JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.205.149.93

Neutral Activity

Abuse Confidence Score

0% Low Risk

124 reports

83 reporters · latest 3 months ago

ISP: Atria Convergence Technologies Ltd.,
Usage Type: Fixed Line ISP
ASN: AS24309
Domain Name: actcorp.in
Country: 🇮🇳 India
City: Bengaluru, Karnataka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.205.149.93 has been reported 124 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

124 from 83 distinct reporters

First reported

February 21st 2024

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-24 20:00:23 UTC · (3 months ago)	ICS Labs identified 49.205.149.93 as a malicious indicator from threat intelligence.	Hacking
🇮🇳 evicky2002	2026-06-29 10:48:52 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-18 20:51:22 UTC · (5 months ago)	ICS Labs identified 49.205.149.93 as a malicious indicator from threat intelligence.	Hacking
🇱🇺 SiteXL	2026-04-24 20:54:02 UTC · (6 months ago)	{"event":{"DateTime":"2026-04-22T20:50:04Z","RemoteAddr":"49.205.149.93:63456","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"63107a93-8f52-4341-becb-69db8cd9cabe","Environ":"","User":"root", ... show more {"event":{"DateTime":"2026-04-22T20:50:04Z","RemoteAddr":"49.205.149.93:63456","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"63107a93-8f52-4341-becb-69db8cd9cabe","Environ":"","User":"root","Password":"!@#qweASDzxc","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"49.205.149.93","SourcePort":"63456","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-04-22T20:51:05Z","RemoteAddr":"49.205.149.93:65087","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"f0692838-5e8a-4933-94a1-5d2106053d0a","Environ":"","User":"root","Password":"qazwsx1234567..","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","Reques show less	Hacking Port Scan Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-23 22:33:10 UTC · (6 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/49.205.149.93	SSH
🇺🇸 shaunc	2026-04-23 01:45:20 UTC · (6 months ago)	Apr 22 20:45:17 [redacted] sshd[1715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.149.93 Apr 22 20:45:19 [redacted] sshd[1715]: Failed password for invalid user beehive from 49.205.149.93 port 63944 ... show more Apr 22 20:45:17 [redacted] sshd[1715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.149.93 Apr 22 20:45:19 [redacted] sshd[1715]: Failed password for invalid user beehive from 49.205.149.93 port 63944 ssh2 Apr 22 20:45:19 [redacted] sshd[1715]: Disconnected from 49.205.149.93 port 63944 [preauth] show less	Brute-Force SSH
🇵🇱 Wepted	2026-04-23 01:15:01 UTC · (6 months ago)	2026-04-23T03:05:06.818599+02:00 axisverse sshd-session[3609858]: Invalid user devuser from 49.205.149.93 port 63778 2026-04-23T03:11:51.370560+02:00 axisverse sshd-session[3621350]: Invalid user bot from 49.205.149.93 port 64236 2026-04-23T03:15:00. ... show more 2026-04-23T03:05:06.818599+02:00 axisverse sshd-session[3609858]: Invalid user devuser from 49.205.149.93 port 63778 2026-04-23T03:11:51.370560+02:00 axisverse sshd-session[3621350]: Invalid user bot from 49.205.149.93 port 64236 2026-04-23T03:15:00.436512+02:00 axisverse sshd-session[3626498]: Invalid user ubuntu from 49.205.149.93 port 63499 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-23 01:13:11 UTC · (6 months ago)	2026-04-23T03:10:05.663987+02:00 gw-de19-01.guestgw.net sshd[1168224]: Invalid user devuser from 49.205.149.93 port 64098 2026-04-23T03:10:05.901871+02:00 gw-de19-01.guestgw.net sshd[1168224]: Disconnected from invalid user devuser 49.205.149.93 port ... show more 2026-04-23T03:10:05.663987+02:00 gw-de19-01.guestgw.net sshd[1168224]: Invalid user devuser from 49.205.149.93 port 64098 2026-04-23T03:10:05.901871+02:00 gw-de19-01.guestgw.net sshd[1168224]: Disconnected from invalid user devuser 49.205.149.93 port 64098 [preauth] 2026-04-23T03:12:07.717295+02:00 gw-de19-01.guestgw.net sshd[1168808]: Invalid user bot from 49.205.149.93 port 64834 2026-04-23T03:12:07.961078+02:00 gw-de19-01.guestgw.net sshd[1168808]: Disconnected from invalid user bot 49.205.149.93 port 64834 [preauth] 2026-04-23T03:13:10.701670+02:00 gw-de19-01.guestgw.net sshd[1169122]: Disconnected from authenticating user root 49.205.149.93 port 65208 [preauth] show less	Brute-Force
🇺🇸 bigscoots.com	2026-04-23 01:12:41 UTC · (6 months ago)	(sshd) Failed SSH login from 49.205.149.93 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 22 19:56:38 15518 sshd[24045]: Invalid user devuser from 49.205.149.93 port 64826 Apr 22 19:56:41 ... show more (sshd) Failed SSH login from 49.205.149.93 (IN/India/broadband.actcorp.in): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 22 19:56:38 15518 sshd[24045]: Invalid user devuser from 49.205.149.93 port 64826 Apr 22 19:56:41 15518 sshd[24045]: Failed password for invalid user devuser from 49.205.149.93 port 64826 ssh2 Apr 22 20:11:24 15518 sshd[25287]: Invalid user bot from 49.205.149.93 port 64670 Apr 22 20:11:26 15518 sshd[25287]: Failed password for invalid user bot from 49.205.149.93 port 64670 ssh2 Apr 22 20:12:28 15518 sshd[25362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.205.149.93 user=root show less	Brute-Force SSH
🇬🇧 andypiper	2026-04-23 01:00:49 UTC · (6 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-04-23 00:49:39 UTC · (6 months ago)	SSH brute force attempt. User: work, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 drewf.ink	2026-04-23 00:42:00 UTC · (6 months ago)	[00:41] Attempted SSH login on port 2222 with credentials ubuntu:$BLANKPASS.	Brute-Force SSH
Anonymous	2026-04-23 00:34:12 UTC · (6 months ago)	SSH brute force attempt. User: user, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 drewf.ink	2026-04-23 00:26:10 UTC · (6 months ago)	[00:26] Attempted SSH login on port 2222 with credentials test:P@ssw0rd123	Brute-Force SSH
Anonymous	2026-04-23 00:18:49 UTC · (6 months ago)	SSH brute force attempt. User: ubuntu, Pass: [REDACTED]	Brute-Force SSH

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.116.117.213

🇳🇱 204.76.203.212

🇮🇷 185.106.146.6

🇵🇱 172.64.198.181

🇫🇷 85.217.140.44

🇸🇬 47.79.207.183

🇳🇱 45.148.10.151

🇺🇸 20.221.58.150

🇩🇪 217.88.57.192

🇦🇷 181.29.71.119

🇩🇪 165.227.153.126

🇬🇧 154.16.44.71

🇺🇸 143.42.164.97

🇺🇸 135.148.160.225

🇻🇳 123.31.31.125

🇨🇳 111.113.88.170

🇩🇪 109.160.32.43

🇺🇿 82.215.127.143

🇺🇸 45.79.114.248

🇬🇧 35.203.211.27