49.51.228.166

Classification: Malicious

49.51.228.166 is a malicious IP address. Reported by 9 threat sources, last seen 2026-09-03. Network: AS132203 Tencent cloud computing (Beijing) Co., Ltd..

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SSH Attacker Blocklist.de 2026-05-24 10:01:50 2026-09-03 14:02:45 attacker malicious-activity
Proxy IPWhois.io 2025-06-16 00:17:08 2026-07-18 22:37:11 anonymization proxy
Mail Spammer Barracuda 2025-06-16 00:17:08 2026-07-18 22:37:11 attacker malicious-activity
Malicious Host AbuseIPDB 2026-05-23 22:49:07 2026-06-03 12:03:38 compromised malicious-activity
Bruteforce AbuseIPDB 2026-05-23 20:31:35 2026-05-29 04:56:13 malicious-activity
SSH Attacker AbuseIPDB 2026-05-23 20:31:35 2026-05-29 04:56:13 malicious-activity
Port Scanner AbuseIPDB 2026-05-24 01:15:59 2026-05-29 01:41:12 anomalous-activity
HTTP Attacker AbuseIPDB 2026-05-08 04:01:18 2026-05-29 01:02:20 malicious-activity
HTTP Scrapper AbuseIPDB 2026-05-28 23:11:42 2026-05-28 23:11:42 anomalous-activity
Mail Spammer AbuseIPDB 2026-05-24 17:08:37 2026-05-28 23:11:42 malicious-activity
DDoS Attacker AbuseIPDB 2026-05-24 14:32:43 2026-05-28 23:11:42 malicious-activity
Hacking AbuseIPDB 2026-05-08 04:01:18 2026-05-28 19:41:10 malicious-activity
FTP Attacker AbuseIPDB 2026-05-24 17:07:39 2026-05-27 17:50:11 malicious-activity
Malicious Host HoneyDB 2026-05-27 00:00:00 2026-05-27 00:00:00 malicious-activity
Phishing AbuseIPDB 2026-05-24 17:08:37 2026-05-24 17:08:37 malicious-activity
IMAP Attacker AbuseIPDB 2026-05-24 17:08:37 2026-05-24 17:08:37 malicious-activity
Proxy FireHOL 2022-12-31 22:02:08 2025-10-07 06:07:30 anonymization
Anonymizer FireHol 2022-12-29 10:39:01 2022-12-29 21:58:48 anonymization
Anonymizer Maltiverse Research Team 2020-11-21 16:08:41 2021-05-22 22:40:42 anonymizer
Anonymizer Maltiverse 2018-09-01 08:40:15 2018-09-01 08:40:15

Tags

anonymization anonymizer ssh bruteforce bot

Whois information

AS name
AS132203 Tencent cloud computing (Beijing) Co., Ltd.
AS registry
apnic
AS date
2011-04-07 00:00:00
AS CIDR
49.51.228.0/23
CIDR
49.51.0.0/16
Registrant
Tencent cloud computing (Beijing) Co., Ltd.
Address
Beijing, China
City
San Jose
State
CA
Postal code
95113
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2018-09-01 08:40:15
Last updated
2026-09-03 14:02:48

Malicious IPs in the same CIDR

49.51.228.166