JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.2.49.164

185.2.49.164 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

ISP	AR Solution
Usage Type	Data Center/Web Hosting/Transit
ASN	AS218984
Domain Name	outsideheaven.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.2.49.164

Whois 185.2.49.164

IP Abuse Reports for 185.2.49.164:

This IP address has been reported a total of 58 times from 35 distinct sources. 185.2.49.164 was first reported on February 10th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 wbsouza	2026-09-20 03:40:50 (2 hours ago)	CrowdSec: infra/ssh22-probe — automated firewall drops on self-hosted IDS sensor	SSH Brute-Force
Anonymous	2026-09-20 01:59:55 (4 hours ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇧🇷 noconex	2026-09-19 16:24:08 (14 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 185.2.49.1 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 185.2.49.164 show less	Port Scan Brute-Force SSH
🇵🇱 pshost.pl	2026-09-19 16:22:33 (14 hours ago)	2026-09-19T16:22:33.211Z, an unauthorized SSH access attempt was detected from source IP address 185 ... show more 2026-09-19T16:22:33.211Z, an unauthorized SSH access attempt was detected from source IP address 185.2.49.164 by our NetFlow-based intrusion detection. show less	Port Scan Brute-Force SSH
🇬🇧 pccs.uk	2026-09-16 17:48:54 (3 days ago)	Sep 16 17:48:51 cloud-server-0 sshd[2513000]: pam_unix(sshd:auth): authentication failure; logname= ... show more Sep 16 17:48:51 cloud-server-0 sshd[2513000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.49.164 user=root Sep 16 17:48:53 cloud-server-0 sshd[2513000]: Failed password for root from 185.2.49.164 port 36632 ssh2 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-09-16 17:13:42 (3 days ago)	SSH bruteforce [BY]	SSH
Anonymous	2026-09-16 15:50:42 (3 days ago)	2026-09-16T17:50:39.225448+02:00 microfood-srv sshd-session[549712]: Invalid user user from 185.2.49 ... show more 2026-09-16T17:50:39.225448+02:00 microfood-srv sshd-session[549712]: Invalid user user from 185.2.49.164 port 60636 2026-09-16T17:50:40.354428+02:00 microfood-srv sshd-session[549714]: Invalid user user from 185.2.49.164 port 60646 2026-09-16T17:50:41.471509+02:00 microfood-srv sshd-session[549740]: Invalid user user from 185.2.49.164 port 60654 ... show less	Brute-Force SSH
🇮🇹 alph44	2026-09-16 14:17:08 (3 days ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇮🇹 CoreTech srl	2026-09-16 13:32:56 (3 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇫🇮 bittiguru.fi	2026-09-16 13:26:46 (3 days ago)	Sep 16 16:26:44 sauna sshd[71205]: Failed password for root from 185.2.49.164 port 34332 ssh2 ...	Brute-Force SSH
Anonymous	2026-09-16 13:22:38 (3 days ago)	2026-09-16T09:22:21.244877 SPARTAN sshd[13174]: Failed password for root from 185.2.49.164 port 5050 ... show more 2026-09-16T09:22:21.244877 SPARTAN sshd[13174]: Failed password for root from 185.2.49.164 port 50506 ssh2 2026-09-16T09:22:23.310689 SPARTAN sshd[13183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.49.164 user=root 2026-09-16T09:22:25.052945 SPARTAN sshd[13183]: Failed password for root from 185.2.49.164 port 55432 ssh2 2026-09-16T09:22:27.085471 SPARTAN sshd[13212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.49.164 user=root 2026-09-16T09:22:29.374989 SPARTAN sshd[13212]: Failed password for root from 185.2.49.164 port 55440 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-16 12:50:32 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇮🇹 Baldelli Spartaco	2026-09-14 22:30:32 (5 days ago)	Sep 15 00:30:20 backup sshd[3002836]: Failed password for root from 185.2.49.164 port 43692 ssh2 Sep ... show more Sep 15 00:30:20 backup sshd[3002836]: Failed password for root from 185.2.49.164 port 43692 ssh2 Sep 15 00:30:22 backup sshd[3002838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.49.164 user=root Sep 15 00:30:25 backup sshd[3002838]: Failed password for root from 185.2.49.164 port 43706 ssh2 Sep 15 00:30:28 backup sshd[3002840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.49.164 user=root Sep 15 00:30:31 backup sshd[3002840]: Failed password for root from 185.2.49.164 port 53958 ssh2 ... show less	Brute-Force SSH
🇫🇷 edoram	2026-09-14 22:04:49 (5 days ago)	SSH brute-force from honeypot. 9 attempts in 24h, 1 unique usernames tried.	Brute-Force SSH
🇧🇷 helix	2026-09-14 21:23:36 (5 days ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.247.171.186

🇨🇳 121.40.198.44

🇺🇸 94.228.26.9

🇲🇾 47.250.147.131

🇸🇦 5.111.89.48

🇩🇪 3.125.168.113

🇧🇷 201.17.133.138

🇧🇷 186.238.210.226

🇮🇳 148.113.13.43

🇫🇷 51.254.44.49

🇨🇳 36.40.64.74

🇺🇸 2604:a880:400:d1:0:5:2a0:f001

🇲🇦 197.147.118.234

🇸🇬 101.47.159.50

🇺🇸 50.235.31.47

🇺🇸 40.124.115.39

🇬🇧 35.203.211.59

🇺🇸 34.132.171.51

🇺🇸 146.190.162.216

🇺🇸 146.190.51.192