JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.95.49.133

1.95.49.133 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 89%: ?

89%

ISP	Beijing Teletron Telecom Engineering Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-1-95-49-133.compute.hwclouds-dns.com
Domain Name	drpeng.com.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.95.49.133

Whois 1.95.49.133

IP Abuse Reports for 1.95.49.133:

This IP address has been reported a total of 21 times from 16 distinct sources. 1.95.49.133 was first reported on July 3rd 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sh97	2026-07-09 02:51:53 (15 hours ago)	US905-RN-ASH.vps.992969.xyz: SSH Brute Force from 1.95.49.133 at 2026-07-09 08:21:52 IST	Brute-Force SSH
🇩🇪 rd1742	2026-07-07 08:53:57 (2 days ago)	2026-07-07 08:53:56,766 quad proftpd[1687785] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (ecs-1-95-49-133. ... show more 2026-07-07 08:53:56,766 quad proftpd[1687785] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (ecs-1-95-49-133.compute.hwclouds-dns.com[1.95.49.133]): USER root: no such user found from ecs-1-95-49-133.compute.hwclouds-dns.com [1.95.49.133] to 2.56.97.107:22 show less	Brute-Force Exploited Host SSH
🇺🇸 bigscoots.com	2026-07-07 08:44:36 (2 days ago)	(sshd) Failed SSH login from 1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com): 5 in t ... show more (sshd) Failed SSH login from 1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 7 08:44:11 23675 sshd[18109]: Did not receive identification string from 1.95.49.133 port 56302 Jul 7 08:44:14 23675 sshd[18157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root Jul 7 08:44:16 23675 sshd[18157]: Failed password for root from 1.95.49.133 port 59328 ssh2 Jul 7 08:44:18 23675 sshd[18159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root Jul 7 08:44:21 23675 sshd[18159]: Failed password for root from 1.95.49.133 port 34894 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-07 02:57:26 (2 days ago)	1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com), 5 distributed sshd attacks on accou ... show more 1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 6 21:00:25 15488 sshd[4963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root Jul 6 21:00:27 15488 sshd[4963]: Failed password for root from 1.95.49.133 port 44372 ssh2 Jul 6 21:15:07 15488 sshd[13020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.194.19.2 user=root Jul 6 21:15:09 15488 sshd[13020]: Failed password for root from 4.194.19.2 port 37160 ssh2 Jul 6 21:57:12 15488 sshd[2970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.126.6.183 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 sh97	2026-07-06 13:45:35 (3 days ago)	US905-RN-ASH.vps.992969.xyz: SSH Brute Force from 1.95.49.133 at 2026-07-06 19:15:34 IST	Brute-Force SSH
🇺🇸 anon333	2026-07-06 04:33:02 (3 days ago)	Hacker syslog review 1783312382	Hacking
🇺🇸 bigscoots.com	2026-07-06 02:54:26 (3 days ago)	(sshd) Failed SSH login from 1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com): 5 in t ... show more (sshd) Failed SSH login from 1.95.49.133 (CN/China/ecs-1-95-49-133.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 5 21:53:06 14775 sshd[21539]: Did not receive identification string from 1.95.49.133 port 53278 Jul 5 21:53:09 14775 sshd[21540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root Jul 5 21:53:11 14775 sshd[21540]: Failed password for root from 1.95.49.133 port 56000 ssh2 Jul 5 21:54:03 14775 sshd[21593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root Jul 5 21:54:05 14775 sshd[21593]: Failed password for root from 1.95.49.133 port 35180 ssh2 show less	Brute-Force SSH
🇬🇧 tpguy825	2026-07-05 23:00:40 (3 days ago)	SSH bruteforce from 1.95.49.133 port 53198, stuck in tarpit for 950.764 secs	Hacking Brute-Force SSH
🇮🇳 paradoxnetworks	2026-07-05 22:40:22 (3 days ago)	2026-07-05T22:40:16.410143+00:00 edge-con-bom01.int.pdx.net.uk sshd[1280196]: Failed password for ro ... show more 2026-07-05T22:40:16.410143+00:00 edge-con-bom01.int.pdx.net.uk sshd[1280196]: Failed password for root from 1.95.49.133 port 44190 ssh2 2026-07-05T22:40:20.118252+00:00 edge-con-bom01.int.pdx.net.uk sshd[1280198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root 2026-07-05T22:40:22.156211+00:00 edge-con-bom01.int.pdx.net.uk sshd[1280198]: Failed password for root from 1.95.49.133 port 49100 ssh2 ... show less	Brute-Force SSH
🇨🇭 m_vlasov	2026-07-05 18:58:45 (3 days ago)	SSH/Telnet honeypot: 0 login attempts, 2 sessions, 0 shell commands.	Port Scan
🇩🇪 Rasmus	2026-07-05 18:28:33 (3 days ago)		Brute-Force SSH
🇺🇸 SecondBanana	2026-07-05 08:20:51 (4 days ago)	2026-07-05T08:20:50.351524+00:00 thecount sshd[74837]: Connection closed by authenticating user root ... show more 2026-07-05T08:20:50.351524+00:00 thecount sshd[74837]: Connection closed by authenticating user root 1.95.49.133 port 37832 [preauth] ... show less	Brute-Force SSH
🇺🇸 donarev419	2026-07-05 06:19:42 (4 days ago)	Port scan detected on port 10002 (connection without data transfer)	Port Scan
🇺🇸 paradoxnetworks	2026-07-05 02:53:59 (4 days ago)	2026-07-05T02:53:53.134431+00:00 edge-sea-con01.int.pdx.net.uk sshd[2370100]: Failed password for ro ... show more 2026-07-05T02:53:53.134431+00:00 edge-sea-con01.int.pdx.net.uk sshd[2370100]: Failed password for root from 1.95.49.133 port 37278 ssh2 2026-07-05T02:53:56.832927+00:00 edge-sea-con01.int.pdx.net.uk sshd[2370102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.49.133 user=root 2026-07-05T02:53:59.016612+00:00 edge-sea-con01.int.pdx.net.uk sshd[2370102]: Failed password for root from 1.95.49.133 port 42024 ssh2 ... show less	Brute-Force SSH
🇫🇷 polido	2026-07-04 23:13:21 (4 days ago)	[Oracle] Unauthorized connection attempt to port 22 from 1.95.49.133	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.205.202.119

🇧🇷 191.37.172.61

🇺🇸 172.233.190.182

🇮🇩 163.7.4.169

🇺🇸 162.144.195.114

🇸🇬 43.159.35.188

🇰🇷 222.116.25.156

🇨🇭 209.99.190.200

🇨🇴 190.248.168.219

🇵🇪 179.7.180.44

🇮🇳 171.61.166.25

🇵🇭 165.154.100.42

🇰🇷 152.32.139.9

🇭🇰 101.36.107.65

🇫🇷 91.196.152.238

🇿🇦 82.22.245.17

🇨🇦 54.39.203.144

🇿🇲 41.60.164.85

🇸🇬 34.87.178.70

🇻🇳 14.191.119.221