JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.52.223.49

106.52.223.49 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 16%: ?

16%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.52.223.49

Whois 106.52.223.49

IP Abuse Reports for 106.52.223.49:

This IP address has been reported a total of 19 times from 15 distinct sources. 106.52.223.49 was first reported on March 30th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 OptimusGO	2026-04-20 15:30:37 (1 month ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-04-20 16:30:37 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-04-18 00:06:49 (1 month ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-04-18 01:06:49 UTC Log evidence: show less	Port Scan Brute-Force
🇬🇧 OptimusGO	2026-04-15 13:26:24 (1 month ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-04-15 14:26:24 UTC Log evidence: show less	Port Scan Brute-Force
🇨🇭 Elysium Security	2026-04-15 09:54:06 (1 month ago)	Mass port scanning on a whole network	Port Scan
🇺🇸 LSPCCU	2026-04-15 07:45:18 (1 month ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, We ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 106. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇨🇭 pingusurmars	2026-04-14 04:37:56 (1 month ago)	Blocked by UFW on ampereone [6379/tcp] Source port: 37478 TTL: 44 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on ampereone [6379/tcp] Source port: 37478 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-04-13 00:44:56 (1 month ago)	Unauthorized attempt on coresecret [6379/tcp] Source port: 46344 TTL: 47 Packet length: 60 TOS: 0x00 ... show more Unauthorized attempt on coresecret [6379/tcp] Source port: 46344 TTL: 47 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 OptimusGO	2026-04-11 18:00:42 (1 month ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-04-11 19:00:41 UTC Log evidence: 04/11/2026-19:00:40.771392 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 106.52.223.49:56634 -> 185.127.18.66:6379 04/11/2026-19:00:40.771392 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 106.52.223.49:56634 -> 185.127.18.66:6379 show less	Port Scan Brute-Force
Anonymous	2026-04-09 12:55:38 (2 months ago)	2026-04-09T13:55:37.957776+01:00 vps kernel: [37479555.496802] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-04-09T13:55:37.957776+01:00 vps kernel: [37479555.496802] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=106.52.223.49 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x60 TTL=42 ID=4586 DF PROTO=TCP SPT=40514 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇷🇺 genokrad	2026-04-08 09:00:15 (2 months ago)	Unauthorized connection attempt on TCP/6379 (Redis)	Port Scan
🇺🇸 cazae	2026-04-07 06:04:03 (2 months ago)	Unauthorized attempt on debian [6379/tcp] Source port: 60238 TTL: 46 Packet length: 60 TOS: 0x08 ht ... show more Unauthorized attempt on debian [6379/tcp] Source port: 60238 TTL: 46 Packet length: 60 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 _ArminS_	2026-04-01 14:06:16 (2 months ago)	SP-Scan 60680:6379 detected 2026.04.01 16:06:16 blocked until 2026.05.21 09:09:03	Port Scan
🇯🇵 VXG-NET	2026-03-31 10:30:42 (2 months ago)	port=6379, indicator_type=scan	Port Scan
Anonymous	2026-03-31 09:31:22 (2 months ago)	Blocked by UFW (TCP on 6379) Source port: 41514 TTL: 52 Packet length: 60 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 6379) Source port: 41514 TTL: 52 Packet length: 60 TOS: 0x14 This report (for 106.52.223.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 PetePK	2026-03-31 04:59:02 (2 months ago)	Probed 1 time(s): TCP/6379	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.8.70.193

🇨🇳 139.9.191.197

🇺🇸 67.220.180.90

🇺🇸 66.132.186.244

🇮🇳 59.185.230.105

🇺🇸 40.124.185.212

🇧🇪 35.195.84.210

🇮🇳 20.40.41.0

🇺🇸 2001:4830:c200:5:9999::149

🇺🇸 172.253.86.84

🇨🇳 171.12.10.144

🇿🇦 102.23.208.77

🇫🇷 85.217.140.25

🇮🇪 52.48.95.19

🇧🇷 43.135.216.191

🇩🇪 8.211.8.171

🇷🇺 5.183.29.36

🇨🇳 220.250.10.178

🇲🇽 192.178.95.210

🇧🇷 185.194.204.183