115.49.68.9
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Henan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Zhengzhou, Henan
Abuse Reports
Total reports
49 from
30 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=50671 dstport=22
|
Port Scan Hacking SSH | |
| 🇩🇪 DasDuo |
Attempt on port 2222 - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 39708
TTL: 51
Packet length: 40
TOS: 0x08
This report (for 115.49.68.9) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/22 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-15 22:03:05 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 23
|
Brute-Force SSH | |
| 🇨🇦 polycoda |
AutoBlock: 📡 Port 22 Scan (Non Decay-Based)
|
Port Scan SSH | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [GEO] (Telnet IoT Attack)
|
IoT Targeted Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port scan
|
Port Scan | |
| 🇺🇸 MPL |
tcp/443 (2 or more attempts)
|
Port Scan | |
| 🇫🇮 mikkopal88 |
Telnet probe or brute-force attempt
|
Port Scan Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 22
|
Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown