JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.49.236.49

112.49.236.49 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Fuzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.49.236.49

Whois 112.49.236.49

IP Abuse Reports for 112.49.236.49:

This IP address has been reported a total of 31 times from 25 distinct sources. 112.49.236.49 was first reported on August 7th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-23 17:24:19 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 112.49.236.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 112.49.236.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 13:24:13.806021 2025] [security2:error] [pid 26703:tid 26703] [client 112.49.236.49:13797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/110412/"] [unique_id "aNLXvUXR0N48_-pRPHDZpAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 [email protected]	2024-09-20 10:08:07 (1 year ago)	Attempts bruteforce ssh login.	Brute-Force SSH
🇪🇸 saima	2024-08-09 00:00:09 (1 year ago)	Detected 111 times. SSH Brute-Force from address 112.49.236.49	Brute-Force SSH
🇩🇪 Tony Stipanic	2024-08-08 18:40:18 (1 year ago)	Aug 8 20:39:50 m2369 sshd[1340901]: Invalid user bindu from 112.49.236.49 port 12181 Aug 8 20:39:5 ... show more Aug 8 20:39:50 m2369 sshd[1340901]: Invalid user bindu from 112.49.236.49 port 12181 Aug 8 20:39:50 m2369 sshd[1340901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.49.236.49 Aug 8 20:39:50 m2369 sshd[1340901]: Invalid user bindu from 112.49.236.49 port 12181 Aug 8 20:39:52 m2369 sshd[1340901]: Failed password for invalid user bindu from 112.49.236.49 port 12181 ssh2 Aug 8 20:40:17 m2369 sshd[1341030]: Invalid user adminn from 112.49.236.49 port 11914 ... show less	Brute-Force SSH
🇨🇿 lp	2024-08-08 16:49:36 (1 year ago)	SSH Brute force: 9 attempts were recorded from 112.49.236.49 2024-08-08T18:15:58+02:00 Invalid user ... show more SSH Brute force: 9 attempts were recorded from 112.49.236.49 2024-08-08T18:15:58+02:00 Invalid user kunal from 112.49.236.49 port 11150 2024-08-08T18:27:06+02:00 Invalid user admin from 112.49.236.49 port 12085 2024-08-08T18:27:36+02:00 Invalid user luka from 112.49.236.49 port 11132 2024-08-08T18:28:14+02:00 Invalid user cq from 112.49.236.49 port 11192 2024-08-08T18:28:43+02:00 Invalid user www from 112.49.236.49 port 11820 2024-08-08T18:29:16+02:00 Invalid user deelip from 112.49.236.49 port 11263 2024-08-08T18:39:49+02:00 Invalid user db2inst from 112.49.236.49 port 11810 2024-08-08T18:40:25+02:00 Invalid user tiny from 112.49.236.49 port 11847 2024-08-08T18:41:03+02:00 Invalid user admin from 112.49.236.49 port 11261 show less	Brute-Force SSH
🇿🇦 LosMyGoedUit!	2024-08-08 16:29:04 (1 year ago)	2024-08-08T18:29:03+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	Brute-Force SSH
🇨🇭 Filli Group	2024-08-08 14:30:32 (1 year ago)	2024-08-08T16:20:53.427344+02:00 rma01.ch.pop.as202427.net sshd[150974]: Invalid user enterprisedb f ... show more 2024-08-08T16:20:53.427344+02:00 rma01.ch.pop.as202427.net sshd[150974]: Invalid user enterprisedb from 112.49.236.49 port 11022 2024-08-08T16:29:47.609484+02:00 rma01.ch.pop.as202427.net sshd[152229]: User root from 112.49.236.49 not allowed because not listed in AllowUsers 2024-08-08T16:30:32.104063+02:00 rma01.ch.pop.as202427.net sshd[152493]: Invalid user shoutcast from 112.49.236.49 port 11987 ... show less	Brute-Force SSH
🇫🇮 petardimic	2024-08-08 11:10:03 (1 year ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force
Anonymous	2024-08-08 11:08:46 (1 year ago)		Brute-Force SSH
🇩🇪 killmself	2024-08-08 11:01:56 (1 year ago)	Caught by Fail2Ban	Brute-Force SSH
🇳🇱 Jos Moonen	2024-08-08 08:57:43 (1 year ago)	Aug 8 10:57:39 raspberrypi sshd[14003]: Invalid user bodega from 112.49.236.49 port 22843 Aug 8 10 ... show more Aug 8 10:57:39 raspberrypi sshd[14003]: Invalid user bodega from 112.49.236.49 port 22843 Aug 8 10:57:39 raspberrypi sshd[14003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.49.236.49 Aug 8 10:57:42 raspberrypi sshd[14003]: Failed password for invalid user bodega from 112.49.236.49 port 22843 ssh2 ... show less	Brute-Force SSH
🇮🇩 [email protected]	2024-08-08 08:18:11 (1 year ago)	Attempts bruteforce ssh login.	Brute-Force SSH
🇪🇸 scotynau	2024-08-08 08:12:30 (1 year ago)	2024-08-08T10:12:29.152287Alesmola sshd[1204765]: Invalid user git from 112.49.236.49 port 23038 ...	Brute-Force SSH
🇲🇩 AzurCrystal	2024-08-08 07:32:34 (1 year ago)	Aug 8 10:32:34 ru sshd[205334]: Invalid user shutt from 112.49.236.49 port 12206 ...	Brute-Force SSH
🇯🇵 paradoxnetworks	2024-08-08 07:11:08 (1 year ago)	2024-08-08T07:07:27.468476+00:00 edge-tyo-con01.int.pdx.net.uk sshd[1919801]: pam_unix(sshd:auth): a ... show more 2024-08-08T07:07:27.468476+00:00 edge-tyo-con01.int.pdx.net.uk sshd[1919801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.49.236.49 2024-08-08T07:07:28.744353+00:00 edge-tyo-con01.int.pdx.net.uk sshd[1919801]: Failed password for invalid user zgr from 112.49.236.49 port 17252 ssh2 2024-08-08T07:11:07.869882+00:00 edge-tyo-con01.int.pdx.net.uk sshd[1919976]: Invalid user edx from 112.49.236.49 port 16933 ... show less	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.190

🇬🇧 194.50.235.139

🇨🇱 186.189.89.42

🇭🇰 165.154.62.25

🇺🇸 146.190.149.252

🇮🇳 143.110.245.211

🇦🇺 139.99.208.194

🇫🇮 65.108.203.231

🇰🇷 43.164.133.20

🇬🇧 31.14.254.43

🇬🇧 5.226.140.36

🇺🇸 216.25.89.112

🇺🇸 195.184.76.214

🇺🇸 195.184.76.135

🇺🇸 195.184.76.34

🇺🇸 172.81.133.81

🇩🇪 170.133.2.81

🇩🇪 158.94.208.36

🇺🇸 147.185.132.76

🇺🇸 103.234.62.115