JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.175.49.105

117.175.49.105 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.175.49.105

Whois 117.175.49.105

IP Abuse Reports for 117.175.49.105:

This IP address has been reported a total of 11 times from 10 distinct sources. 117.175.49.105 was first reported on September 29th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-03-21 18:37:13 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 117.175.49.105 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 117.175.49.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 14:37:07.407869 2026] [security2:error] [pid 9206:tid 9223] [client 117.175.49.105:15349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thedowntonstory.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thedowntonstory.com"] [uri "/"] [unique_id "ab7lU3l84kgqzmW_cZSkzAAAAE0"], referer: http://thedowntonstory.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 Gone fishing	2025-10-02 00:58:46 (11 months ago)	Oct 2 08:58:25 server sshd[1975474]: pam_unix(sshd:auth): authentication failure; lo ...	Brute-Force SSH
🇺🇸 vestibtech	2025-10-01 19:12:27 (11 months ago)	Oct 1 15:12:26 Host-KEWR-E sshd[75868]: Connection reset by 117.175.49.105 port 9802 [preauth] ...	Brute-Force SSH
Anonymous	2025-10-01 14:22:11 (11 months ago)	Oct 1 16:22:07 raspberrypi sshd[27867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Oct 1 16:22:07 raspberrypi sshd[27867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.175.49.105 user=root Oct 1 16:22:10 raspberrypi sshd[27867]: Failed password for root from 117.175.49.105 port 10154 ssh2 ... show less	Brute-Force SSH
🇩🇪 teltow-flaeming.it	2025-10-01 10:58:52 (11 months ago)	SSH Brute Force on mail ...	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-30 23:37:21 (11 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/117.175.49.105	SSH
🇻🇳 crypl-admins	2025-09-30 17:15:31 (11 months ago)	2025-09-30T17:05:25.466698+00:00 deb76 sshd[71678]: Connection closed by 117.175.49.105 port 9875 [p ... show more 2025-09-30T17:05:25.466698+00:00 deb76 sshd[71678]: Connection closed by 117.175.49.105 port 9875 [preauth] 2025-09-30T17:15:29.719025+00:00 deb76 sshd[71691]: User root from 117.175.49.105 not allowed because not listed in AllowUsers 2025-09-30T17:15:29.991682+00:00 deb76 sshd[71691]: Connection closed by invalid user root 117.175.49.105 port 9939 [preauth] ... show less	Brute-Force
🇪🇸 saima	2025-09-30 00:00:02 (11 months ago)	Detected 282 times. SSH Brute-Force from address 117.175.49.105	Brute-Force SSH
🇨🇳 swk	2025-09-29 23:44:21 (11 months ago)	Sep 30 07:42:59 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043791]: Invalid user raghukumar from 117.175.49.105 p ... show more Sep 30 07:42:59 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043791]: Invalid user raghukumar from 117.175.49.105 port 9863 Sep 30 07:43:20 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043793]: Invalid user aniketh from 117.175.49.105 port 9762 Sep 30 07:43:41 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043799]: Invalid user aabha from 117.175.49.105 port 10196 Sep 30 07:44:01 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043813]: Invalid user avdesh from 117.175.49.105 port 10141 Sep 30 07:44:20 iZ7xv1v54sk8vpb8oj85xuZ sshd[2043815]: Invalid user sheela from 117.175.49.105 port 9777 ... show less	Brute-Force SSH
🇨🇭 final	2025-09-29 03:40:08 (11 months ago)	Sep 29 05:38:57 oa sshd[2906892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 29 05:38:57 oa sshd[2906892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.175.49.105 Sep 29 05:38:58 oa sshd[2906892]: Failed password for invalid user varlam from 117.175.49.105 port 9910 ssh2 Sep 29 05:39:23 oa sshd[2906905]: Invalid user gitlab-prometheus from 117.175.49.105 port 10218 Sep 29 05:39:23 oa sshd[2906905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.175.49.105 Sep 29 05:39:25 oa sshd[2906905]: Failed password for invalid user gitlab-prometheus from 117.175.49.105 port 10218 ssh2 Sep 29 05:39:47 oa sshd[2906919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.175.49.105 user=root Sep 29 05:39:49 oa sshd[2906919]: Failed password for root from 117.175.49.105 port 10013 ssh2 Sep 29 05:40:07 oa sshd[2906935]: Invalid user sty from 117.175.49.105 port 9808 ... show less	Brute-Force SSH
🇪🇸 saima	2025-09-29 00:00:05 (11 months ago)	Detected 575 times. SSH Brute-Force from address 117.175.49.105	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.167

🇧🇴 190.129.102.172

🇲🇾 180.75.251.226

🇰🇷 115.178.75.242

🇺🇸 66.249.66.204

🇵🇪 200.37.103.36

🇸🇪 171.25.158.50

🇦🇪 165.154.12.38

🇩🇴 152.0.83.183

🇭🇰 150.5.169.176

🇨🇳 114.116.234.89

🇫🇷 109.199.114.146

🇮🇳 106.51.92.114

🇮🇩 103.159.199.43

🇺🇸 98.168.101.164

🇸🇬 97.74.87.152

🇳🇱 77.239.124.215

🇸🇬 47.79.198.73

🇻🇪 38.248.162.196

🇷🇺 37.113.27.175