JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.51.143.227

49.51.143.227 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.51.143.227

Whois 49.51.143.227

IP Abuse Reports for 49.51.143.227:

This IP address has been reported a total of 21 times from 19 distinct sources. 49.51.143.227 was first reported on October 19th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇰 Shadow77	2026-10-22 11:53:00 (3 hours ago)	49.51.143.227 - - [22/Oct/2026:12:34:54 +0200] "GET /?parameter=<script>alert(1)</script> HTTP/1.1" ... show more 49.51.143.227 - - [22/Oct/2026:12:34:54 +0200] "GET /?parameter=<script>alert(1)</script> HTTP/1.1" 301 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 49.51.143.227 - - [22/Oct/2026:12:34:54 +0200] "GET /?parameter=../../../etc/passwd HTTP/1.1" 403 421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 49.51.143.227 - - [22/Oct/2026:12:34:54 +0200] "GET /?parameter=%3Cscript%3Ealert%281%29%3C%2Fscript%3E HTTP/1.1" 301 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 49.51.143.227 - - [22/Oct/2026:12:34:54 +0200] "GET /?parameter=cmd.exe HTTP/1.1" 301 484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" show less	Brute-Force Web App Attack Hacking
🇷🇸 Scan	2026-10-22 01:13:51 (13 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 ValtonTahiri	2026-10-21 17:29:43 (21 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=49.51.143.227; proto=UDP; source_port=42057; target_port=40125 show less	Port Scan
🇯🇵 VXG-NET	2026-10-21 17:14:28 (21 hours ago)	port=993, indicator_type=N/A	Port Scan Hacking
🇫🇮 sonot	2026-10-21 10:50:15 (1 day ago)	Blocked by UFW on mail [995/tcp] \| SPT: 41029 \| TTL: 20 \| LEN: 164 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [995/tcp] \| SPT: 41029 \| TTL: 20 \| LEN: 164 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 SiyCah	2026-10-21 03:00:01 (1 day ago)	49.51.143.227 fell into Endlessh tarpit; 0/5 total connections are currently still open. Total time ... show more 49.51.143.227 fell into Endlessh tarpit; 0/5 total connections are currently still open. Total time wasted: 36s. Total bytes sent by tarpit: 3.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 schuh	2026-10-20 19:00:55 (1 day ago)	20-10-2026:19:00:47UTC [Port Scan] unique_ports:101 ports:256,23,995,993,3306,113,143,1723,6025,1717 ... show more 20-10-2026:19:00:47UTC [Port Scan] unique_ports:101 ports:256,23,995,993,3306,113,143,1723,6025,1717,139,11967,4126,9103,1998,57294,32769,55056,705,8800,... (104 packets). SRC=49.51.143.227 TTL=34 PROTO=TCP SPT=63549 DPT=256 SYN show less	Port Scan
🇩🇪 mondor.ro	2026-10-20 18:50:18 (1 day ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 49.51.143.227, Reason: ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 49.51.143.227, Reason:[(mod_security) mod_security (id:212620) triggered by 49.51.143.227 (DE/Germany/-): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇫🇮 sonot	2026-10-20 18:17:05 (1 day ago)	Blocked by UFW on mail [80/tcp] \| SPT: 61477 \| TTL: 22 \| LEN: 164 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on mail [80/tcp] \| SPT: 61477 \| TTL: 22 \| LEN: 164 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 ICS Labs	2026-10-20 16:50:34 (1 day ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.	Brute-Force
🇯🇵 VXG-NET	2026-10-20 15:35:54 (1 day ago)	port=1025, indicator_type=N/A	Port Scan Hacking
🇩🇪 ghostwarriors	2026-10-20 15:20:26 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-10-20 14:41:39 (2 days ago)	[20/Oct/2026:17:41:30 +0300] 179250729013.522523 49.51.143.227 43092 148.251.76.218 80 [20/Oct/2026: ... show more [20/Oct/2026:17:41:30 +0300] 179250729013.522523 49.51.143.227 43092 148.251.76.218 80 [20/Oct/2026:17:41:39 +0300] 179250729911.415395 49.51.143.227 46890 148.251.76.218 443 show less	Web App Attack
Anonymous	2026-10-20 14:41:09 (2 days ago)	Malicious inbound activity detected by FortiGate IPS.	Hacking
🇩🇪 webanyone	2026-10-20 12:30:21 (2 days ago)	Web exploit attempt \| method: GET \| path: /?parameter=../../../etc/passwd, / \| query: parameter=<scr ... show more Web exploit attempt \| method: GET \| path: /?parameter=../../../etc/passwd, / \| query: parameter=<script>alert(1)</script> \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 2.57.217.229

🇦🇷 190.114.118.177

🇭🇺 185.196.52.54

🇭🇺 185.196.52.25

🇫🇷 185.177.72.70

🇮🇹 151.95.23.125

🇵🇭 103.180.201.234

🇷🇺 85.26.228.68

🇳🇱 77.239.124.205

🇭🇰 52.139.169.90

🇳🇱 45.148.10.141

🇧🇾 178.122.64.45

🇺🇸 136.70.43.193

🇪🇸 81.60.225.106

🇳🇱 78.142.18.40

🇦🇺 65.254.95.164

🇮🇳 42.104.199.9

🇺🇸 34.11.75.74

🇻🇳 27.79.2.7

🇻🇪 185.226.194.8