49.75.110.162

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
52% Elevated
395 reports
62 reporters · latest 1 month ago
ISP
CHINANET jiangsu province network
Usage Type
Fixed Line ISP
ASN
AS140292
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Nanjing, Jiangsu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
395 from 62 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 9 🇸🇬 Singapore 7
Most common categories SSH 34 Brute-Force 31 Port Scan 10 Hacking 4 Web App Attack 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 78/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie. Context: 49.75.110.162 classified as botnet node participating in coordinated attack campaigns (high confidence).
Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH
Anonymous
SSH brute-force attack on WineCommerce infrastructure. Repeated authentication failures detected by fail2ban sshd jail.
Brute-Force SSH
🇩🇪 YumXac
Brute-Force SSH
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 52588 TTL: 44 Packet length: 44 TOS: 0x08 This report (for 49.75.110.162) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇺🇸 oof
Brute-Force SSH
🇩🇪 Kejult
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
Hacking SSH
🇨🇦 hpg
30 invalid SSH login attempts from 49.75.110.162 in the last 0.1 hours
Brute-Force SSH
🇮🇹 alph44
SSH brute force attack detected: 5 failed attempts
Brute-Force
🇩🇪 formality
Invalid user usuario from 49.75.110.162 port 9107
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇨🇭 m_vlasov
SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.
Port Scan
🇧🇷 tiwanetbr
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SSH, failed attempts: 5).
Brute-Force SSH
🇦🇺 shomerdns.com
Brute-Force SSH
🇧🇾 lns.bz
SSH bruteforce [BY]
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 159.138.150.246
🇵🇰 103.66.148.218
🇺🇸 93.152.81.10
🇸🇬 43.133.47.202
🇧🇪 35.210.23.62
🇩🇪 194.5.49.84
🇳🇱 185.243.246.90
🇰🇷 175.201.184.140
🇧🇷 131.100.8.189
🇲🇾 120.141.21.219
🇬🇧 104.143.232.112
🇧🇩 103.75.138.14
🇷🇴 92.118.39.56
🇫🇷 85.204.70.118
🇸🇬 38.246.130.112
🇨🇳 36.33.19.48
🇬🇧 35.203.211.101
🇰🇷 220.76.91.28
🇺🇸 185.180.141.32
🇵🇱 172.69.155.62
feedback