49.205.149.124

Unauthorized connection attempt from IP address 49.205.149.124 on Port 445(SMB)

Web bot: denial-of-service flood

Confirmed malicious by STILWaters CTI platform (score=100, sources=1)

rooted: SSH Brute Force from 49.205.149.124 at 2026-04-24 07:02:59 IST

rooted: SSH Brute Force from 49.205.149.124 at 2026-04-22 06:16:28 IST

Automatic Fail2Ban report from jail ssh: multiple matching events detected.

Automatic Fail2Ban report from jail ssh: multiple matching events detected.

This IP address carried out 42 SSH credential attack (attempts) on 13-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

This source IP initiated an unauthorized connection to a controlled SSH honeypot environment deployed for threat detection. The service is a non-production deceptive endpoint used solely to identify malicious reconnaissance, automated scanning, crede ... show more This source IP initiated an unauthorized connection to a controlled SSH honeypot environment deployed for threat detection. The service is a non-production deceptive endpoint used solely to identify malicious reconnaissance, automated scanning, credential probing, and other pre-compromise activity. Any interaction with this service is considered highly suspicious because it is not advertised for legitimate use. show less

ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.205.149.124

This IP address carried out 127 port scanning attempts on 13-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

Automatic Reporting - Brute Force Attempts

2026-04-13T10:59:12.360861 socky.stom66.co.uk proftpd[1700622]: session[1700622] 0.0.0.0 (49.205.149.124[49.205.149.124]): USER crm: no such user found from 49.205.149.124 [49.205.149.124] to ::ffff:5.79.80.26:2222 ...

Apr 13 04:09:39 goofy sshd[950716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.149.124 Apr 13 04:09:41 goofy sshd[950716]: Failed password for invalid user server from 49.205.149.124 port 55332 ssh ... show more Apr 13 04:09:39 goofy sshd[950716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.149.124 Apr 13 04:09:41 goofy sshd[950716]: Failed password for invalid user server from 49.205.149.124 port 55332 ssh2 Apr 13 04:14:34 goofy sshd[950858]: Invalid user ftpuser from 49.205.149.124 port 54752 ... show less

$f2bV_matches