49.235.161.213
Classification: Malicious
49.235.161.213 is a malicious IP address in Shanghai, CN. 8 sightings from 3 threat sources (VPN geonode, Proxy), last seen 2026-11-06. Seen in AR, CH.
Current activity
- Open proxy — Provides anonymization that can hide an attacker.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR and CH, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN geonode | Maltiverse Threat Observatory | 2026-10-29 09:42:55 | 2026-11-06 09:43:04 | anonymization country_code:ar country_code:ch industry:technology-and-telecommunications malicious-activity | |
| Anonymizer | FireHOL | 2026-09-24 16:35:02 | 2026-09-24 16:35:02 | anomalous-activity anonymization | |
| Proxy | IPWhois.io | 2026-09-21 17:59:19 | 2026-09-21 17:59:19 | anonymization proxy | |
| Proxy | FireHOL | 2026-09-21 17:51:50 | 2026-09-21 17:51:50 | anomalous-activity anonymization proxy |
Tags
anonymization port:2080Whois information
- AS name
- AS45090 Tencent cloud computing Beijing Co., Ltd.
- Registrant
- Tencent cloud computing Beijing Co., Ltd.
- City
- Shanghai
- Postal code
- 202400
- Country
- CN — China 🇨🇳
- First indexed
- 2026-09-21 17:51:50
- Last updated
- 2026-11-07 05:26:54