49.81.67.140
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET jiangsu province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Nanjing, Jiangsu
No reports in the last 60 days
49.81.67.140 has been reported 18 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
18 from
18 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:13952 dst:3306
|
Port Scan | |
| 🇫🇷 Hiigara |
connection attempt : 49.81.67.140 on port : tcp/3306 (MySQL)
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 3306 (connection without data transfer)
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇩🇪 centurion |
Blocked by UFW on ns02 [3306/tcp] Source port: 40295 TTL: 114 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SQL Injection | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [3306/tcp]
Source port: 9238
TTL: 110
Packet length: 40
|
Port Scan SQL Injection | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack Port 3306)
|
Brute-Force Hacking Port Scan | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 49.81.67.140 to port 3306 (ger-02) [MYSQL]
|
Exploited Host | |
| 🇩🇪 yangfan |
UFW Blocked [3306/TCP]
Source: 49.81.67.140:34607
TTL: 115
Lenth: 40
TOS: 0x00
|
Port Scan SQL Injection | |
| 🇳🇵 radheykrishna.com.np |
May 10 03:35:31 kernel: [1853177.097226] [UFW BLOCK] IN=ens160 OUT= SRC=49.81.67.140 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=256 PROTO=TCP SPT=57829 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇫🇷 allan71 |
2026-05-09 23:36:51 1959297 [Warning] Access denied for user 'root'@'49.81.67.140' (using password: NO)
...
|
SQL Injection | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic on 3306/mysqld
|
Port Scan | |
| 🇨🇭 Elysium Security |
Mass port scanning on a whole network
|
Port Scan | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: Unauthorized traffic on 3306/mysqld
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown