JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.7.228.141

Neutral Activity

Abuse confidence score ?

0% Low Risk

234 reports

98 reporters · latest 7 months ago

ISP	ChinaTelecom Group Beijing Ltd,Co
Usage Type	Data Center/Web Hosting/Transit
ASN	AS23724
Domain Name	bjtelecom.cn
Country	🇨🇳 China
City	Beijing, Beijing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.7.228.141 has been reported 234 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 49.7.228.141

Export CSV

This IP address has been reported a total of 234 times from 98 distinct sources. 49.7.228.141 was first reported on January 14th 2026, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-02-23 06:43:01 (7 months ago)	[AUTORAVALT][[23/02/2026 - 03:42:59 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7 ... show more [AUTORAVALT][[23/02/2026 - 03:42:59 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7.0.0 - 49.7.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected ] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-02-16 06:43:07 (8 months ago)	[AUTORAVALT][[16/02/2026 - 03:43:05 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7 ... show more [AUTORAVALT][[16/02/2026 - 03:43:05 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7.0.0 - 49.7.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected ] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇺🇸 chronos	2026-02-09 06:43:12 (8 months ago)	[AUTORAVALT][[09/02/2026 - 03:43:10 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7 ... show more [AUTORAVALT][[09/02/2026 - 03:43:10 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7.0.0 - 49.7.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected ] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇬🇧 sc user	2026-02-07 17:46:23 (8 months ago)	Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ... show more Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy. show less	Brute-Force SSH
🇬🇧 sc user	2026-02-06 06:31:49 (8 months ago)	Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ... show more Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy. show less	Brute-Force SSH
🇯🇵 ki3	2026-02-06 03:37:35 (8 months ago)	Fail2Ban: Dovecot Attack 49.7.228.141 1770349054.0(JST)	Brute-Force SSH
🇺🇸 chronos	2026-02-06 01:07:44 (8 months ago)	[AUTORAVALT][[05/02/2026 - 22:07:41 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7 ... show more [AUTORAVALT][[05/02/2026 - 22:07:41 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7.0.0 - 49.7.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected ] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇹🇷 rtbh.com.tr	2026-02-03 20:11:22 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 sc user	2026-02-03 08:54:08 (8 months ago)	Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ... show more Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-02 20:11:21 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 dwmp	2026-02-02 12:58:38 (8 months ago)	Feb 2 12:28:22 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Feb 2 12:28:22 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<afO6ntVJhI0xB+SN> Feb 2 13:14:27 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<CAR1Q9ZJktYxB+SN> Feb 2 13:58:37 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<ey984dZJroQxB+SN> ... show less	Brute-Force
🇭🇺 dd3589	2026-02-02 07:18:02 (8 months ago)	2026-02-02T08:16:41+01:00 <masked> dovecot: pop3-login: Disconnected: Connection closed (auth failed ... show more 2026-02-02T08:16:41+01:00 <masked> dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=10.2.100.79, session=<GqKkGtJJ4N0xB+SN> show less	Brute-Force
🇺🇸 chronos	2026-02-02 06:40:31 (8 months ago)	[AUTORAVALT][[02/02/2026 - 03:40:29 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7 ... show more [AUTORAVALT][[02/02/2026 - 03:40:29 -03:00 UTC] Attack from [Hongtao Hou] [49.7.228.141]-[RANGE:49.7.0.0 - 49.7.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected ] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇫🇷 dwmp	2026-02-01 23:19:23 (8 months ago)	Feb 1 22:38:52 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Feb 1 22:38:52 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<iJc6CMpJLr0xB+SN> Feb 1 23:26:11 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<PiVnscpJOMsxB+SN> Feb 2 00:19:23 webcore dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.7.228.141, lip=75.119.153.41, session=<jwCub8tJYrQxB+SN> ... show less	Brute-Force
🇯🇵 Kinsei Engineering Inc.	2026-02-01 22:51:18 (8 months ago)	UFW:High-frequency access to unused ports	Port Scan

Showing 1 to 15 of 234 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.36.71

🇺🇸 147.185.132.67

🇳🇱 77.239.124.216

🇳🇱 31.56.209.211

🇰🇷 218.146.81.169

🇩🇪 217.243.176.121

🇷🇺 217.150.47.21

🇹🇼 211.72.115.235

🇹🇷 191.96.124.19

🇧🇷 189.126.91.107

🇦🇲 178.160.230.97

🇺🇸 151.240.44.20

🇵🇭 122.54.160.229

🇺🇦 90.96.182.215

🇺🇸 66.132.186.250

🇺🇸 23.226.70.138

🇭🇰 8.217.200.130

🇷🇴 2.57.121.25

🇨🇳 221.228.203.3

🇺🇸 195.184.76.12