiy from 49.76.149.66 port 43278
...
show less
Blocked by fail2ban on cVPS [/tcp]
Source Port:
TTL:
Packet Length:
TOS:
Analyzed by https://ip ...
show moreBlocked by fail2ban on cVPS [/tcp]
Source Port:
TTL:
Packet Length:
TOS:
Analyzed by https://ip.wiredalter.com
show less
Brute-Force
SSH
Web App Attack
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩