49.86.40.253
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET jiangsu province network
- Usage Type
- Fixed Line ISP
- ASN
- AS146966
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Nanjing, Jiangsu
Abuse Reports
Total reports
61 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 SX Communications |
Web vulnerability scanning / probing from 49.86.40.253: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 4 hits; paths: /news/Mojave-Phone-Booth-Goes-Corporate-IPO-Imminent.
|
Port Scan Hacking Web App Attack | |
| 🇩🇪 LRob |
Abusive crawler | ua: Mozilla/5.0 (Linux; U; Android 12; zh-cn; VOG-AL00 Build/HUAWEIBRA-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chro | path: / | 2026-10-26 17:37 UTC
|
Bad Web Bot | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇮🇹 keope |
CrowdSec Automated Sync - Reason: http:scan
|
Brute-Force Web App Attack | |
| 🇺🇸 SX Communications |
Blocked abusive HTTP application-layer DoS / botnet traffic from 49.86.40.253: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇨🇦 AEITS |
Fail2Ban
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 49.86.40.253: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| 🇨🇦 trainiax |
Excessive crawling / scraping
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown