JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.235.140.52

49.235.140.52 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.235.140.52

Whois 49.235.140.52

IP Abuse Reports for 49.235.140.52:

This IP address has been reported a total of 17 times from 16 distinct sources. 49.235.140.52 was first reported on March 30th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 glmx	2026-04-01 17:10:52 (2 months ago)	This source IP initiated an unauthorized connection to a controlled SSH honeypot environment deploye ... show more This source IP initiated an unauthorized connection to a controlled SSH honeypot environment deployed for threat detection. The service is a non-production deceptive endpoint used solely to identify malicious reconnaissance, automated scanning, credential probing, and other pre-compromise activity. Any interaction with this service is considered highly suspicious because it is not advertised for legitimate use. show less	Port Scan SSH
🇺🇸 jennij	2026-03-31 07:37:40 (2 months ago)	Fail2Ban sshd ban on debian ...	Brute-Force SSH
🇬🇧 OptimusGO	2026-03-31 07:05:38 (2 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-03-31 08:05:28 UTC Log evidence: 03/31/2026-08:05:27.134163 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 49.235.140.52:55418 -> 185.127.18.66:22 show less	Port Scan Brute-Force
🇳🇱 StopAbuse	2026-03-31 05:54:06 (2 months ago)	tcp/22	Port Scan SSH
🇨🇿 lp	2026-03-31 04:48:52 (2 months ago)	SSH Brute force: 11 attempts were recorded from 49.235.140.52 2026-03-31T05:24:11+02:00 Disconnected ... show more SSH Brute force: 11 attempts were recorded from 49.235.140.52 2026-03-31T05:24:11+02:00 Disconnected from authenticating user root 49.235.140.52 port 59954 [preauth] 2026-03-31T05:27:57+02:00 Disconnected from authenticating user root 49.235.140.52 port 40542 [preauth] 2026-03-31T05:28:54+02:00 Disconnected from authenticating user root 49.235.140.52 port 54844 [preauth] 2026-03-31T05:29:50+02:00 Disconnected from authenticating user root 49.235.140.52 port 40924 [preauth] 2026-03-31T05:30:50+02:00 Disconnected from authenticating user root 49.235.140.52 port 55232 [preauth] 2026-03-31T05:31:48+02:00 Disconnected from authenticating user root 49.235.140.52 port 41308 [preauth] 2026-03-31T05:32:43+02:00 Disconnected from authenticating user root 49.235.140.52 port 55614 [preauth] 2026-03-31T05:33:37+02:00 Disconnected from authenticating user root 49.235.140.52 port 41684 [preauth] 2026-0 show less	Brute-Force SSH
🇭🇰 bing	2026-03-31 02:47:19 (2 months ago)	2026-03-31T02:47:16.046856 yxvm-8273160 sshd[219193]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-03-31T02:47:16.046856 yxvm-8273160 sshd[219193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.140.52 user=root 2026-03-31T02:47:18.660373 yxvm-8273160 sshd[219193]: Failed password for root from 49.235.140.52 port 40446 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-03-31 00:50:12 (2 months ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-31 00:08:20 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.235.140.52	SSH
🇧🇷 hostseries	2026-03-30 23:38:43 (2 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇦🇺 foobax	2026-03-30 23:26:58 (2 months ago)	connected to port 22 from port 47270 for over 2 seconds (> 0 bytes)	SSH Port Scan
🇹🇷 Threat.live	2026-03-30 21:20:30 (2 months ago)	Suspicious activity, tcp/36818	Port Scan
🇨🇿 lp	2026-03-30 21:18:50 (2 months ago)	SSH Brute force: 1 attempts were recorded from 49.235.140.52 2026-03-30T22:42:47+02:00 Disconnected ... show more SSH Brute force: 1 attempts were recorded from 49.235.140.52 2026-03-30T22:42:47+02:00 Disconnected from authenticating user root 49.235.140.52 port 36132 [preauth] show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-30 20:54:50 (2 months ago)	SSH bruteforce [BY]	SSH
🇫🇮 misfit	2026-03-30 15:28:39 (2 months ago)	SSH brute-force (1 attempts). Org: AS45090 Shenzhen Tencent Computer Systems Company Limited, Shangh ... show more SSH brute-force (1 attempts). Org: AS45090 Shenzhen Tencent Computer Systems Company Limited, Shanghai, CN. show less	Brute-Force SSH
🇩🇪 AnonDrop	2026-03-30 15:27:29 (2 months ago)	Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -i ... show more Credential/password theft attempt - Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~; chattr -ia .ssh; lockr -ia .ssh, cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ show less	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.103

🇧🇷 187.58.66.231

🇺🇸 147.185.132.216

🇨🇳 111.9.47.89

🇬🇧 86.167.201.135

🇨🇦 85.217.149.19

🇺🇸 71.6.232.23

🇮🇪 34.253.115.72

🇺🇸 23.172.217.77

🇺🇸 195.184.76.69

🇫🇷 178.32.213.235

🇫🇮 147.185.133.191

🇫🇷 144.91.121.253

🇺🇸 136.107.186.11

🇸🇬 128.199.231.249

🇺🇸 104.21.83.228

🇺🇸 66.132.195.100

🇮🇪 34.245.56.73

🇮🇳 13.233.255.172

🇧🇪 198.235.24.220