JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.64.220.231

Neutral Activity

Abuse Confidence Score

0% Low Risk

90 reports

54 reporters · latest 1 year ago

ISP: CHINANET jiangsu province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

49.64.220.231 has been reported 90 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

90 from 54 distinct reporters

First reported

August 4th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-09-22 23:00:35 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/49.64.220.231	Brute-Force
🇫🇷 Pythagus	2025-09-22 00:13:12 UTC · (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇨🇳 CGT Software Webmaster	2025-09-21 02:46:51 UTC · (1 year ago)	2025-09-21T10:46:46.206097+08:00 VM-8-9-debian sshd[2808159]: Failed password for root from 49.64.220.231 port 47544 ssh2 2025-09-21T10:46:47.798556+08:00 VM-8-9-debian sshd[2808161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2025-09-21T10:46:46.206097+08:00 VM-8-9-debian sshd[2808159]: Failed password for root from 49.64.220.231 port 47544 ssh2 2025-09-21T10:46:47.798556+08:00 VM-8-9-debian sshd[2808161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root 2025-09-21T10:46:49.995105+08:00 VM-8-9-debian sshd[2808161]: Failed password for root from 49.64.220.231 port 49126 ssh2 ... show less	Port Scan Brute-Force
🇨🇳 ThreatBook.io	2025-09-20 23:45:53 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/49.64.220.231	Brute-Force
🇫🇷 Pythagus	2025-09-19 00:14:03 UTC · (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-09-18 23:46:00 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/49.64.220.231	SSH
🇸🇪 Mailz1	2025-09-18 11:07:34 UTC · (1 year ago)	Sep 18 13:07:33 smtp sshd[1077781]: Failed password for invalid user root from 49.64.220.231 port 54474 ssh2 ...	Brute-Force SSH
🇫🇷 TimesZ	2025-09-18 10:38:02 UTC · (1 year ago)	Fail2ban sshd jail	Brute-Force SSH
Anonymous	2025-09-18 03:10:10 UTC · (1 year ago)	2025-09-18T05:10:07.604132 localhost.localdomain sshd[2105795]: Failed password for root from 49.64.220.231 port 34292 ssh2 2025-09-18T05:10:09.356047 localhost.localdomain sshd[2105795]: Connection closed by authenticating user root 49.64.220.231 po ... show more 2025-09-18T05:10:07.604132 localhost.localdomain sshd[2105795]: Failed password for root from 49.64.220.231 port 34292 ssh2 2025-09-18T05:10:09.356047 localhost.localdomain sshd[2105795]: Connection closed by authenticating user root 49.64.220.231 port 34292 [preauth] ... show less	Brute-Force SSH
🇰🇷 Siwol	2025-09-18 01:59:08 UTC · (1 year ago)	Sep 18 10:59:01 starlight-server sshd[57049]: Failed password for root from 49.64.220.231 port 56920 ssh2 Sep 18 10:59:03 starlight-server sshd[57174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220. ... show more Sep 18 10:59:01 starlight-server sshd[57049]: Failed password for root from 49.64.220.231 port 56920 ssh2 Sep 18 10:59:03 starlight-server sshd[57174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root Sep 18 10:59:04 starlight-server sshd[57174]: Failed password for root from 49.64.220.231 port 58612 ssh2 Sep 18 10:59:05 starlight-server sshd[57210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root Sep 18 10:59:07 starlight-server sshd[57210]: Failed password for root from 49.64.220.231 port 59756 ssh2 ... show less	Brute-Force SSH
🇱🇺 SiteXL	2025-09-17 21:06:02 UTC · (1 year ago)	{"event":{"DateTime":"2025-09-17T20:59:59Z","RemoteAddr":"49.64.220.231:43002","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"b4c3ef2e-9077-4864-b48f-8b84484b5a9e","Environ":"","User":"root", ... show more {"event":{"DateTime":"2025-09-17T20:59:59Z","RemoteAddr":"49.64.220.231:43002","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"b4c3ef2e-9077-4864-b48f-8b84484b5a9e","Environ":"","User":"root","Password":"ubuntu","Client":"SSH-2.0-Go","Headers":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"49.64.220.231","SourcePort":"43002","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2025-09-17T21:00:00Z","RemoteAddr":"49.64.220.231:43656","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"e648b511-cce6-4f4c-8756-f72a9660e8a3","Environ":"","User":"root","Password":"debian","Client":"SSH-2.0-Go","Headers":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"49.64.220.231"," show less	Port Scan Hacking Brute-Force SSH
🇨🇳 GoForceX	2025-09-17 18:46:30 UTC · (1 year ago)	2025-09-18T02:46:23.695431+08:00 C20241211186402 sshd[64762]: Failed password for root from 49.64.220.231 port 52486 ssh2 2025-09-18T02:46:25.917495+08:00 C20241211186402 sshd[64764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2025-09-18T02:46:23.695431+08:00 C20241211186402 sshd[64762]: Failed password for root from 49.64.220.231 port 52486 ssh2 2025-09-18T02:46:25.917495+08:00 C20241211186402 sshd[64764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root 2025-09-18T02:46:28.039316+08:00 C20241211186402 sshd[64764]: Failed password for root from 49.64.220.231 port 54524 ssh2 2025-09-18T02:46:28.215286+08:00 C20241211186402 sshd[64786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root 2025-09-18T02:46:29.418632+08:00 C20241211186402 sshd[64786]: Failed password for root from 49.64.220.231 port 55610 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-17 03:51:38 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/49.64.220.231	Brute-Force
🇨🇳 CGT Software Webmaster	2025-09-16 13:25:42 UTC · (1 year ago)	2025-09-16T21:25:38.613482+08:00 VM-8-9-debian sshd[1966241]: Failed password for root from 49.64.220.231 port 57948 ssh2 2025-09-16T21:25:40.298949+08:00 VM-8-9-debian sshd[1966244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2025-09-16T21:25:38.613482+08:00 VM-8-9-debian sshd[1966241]: Failed password for root from 49.64.220.231 port 57948 ssh2 2025-09-16T21:25:40.298949+08:00 VM-8-9-debian sshd[1966244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.220.231 user=root 2025-09-16T21:25:41.535652+08:00 VM-8-9-debian sshd[1966244]: Failed password for root from 49.64.220.231 port 59316 ssh2 ... show less	Port Scan Brute-Force
🇨🇳 ThreatBook.io	2025-09-15 23:45:09 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/49.64.220.231	Brute-Force

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.94

🇧🇷 187.0.235.235

🇺🇸 162.216.149.107

🇺🇸 136.111.70.176

🇳🇱 134.209.95.210

🇺🇸 34.68.180.14

🇺🇸 195.184.76.4

🇫🇷 156.67.31.88

🇺🇸 136.108.208.72

🇺🇸 54.185.182.0

🇺🇸 35.196.16.146

🇺🇸 35.192.246.32

🇺🇸 34.162.235.115

🇸🇬 34.126.130.51

🇺🇸 34.67.208.88

🇺🇸 20.169.84.197

🇺🇸 20.83.178.237

🇹🇭 203.156.108.110

🇻🇪 190.205.122.130

🇨🇴 181.139.255.102