JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.42.49.48

101.42.49.48 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 76%: ?

76%

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.42.49.48

Whois 101.42.49.48

IP Abuse Reports for 101.42.49.48:

This IP address has been reported a total of 26 times from 19 distinct sources. 101.42.49.48 was first reported on January 26th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇶🇦 Swaify	2026-07-28 23:00:07 (8 hours ago)	2026-07-29T01:59:59.130617+03:00 Vless sshd-session[310676]: Failed password for root from 101.42.49 ... show more 2026-07-29T01:59:59.130617+03:00 Vless sshd-session[310676]: Failed password for root from 101.42.49.48 port 54274 ssh2 2026-07-29T02:00:01.353324+03:00 Vless sshd-session[310676]: Failed password for root from 101.42.49.48 port 54274 ssh2 2026-07-29T02:00:06.001269+03:00 Vless sshd-session[310676]: Failed password for root from 101.42.49.48 port 54274 ssh2 ... show less	Brute-Force SSH
🇳🇱 Tsumugi Kotobuki	2026-07-28 22:41:24 (9 hours ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 104 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 104 \| Len: 44B \| Win: 10098(1) \| F2B/ufw-honeypot@2026-07-28T22:41:24Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-07-28 00:20:54 (1 day ago)	Blocked by UFW (TCP on 2222) Source port: 33471 TTL: 112 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2222) Source port: 33471 TTL: 112 Packet length: 40 TOS: 0x08 This report (for 101.42.49.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-27 20:18:36 (1 day ago)	2026-07-27T23:18:31.149805+03:00 vm635618.cloud.nuxt.network sshd-session[10036]: Failed password fo ... show more 2026-07-27T23:18:31.149805+03:00 vm635618.cloud.nuxt.network sshd-session[10036]: Failed password for root from 101.42.49.48 port 33084 ssh2 2026-07-27T23:18:33.226338+03:00 vm635618.cloud.nuxt.network sshd-session[10036]: Failed password for root from 101.42.49.48 port 33084 ssh2 2026-07-27T23:18:36.037522+03:00 vm635618.cloud.nuxt.network sshd-session[10036]: Failed password for root from 101.42.49.48 port 33084 ssh2 ... show less	Brute-Force SSH
🇩🇪 acadeova	2026-07-27 15:38:08 (1 day ago)	Blocked by UFW on vps2 [6379/tcp] Source port: 2013 TTL: 116 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on vps2 [6379/tcp] Source port: 2013 TTL: 116 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 webadmin	2026-07-26 14:07:12 (2 days ago)	Failed password for root from 101.42.49.48 port 54356 ssh2 Failed password for root from 101.42.49.4 ... show more Failed password for root from 101.42.49.48 port 54356 ssh2 Failed password for root from 101.42.49.48 port 56078 ssh2 Failed password for root from 101.42.49.48 port 57308 ssh2 show less	SSH
🇸🇰 GOVCERT	2026-07-26 13:53:41 (2 days ago)	Excessive Firewall Denies	DDoS Attack Web Spam
🇩🇪 NetWatch	2026-07-26 09:10:41 (2 days ago)	The IP 101.42.49.48 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇮 FlamingMojo	2026-07-26 09:10:40 (2 days ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-07-26T09:10:40Z	Brute-Force SSH
🇨🇿 lp	2026-07-26 02:19:03 (3 days ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 2807 times	Port Scan
🇩🇪 hispasign	2026-07-26 01:13:56 (3 days ago)	SSH Bruteforce Attempt [node 4]	Brute-Force SSH
🇺🇸 pixelmemory.us	2026-07-25 19:22:06 (3 days ago)	2026-07-25T12:21:56.202996-07:00 pixelmemory sshd-session[1176967]: Failed password for root from 10 ... show more 2026-07-25T12:21:56.202996-07:00 pixelmemory sshd-session[1176967]: Failed password for root from 101.42.49.48 port 50596 ssh2 2026-07-25T12:21:59.617041-07:00 pixelmemory sshd-session[1176967]: Failed password for root from 101.42.49.48 port 50596 ssh2 2026-07-25T12:22:02.277459-07:00 pixelmemory sshd-session[1176967]: Failed password for root from 101.42.49.48 port 50596 ssh2 2026-07-25T12:22:05.027998-07:00 pixelmemory sshd-session[1176967]: Failed password for root from 101.42.49.48 port 50596 ssh2 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-07-25 09:54:53 (3 days ago)	Blocked by UFW (TCP on 22) Source port: 18734 TTL: 112 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 18734 TTL: 112 Packet length: 40 TOS: 0x08 This report (for 101.42.49.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇩🇪 ghostwarriors	2026-07-25 08:50:29 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇿 lp	2026-07-25 06:43:58 (4 days ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 14314 times	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.251.245.88

🇨🇳 49.116.25.62

🇺🇸 202.8.43.169

🇺🇸 184.105.247.195

🇺🇸 104.28.164.79

🇷🇴 92.118.39.77

🇫🇷 85.217.140.49

🇺🇸 63.135.161.178

🇺🇸 57.141.18.112

🇺🇸 52.91.238.233

🇸🇰 46.229.233.132

🇳🇱 45.198.224.15

🇺🇸 45.79.153.51

🇺🇸 34.203.242.49

🇸🇬 34.124.225.147

🇺🇸 23.95.255.207

🇰🇷 3.34.41.48

🇺🇸 207.90.244.25

🇳🇱 185.242.226.85

🇩🇪 167.94.146.64