This IP address has been reported a total of
10
times from
6 distinct
sources.
49.87.220.131 was first reported on
January 19th 2025 , and the most recent report was
1 day ago Hong Kong
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
SSH
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇭🇰
keledipan
2026-09-23 22:44:57
(1 day ago)
49.87.220.131 - - [24/Sep/2026:06:44:45 +0800] "GET /home.php?ac=favorite&formhash=bccda8fd&handleke ...
show more
49.87.220.131 - - [24/Sep/2026:06:44:45 +0800] "GET /home.php?ac=favorite&formhash=bccda8fd&handlekey=favoriteforum&id=60&mod=spacecp&type=forum HTTP/1.1" 200 4507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
49.87.220.131 - - [24/Sep/2026:06:44:57 +0800] "GET /home.php?ac=favorite&formhash=bccda8fd&handlekey=favoriteforum&id=60&mod=spacecp&type=forum HTTP/1.1" 200 1223 "https://www.dospy.wang/home.php?ac=favorite&formhash=bccda8fd&handlekey=favoriteforum&id=60&mod=spacecp&type=forum" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
SSH
🇮🇹
VHosting
2026-01-30 19:20:46
(7 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇮🇹
VHosting
2025-11-28 07:12:33
(9 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
2025-06-27 23:37:16
(1 year ago)
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇨🇿
unhfree.net
2025-06-27 23:36:03
(1 year ago)
Jun 28 01:36:02 canopus postfix/smtpd[2733410]: NOQUEUE: reject: RCPT from unknown[49.87.220.131]: 5 ...
show more
Jun 28 01:36:02 canopus postfix/smtpd[2733410]: NOQUEUE: reject: RCPT from unknown[49.87.220.131]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<49.87.220.131>
Jun 28 01:36:02 canopus postfix/smtpd[2733410]: NOQUEUE: reject: RCPT from unknown[49.87.220.131]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<49.87.220.131>
Jun 28 01:36:02 canopus postfix/smtpd[2733410]: NOQUEUE: reject: RCPT from unknown[49.87.220.131]: 554 5.7.1 <[email protected] >: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<49.87.220.131>
Jun 28 01:36:02 canopus postfix/smtpd[2733410]: NOQUEUE: reject: RCPT from unknown[49.87.220.131]: 554 5.7
...
show less
Brute-Force
Exploited Host
2025-05-23 07:46:48
(1 year ago)
Ports: 25,2525,465,587,2525; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇹🇷
rtbh.com.tr
2025-04-04 20:05:54
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-04-04 00:05:54
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-04-03 20:05:54
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
2025-01-19 09:55:39
(1 year ago)
2025-01-19T10:55:31+01:00 lb-2 sshd[1267516]: pam_unix(sshd:auth): authentication failure; logname= ...
show more
2025-01-19T10:55:31+01:00 lb-2 sshd[1267516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.87.220.131 user=root
2025-01-19T10:55:33+01:00 lb-2 sshd[1267516]: Failed password for root from 49.87.220.131 port 33740 ssh2
2025-01-19T10:55:36+01:00 lb-2 sshd[1267518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.87.220.131 user=root
2025-01-19T10:55:38+01:00 lb-2 sshd[1267518]: Failed password for root from 49.87.220.131 port 35718 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
10
of 10 reports
