JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.75.11.152

Neutral Activity

Abuse Confidence Score

0% Low Risk

25 reports

20 reporters · latest 7 months ago

ISP: CHINANET jiangsu province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.75.11.152 has been reported 25 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

25 from 20 distinct reporters

First reported

April 8th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-04-12 00:13:46 UTC · (7 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.75.11.152	SSH
🇩🇪 zUnlegit	2026-04-11 18:55:16 UTC · (7 months ago)	2026-04-11T20:55:04.433121+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:08.203130+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:10. ... show more 2026-04-11T20:55:04.433121+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:08.203130+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:10.979140+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:14.405178+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 2026-04-11T20:55:16.503696+02:00 root260 sshd[2482025]: Failed password for root from 49.75.11.152 port 11924 ssh2 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-04-11 15:03:29 UTC · (7 months ago)	2026-04-11 15:03:29 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 MPL	2026-04-11 14:25:01 UTC · (7 months ago)	tcp/22 (2 or more attempts)	Port Scan
🇹🇷 Threat.live	2026-04-11 07:10:08 UTC · (7 months ago)	Brute Force, tcp/22	Brute-Force
🇬🇧 andypiper	2026-04-11 01:01:57 UTC · (7 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 00:25:26 UTC · (7 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.75.11.152 2026-04-10 06:07:15 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/Telegra ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.75.11.152 2026-04-10 06:07:15 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/","locate D877F783D5D3EF8Cs","echo Hi \| cat -n"] 2026-04-10 06:27:00 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi \| cat -n"] show less	SSH
🇫🇷 gbzret4d	2026-04-11 00:12:15 UTC · (7 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇺🇸 caphector.com	2026-04-10 07:36:05 UTC · (7 months ago)	2026-04-09T23:35:39.838250-08:00 caphector.com sshd-session[2496697]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 11015 ssh2 [preauth] 2026-04-09T23:35:45.743795-08:00 caphector.com sshd-session[2496699]: error: ma ... show more 2026-04-09T23:35:39.838250-08:00 caphector.com sshd-session[2496697]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 11015 ssh2 [preauth] 2026-04-09T23:35:45.743795-08:00 caphector.com sshd-session[2496699]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 11087 ssh2 [preauth] 2026-04-09T23:35:54.019825-08:00 caphector.com sshd-session[2496732]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 11151 ssh2 [preauth] 2026-04-09T23:36:04.009558-08:00 caphector.com sshd-session[2496740]: Invalid user admin from 49.75.11.152 port 11270 2026-04-09T23:36:05.035703-08:00 caphector.com sshd-session[2496740]: error: maximum authentication attempts exceeded for invalid user admin from 49.75.11.152 port 11270 ssh2 [preauth] ... show less	Brute-Force SSH
🇩🇪 RoblKyogre	2026-04-10 03:05:02 UTC · (7 months ago)	2026-04-09T20:04:49.771244-07:00 NetCafe sshd-session[916929]: Failed password for root from 49.75.11.152 port 11192 ssh2 2026-04-09T20:04:53.480355-07:00 NetCafe sshd-session[916929]: Failed password for root from 49.75.11.152 port 11192 ssh2 2026-0 ... show more 2026-04-09T20:04:49.771244-07:00 NetCafe sshd-session[916929]: Failed password for root from 49.75.11.152 port 11192 ssh2 2026-04-09T20:04:53.480355-07:00 NetCafe sshd-session[916929]: Failed password for root from 49.75.11.152 port 11192 ssh2 2026-04-09T20:04:54.105879-07:00 NetCafe sshd-session[916929]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 11192 ssh2 [preauth] 2026-04-09T20:05:00.383174-07:00 NetCafe sshd-session[917041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.75.11.152 user=root 2026-04-09T20:05:01.808131-07:00 NetCafe sshd-session[917041]: Failed password for root from 49.75.11.152 port 11360 ssh2 ... show less	Brute-Force SSH
🇳🇱 xTom	2026-04-10 01:51:29 UTC · (7 months ago)	2026-04-10T01:51:13.089830+00:00 cdn-nl sshd[2582012]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 10415 ssh2 [preauth] 2026-04-10T01:51:20.467904+00:00 cdn-nl sshd[2582022]: error: maximum authentication attempts ... show more 2026-04-10T01:51:13.089830+00:00 cdn-nl sshd[2582012]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 10415 ssh2 [preauth] 2026-04-10T01:51:20.467904+00:00 cdn-nl sshd[2582022]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 10483 ssh2 [preauth] 2026-04-10T01:51:29.651443+00:00 cdn-nl sshd[2582024]: error: maximum authentication attempts exceeded for root from 49.75.11.152 port 10545 ssh2 [preauth] ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-10 00:16:30 UTC · (7 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.75.11.152 2026-04-09 00:54:30 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/Telegra ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/49.75.11.152 2026-04-09 00:54:30 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi \| cat -n"] show less	Brute-Force
🇺🇸 sh97	2026-04-09 22:37:31 UTC · (7 months ago)	nws.sh: SSH Brute Force from 49.75.11.152 at 2026-04-10 04:07:31 IST	Brute-Force SSH
🇺🇸 sh97	2026-04-09 19:22:02 UTC · (7 months ago)	dedirock-8034437: SSH Brute Force from 49.75.11.152 at 2026-04-09 23:22:02 +04	Brute-Force SSH
🇺🇸 MPL	2026-04-09 14:33:34 UTC · (7 months ago)	tcp/22	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69

🇹🇷 193.35.155.43

🇺🇸 192.253.209.21

🇺🇸 172.121.188.160

🇯🇵 172.104.100.117

🇺🇸 159.223.97.218

🇨🇳 101.126.11.137

🇫🇷 92.205.105.119

🇵🇱 81.162.214.119

🇺🇸 66.132.172.184

🇫🇷 37.59.204.157

🇷🇴 2.57.122.168

🇪🇸 212.227.153.164

🇨🇴 190.67.106.221

🇵🇹 188.82.162.29

🇺🇦 176.103.22.94

🇺🇸 173.249.206.188

🇵🇱 172.64.200.229

🇵🇱 172.64.200.116

🇳🇱 138.124.30.225