JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.7.106.111

Neutral Activity

Abuse Confidence Score

0% Low Risk

19 reports

18 reporters · latest 10 months ago

ISP: ChinaTelecom Group Beijing Ltd,Co
Usage Type: Data Center/Web Hosting/Transit
ASN: AS23724
Domain Name: bjtelecom.cn
Country: 🇨🇳 China
City: Beijing, Beijing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.7.106.111 has been reported 19 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

19 from 18 distinct reporters

First reported

December 23rd 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-12-24 23:55:56 UTC · (10 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/49.7.106.111	SSH
🇹🇷 rtbh.com.tr	2025-12-24 20:10:37 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ps-center	2025-12-24 03:52:12 UTC · (10 months ago)	RDM-W: TCP-Scanner. Port: 22	Port Scan
🇩🇪 Admins@FBN	2025-12-24 02:20:16 UTC · (10 months ago)	FW-PortScan: Traffic Blocked srcport=2082 dstport=22	Port Scan Hacking SSH
🇨🇿 lp	2025-12-24 01:20:06 UTC · (10 months ago)	SSH Brute force: 1 attempts were recorded from 49.7.106.111 2025-12-24T01:52:30+01:00 Invalid user a from 49.7.106.111 port 55116	Brute-Force SSH
🇪🇸 yvoictra	2025-12-24 00:47:46 UTC · (10 months ago)	2025-12-24T01:47:45.394475+01:00 medusa sshd[152996]: Invalid user a from 49.7.106.111 port 5138 ...	Brute-Force SSH
🇯🇵 VXG-NET	2025-12-24 00:38:24 UTC · (10 months ago)	port=22, indicator_type=brute-force	Brute-Force
🇩🇪 ValtonTahiri	2025-12-23 22:54:03 UTC · (10 months ago)	Honeypot hit: Empty payload (likely service probe); 2222 [2] TCP	Port Scan
🇧🇩 sakibmas	2025-12-23 20:00:18 UTC · (10 months ago)	2025-12-24T02:00:15.254674+06:00 fs sshd[3133687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 2025-12-24T02:00:17.748649+06:00 fs sshd[3133687]: Failed password for invalid user a from 49.7.10 ... show more 2025-12-24T02:00:15.254674+06:00 fs sshd[3133687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 2025-12-24T02:00:17.748649+06:00 fs sshd[3133687]: Failed password for invalid user a from 49.7.106.111 port 10824 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-23 19:18:55 UTC · (10 months ago)	(sshd) Failed SSH login from 49.7.106.111 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 23 13:18:10 16807 sshd[10524]: Did not receive identification string from 49.7.106.111 port 56462 Dec 23 13:18:13 168 ... show more (sshd) Failed SSH login from 49.7.106.111 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 23 13:18:10 16807 sshd[10524]: Did not receive identification string from 49.7.106.111 port 56462 Dec 23 13:18:13 16807 sshd[10525]: Invalid user a from 49.7.106.111 port 56474 Dec 23 13:18:17 16807 sshd[10525]: Failed password for invalid user a from 49.7.106.111 port 56474 ssh2 Dec 23 13:18:19 16807 sshd[10532]: Invalid user nil from 49.7.106.111 port 22024 Dec 23 13:18:29 16807 sshd[10534]: Invalid user admin from 49.7.106.111 port 22028 show less	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2025-12-23 18:26:15 UTC · (10 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇩🇪 ghostwarriors	2025-12-23 17:50:22 UTC · (10 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇮 Rexikon	2025-12-23 17:37:25 UTC · (10 months ago)	Dec 23 18:37:15 plesk sshd[1367154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 Dec 23 18:37:18 plesk sshd[1367154]: Failed password for invalid user ubnt from 49.7.106.111 port 60000 ssh2 Dec ... show more Dec 23 18:37:15 plesk sshd[1367154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 Dec 23 18:37:18 plesk sshd[1367154]: Failed password for invalid user ubnt from 49.7.106.111 port 60000 ssh2 Dec 23 18:37:21 plesk sshd[1367197]: Invalid user user from 49.7.106.111 port 40866 Dec 23 18:37:21 plesk sshd[1367197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 Dec 23 18:37:23 plesk sshd[1367197]: Failed password for invalid user user from 49.7.106.111 port 40866 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2025-12-23 16:46:02 UTC · (10 months ago)	Dec 23 18:45:53 LegacyRP sshd[162811]: Invalid user nil from 49.7.106.111 port 29856 Dec 23 18:45:53 LegacyRP sshd[162811]: Failed none for invalid user nil from 49.7.106.111 port 29856 ssh2 Dec 23 18:45:55 LegacyRP sshd[162813]: Invalid user admin f ... show more Dec 23 18:45:53 LegacyRP sshd[162811]: Invalid user nil from 49.7.106.111 port 29856 Dec 23 18:45:53 LegacyRP sshd[162811]: Failed none for invalid user nil from 49.7.106.111 port 29856 ssh2 Dec 23 18:45:55 LegacyRP sshd[162813]: Invalid user admin from 49.7.106.111 port 29870 Dec 23 18:45:55 LegacyRP sshd[162813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 Dec 23 18:45:57 LegacyRP sshd[162813]: Failed password for invalid user admin from 49.7.106.111 port 29870 ssh2 Dec 23 18:45:58 LegacyRP sshd[162816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.7.106.111 user=root Dec 23 18:46:01 LegacyRP sshd[162816]: Failed password for root from 49.7.106.111 port 48694 ssh2 ... show less	Brute-Force SSH
🇦🇺 sh97	2025-12-23 16:00:15 UTC · (10 months ago)	AU01-SMC-BGP: SSH Brute Force from 49.7.106.111 at 2025-12-23 21:27:46 IST	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 223.237.156.66

🇵🇱 149.50.110.83

🇸🇬 145.223.150.167

🇹🇼 111.70.49.180

🇷🇺 95.165.142.8

🇦🇪 5.107.191.83

🇧🇷 177.137.82.55

🇻🇪 154.27.136.120

🇳🇵 103.28.84.78

🇺🇸 70.167.235.204

🇨🇳 58.209.82.184

🇦🇷 45.189.77.217

🇪🇨 45.188.229.169

🇰🇷 39.118.24.100

🇦🇷 38.51.24.225

🇮🇱 37.142.154.51

🇸🇬 188.166.245.203

🇬🇧 185.247.137.196

🇧🇷 164.152.250.192

🇺🇸 129.121.140.207