JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.51.52.130

49.51.52.130 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.51.52.130

Whois 49.51.52.130

IP Abuse Reports for 49.51.52.130:

This IP address has been reported a total of 110 times from 85 distinct sources. 49.51.52.130 was first reported on May 16th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-05-20 04:43:07 (3 months ago)	(sshd) Failed SSH login from 49.51.52.130 (US/United States/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 49.51.52.130 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 19 23:27:41 14209 sshd[23525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 user=root May 19 23:27:43 14209 sshd[23525]: Failed password for root from 49.51.52.130 port 53538 ssh2 May 19 23:42:24 14209 sshd[25798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 user=root May 19 23:42:26 14209 sshd[25798]: Failed password for root from 49.51.52.130 port 55766 ssh2 May 19 23:43:03 14209 sshd[25941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 user=root show less	Brute-Force SSH
🇺🇸 kosada.com	2026-05-20 03:41:04 (3 months ago)	SSH password guessing: Disconnected from invalid user claude 49.51.52.130 port 53404 [preauth]	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-05-20 03:14:13 (3 months ago)	ID: 3385048896 \| PORT: 45095 \| https://49-51-52-130.scanthe.net	Port Scan
🇫🇷 dsl	2026-05-20 02:15:59 (3 months ago)	May 20 02:15:57 dabeau sshd[9076]: Invalid user claude from 49.51.52.130 port 49730 May 20 02:15:57 ... show more May 20 02:15:57 dabeau sshd[9076]: Invalid user claude from 49.51.52.130 port 49730 May 20 02:15:57 dabeau sshd[9076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 May 20 02:15:59 dabeau sshd[9076]: Failed password for invalid user claude from 49.51.52.130 port 49730 ssh2 ... show less	Brute-Force SSH
🇺🇸 knock	2026-05-20 01:50:40 (3 months ago)	Knock-Knock honeypot brute-force: SSH (21 total hits)	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-20 01:32:23 (3 months ago)	49.51.52.130 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 49.51.52.130 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 19 19:50:33 14995 sshd[10952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.36.191.212 user=root May 19 19:50:35 14995 sshd[10952]: Failed password for root from 79.36.191.212 port 54544 ssh2 May 19 20:32:01 14995 sshd[14389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 user=root May 19 19:54:35 14995 sshd[11271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.36.191.212 user=root May 19 19:54:37 14995 sshd[11271]: Failed password for root from 79.36.191.212 port 45631 ssh2 IP Addresses Blocked: 79.36.191.212 (IT/Italy/host-79-36-191-212.retail.telecomitalia.it) show less	Brute-Force SSH
🇺🇸 r	2026-05-20 01:10:33 (3 months ago)	May 20 01:10:33 panel sshd[9053]: Failed password for root from 49.51.52.130 port 43276 ssh2	Brute-Force SSH
Anonymous	2026-05-20 00:36:56 (3 months ago)	2026-05-20T02:26:53.911563+02:00 mike-Z390 sshd-session[3922376]: Failed password for invalid user c ... show more 2026-05-20T02:26:53.911563+02:00 mike-Z390 sshd-session[3922376]: Failed password for invalid user coding from 49.51.52.130 port 47344 ssh2 2026-05-20T02:36:18.254128+02:00 mike-Z390 sshd-session[3947625]: Invalid user aida from 49.51.52.130 port 53848 2026-05-20T02:36:18.256598+02:00 mike-Z390 sshd-session[3947625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.52.130 2026-05-20T02:36:19.527460+02:00 mike-Z390 sshd-session[3947625]: Failed password for invalid user aida from 49.51.52.130 port 53848 ssh2 2026-05-20T02:36:55.521671+02:00 mike-Z390 sshd-session[3949312]: Invalid user doc from 49.51.52.130 port 34586 ... show less	Brute-Force SSH
🇺🇸 Tect.host	2026-05-20 00:36:50 (3 months ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
Anonymous	2026-05-20 00:29:14 (3 months ago)	Invalid user claude from 49.51.52.130 port 52564	Brute-Force SSH
Anonymous	2026-05-20 00:29:14 (3 months ago)	Invalid user claude from 49.51.52.130 port 52564	Brute-Force SSH
Anonymous	2026-05-20 00:29:14 (3 months ago)	Invalid user claude from 49.51.52.130 port 52564	Brute-Force SSH
🇺🇸 vertali	2026-05-19 22:35:02 (3 months ago)	CSF/LFD blocked 49.51.52.130 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH l ... show more CSF/LFD blocked 49.51.52.130 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 49.51.52.130 (US/United States/-): 5 in the last 3600 secs. Evidence: May 19 17:07:40 paladin sshd[2585385]: Invalid user sms from 49.51.52.130 port 55156 show less	Brute-Force SSH
🇦🇺 neilwal	2026-05-19 22:34:31 (3 months ago)	Honeypot (Port 22) caught 49.51.52.130 trying: root:null; 345gs5662d34:345gs5662d34; root:3245gs5662 ... show more Honeypot (Port 22) caught 49.51.52.130 trying: root:null; 345gs5662d34:345gs5662d34; root:3245gs5662d34; admin:admin; support:support; claude:claude; claude:3245gs5662d34; support:qwertyuiop show less	Brute-Force
🇺🇸 ShadowWhisperer	2026-05-19 22:04:15 (3 months ago)	botnet node - cryptominer (outlaw/mdrfckr) [worm, crypto, infected, backdoor]	Brute-Force SSH Hacking Exploited Host

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.106.40.43

🇮🇹 188.152.238.126

🇦🇷 181.2.146.34

🇧🇷 179.238.23.88

🇺🇸 162.216.150.238

🇮🇩 114.5.84.99

🇺🇸 98.168.103.133

🇳🇱 94.154.43.56

🇫🇷 91.196.152.35

🇪🇸 88.16.130.18

🇬🇧 87.236.176.136

🇰🇷 59.152.168.184

🇮🇳 59.144.92.154

🇻🇳 58.186.20.101

🇳🇱 45.148.10.120

🇻🇳 42.96.19.37

🇲🇦 196.206.65.140

🇧🇬 193.24.211.218

🇺🇸 157.245.243.118

🇦🇹 150.251.225.210