JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.115.219.90

49.115.219.90 was found in our database!

This IP was reported 2,460 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET xinjiang province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	xjtelecom.com.cn
Country	🇨🇳 China
City	Urumqi, Xinjiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.115.219.90

Whois 49.115.219.90

IP Abuse Reports for 49.115.219.90:

This IP address has been reported a total of 2,460 times from 263 distinct sources. 49.115.219.90 was first reported on April 11th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 Lacika555	2026-09-02 16:52:19 (3 minutes ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇳🇱 Slartibartfast	2026-09-02 15:00:55 (1 hour ago)	SMTP Brute Force	Brute-Force
🇺🇸 mnogoweb	2026-09-02 14:58:04 (1 hour ago)	(smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 08:14:15 login authenticator failed for ([71.19.192.246]) [49.115.219.90]: 535 Incorrect authentication data (set_id=jasonmills) 2026-09-02 08:18:40 login authenticator failed for ([85.12.200.52]) [49.115.219.90]: 535 Incorrect authentication data (set_id=chloeprice) 2026-09-02 08:25:09 login authenticator failed for (h-176-10-203-54.A463.priv.bahnhof.se) [49.115.219.90]: 535 Incorrect authentication data (set_id=noahrodriguez) 2026-09-02 08:41:40 login authenticator failed for ([85.12.200.52]) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) 2026-09-02 08:58:01 login authenticator failed for (120.245.223.60.adsl-pool.sx.cn) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇫🇮 notelseit	2026-09-02 14:12:55 (2 hours ago)	2026-09-02T16:12:19.349434+02:00 mail postfix/smtps/smtpd[3301524]: warning: unknown[49.115.219.90]: ... show more 2026-09-02T16:12:19.349434+02:00 mail postfix/smtps/smtpd[3301524]: warning: unknown[49.115.219.90]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-02T16:12:21.220045+02:00 mail postfix/smtps/smtpd[3301524]: disconnect from unknown[49.115.219.90] ehlo=1 auth=0/1 commands=1/2 2026-09-02T16:12:55.304126+02:00 mail postfix/smtps/smtpd[3301524]: warning: unknown[49.115.219.90]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info ... show less	Brute-Force Email Spam
🇺🇸 Zestysoft	2026-09-02 13:41:56 (3 hours ago)	2026-09-02T13:41:56.297464+00:00 mail dovecot: auth: passwd-file([email protected],49.115.219.90 ... show more 2026-09-02T13:41:56.297464+00:00 mail dovecot: auth: passwd-file([email protected],49.115.219.90): unknown user (given password: EASYASONETWOThREE) ... show less	Brute-Force
🇺🇸 mnogoweb	2026-09-02 10:46:34 (6 hours ago)	(smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 04:00:13 login authenticator failed for ([189.56.5.209]) [49.115.219.90]: 535 Incorrect authentication data (set_id=contact) 2026-09-02 04:19:31 login authenticator failed for ([31.208.55.106]) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) 2026-09-02 04:28:32 login authenticator failed for ([211.116.107.222]) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) 2026-09-02 04:29:00 login authenticator failed for (gru-209-14-85-115.ip4.99.network) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) 2026-09-02 04:46:29 login authenticator failed for (210-185-110-56.static.tpgi.com.au) [49.115.219.90]: 535 Incorrect authentication data (set_id=sarahmiller) show less	Port Scan
🇩🇪 Paul Smith	2026-09-02 09:27:49 (7 hours ago)	Email Auth Brute force attack 6/5 in last day	Brute-Force
Anonymous	2026-09-02 09:24:04 (7 hours ago)	bruteforce	Brute-Force
🇺🇸 mnogoweb	2026-09-02 09:23:40 (7 hours ago)	(smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 49.115.219.90 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 03:09:34 login authenticator failed for ([65.20.237.119]) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) 2026-09-02 03:11:43 login authenticator failed for ([183.171.41.118]) [49.115.219.90]: 535 Incorrect authentication data (set_id=matt) 2026-09-02 03:13:04 login authenticator failed for ([65.20.237.119]) [49.115.219.90]: 535 Incorrect authentication data (set_id=jasonmills) 2026-09-02 03:21:59 login authenticator failed for (abts-north-static-115.85.160.122.airtelbroadband.in) [49.115.219.90]: 535 Incorrect authentication data (set_id=calebthomas) 2026-09-02 03:23:34 login authenticator failed for (abts-north-static-115.85.160.122.airtelbroadband.in) [49.115.219.90]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇫🇷 dwmp	2026-09-02 09:19:01 (7 hours ago)	Sep 2 04:51:18 webcore postfix/smtpd[3688501]: warning: unknown[49.115.219.90]: SASL LOGIN authenti ... show more Sep 2 04:51:18 webcore postfix/smtpd[3688501]: warning: unknown[49.115.219.90]: SASL LOGIN authentication failed: authentication failure Sep 2 05:47:22 webcore postfix/smtpd[3722765]: warning: unknown[49.115.219.90]: SASL LOGIN authentication failed: authentication failure Sep 2 11:19:00 webcore postfix/smtpd[23434]: warning: unknown[49.115.219.90]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2026-09-02 08:13:20 (8 hours ago)	IMAP password guessing	Brute-Force
🇩🇪 FeG Deutschland	2026-09-02 07:48:04 (9 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇦🇺 Bay13	2026-09-02 04:42:24 (12 hours ago)	CrowdSec:crowdsecurity/postfix-spam	Email Spam
Anonymous	2026-09-02 02:20:28 (14 hours ago)	Sep 1 00:28:36 butterfly dovecot: auth: passwd-file([email protected],49.115.219.90): unknown user ... show more Sep 1 00:28:36 butterfly dovecot: auth: passwd-file([email protected],49.115.219.90): unknown user Sep 1 00:28:36 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=49.115.219.90 Sep 1 00:47:25 butterfly dovecot: auth: passwd-file(admin,49.115.219.90): unknown user Sep 1 00:47:25 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=49.115.219.90 Sep 1 04:11:47 butterfly dovecot: auth: passwd-file([email protected],49.115.219.90): unknown user Sep 1 04:11:48 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=49.115.219.90 Sep 1 06:52:02 butterfly dovecot: auth: passwd-file([email protected],49.115.219.90): unknown user Sep 1 06:52:02 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=mail@kaihild ... show less	Hacking Brute-Force Exploited Host
🇯🇵 tttomomi	2026-09-02 01:40:51 (15 hours ago)	Repeated failed SMTP AUTH attempts (SASL) against our mail server. Usernames attempted: noname.	Brute-Force

Showing 1 to 15 of 2460 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.235

🇫🇮 2.26.23.219

🇺🇸 216.26.228.186

🇧🇷 200.175.201.167

🇪🇹 196.188.227.152

🇲🇽 189.156.241.156

🇮🇩 163.227.146.38

🇵🇱 109.205.211.110

🇫🇷 91.196.152.186

🇬🇪 85.117.60.114

🇺🇸 195.184.76.220

🇺🇸 192.230.196.237

🇵🇱 192.162.93.82

🇨🇳 171.8.37.70

🇭🇰 118.193.45.134

🇱🇻 62.60.130.242

🇺🇸 52.207.196.234

🇺🇸 47.85.219.129

🇫🇷 213.32.66.52

🇺🇸 54.243.103.191