JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.64.96.204

49.64.96.204 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 0%: ?

ISP	CHINANET jiangsu province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.64.96.204

Whois 49.64.96.204

IP Abuse Reports for 49.64.96.204:

This IP address has been reported a total of 76 times from 62 distinct sources. 49.64.96.204 was first reported on July 2nd 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2024-07-19 22:07:12 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/49.64.96.204 2024-07- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/49.64.96.204 2024-07-19 10:30:03 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","echo Hi \| cat -n"] show less	Brute-Force
🇨🇭 C.Ferris	2024-07-19 10:39:39 (1 year ago)	Fail2Ban SSHD Brute-force SSH server ...	Brute-Force SSH
🇩🇪 ghostwarriors	2024-07-19 07:20:46 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇳🇱 EGP Abuse Dept	2024-07-19 01:59:24 (1 year ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇦🇹 urnilxfgbez	2024-07-18 22:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 paradoxnetworks	2024-07-18 20:19:01 (1 year ago)	2024-07-18T20:18:32.989668+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[935030]: error: maximum authenti ... show more 2024-07-18T20:18:32.989668+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[935030]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 3311 ssh2 [preauth] 2024-07-18T20:18:41.670239+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[935034]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 3386 ssh2 [preauth] 2024-07-18T20:19:00.266259+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[935058]: Invalid user admin from 49.64.96.204 port 3555 ... show less	Brute-Force SSH
🇰🇷 edisonjwa	2024-07-18 18:17:11 (1 year ago)	2024-07-19T03:16:46.780238+09:00 instance-20210712-1826 sshd[762778]: error: maximum authentication ... show more 2024-07-19T03:16:46.780238+09:00 instance-20210712-1826 sshd[762778]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 8498 ssh2 [preauth] 2024-07-19T03:16:51.602829+09:00 instance-20210712-1826 sshd[762780]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 8556 ssh2 [preauth] 2024-07-19T03:17:06.002513+09:00 instance-20210712-1826 sshd[762784]: Invalid user admin from 49.64.96.204 port 8674 2024-07-19T03:17:06.428330+09:00 instance-20210712-1826 sshd[762784]: error: maximum authentication attempts exceeded for invalid user admin from 49.64.96.204 port 8674 ssh2 [preauth] 2024-07-19T03:17:10.605614+09:00 instance-20210712-1826 sshd[762790]: Invalid user admin from 49.64.96.204 port 8744 ... show less	Port Scan Brute-Force SSH
🇩🇪 Saremox	2024-07-18 16:10:19 (1 year ago)	Jul 18 18:09:50 saremox-devel sshd[3743765]: error: maximum authentication attempts exceeded for roo ... show more Jul 18 18:09:50 saremox-devel sshd[3743765]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 10374 ssh2 [preauth] Jul 18 18:09:56 saremox-devel sshd[3743803]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 10434 ssh2 [preauth] Jul 18 18:10:03 saremox-devel sshd[3743811]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 10491 ssh2 [preauth] Jul 18 18:10:10 saremox-devel sshd[3743837]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 10540 ssh2 [preauth] Jul 18 18:10:18 saremox-devel sshd[3743865]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 10616 ssh2 [preauth] ... show less	Brute-Force SSH
🇷🇸 Scan	2024-07-18 13:55:26 (1 year ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 f-d-m	2024-07-18 12:02:34 (1 year ago)	ssh-bruteforce/k3	Brute-Force SSH
🇩🇪 yvoictra	2024-07-18 07:58:31 (1 year ago)	2024-07-18T09:58:31.100467+02:00 siena sshd[144424]: error: maximum authentication attempts exceeded ... show more 2024-07-18T09:58:31.100467+02:00 siena sshd[144424]: error: maximum authentication attempts exceeded for root from 49.64.96.204 port 8528 ssh2 [preauth] ... show less	Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2024-07-17 09:32:26 (1 year ago)	Detected 1 distributed attacks from 49.64.96.204. LF_DISTATTACK; Logs: Jul 17 10:39:48 www sshd[3097 ... show more Detected 1 distributed attacks from 49.64.96.204. LF_DISTATTACK; Logs: Jul 17 10:39:48 www sshd[3097863]: Failed password for root from 49.64.96.204 port 3708 ssh2 show less	DDoS Attack SSH
🇨🇭 SOC [GOLINE SA]	2024-07-17 08:39:47 (1 year ago)	(sshd) Failed SSH login from 49.64.96.204 (CN/China/-/-/-/[AS4134 Chinanet]): 1 in the last 3600 sec ... show more (sshd) Failed SSH login from 49.64.96.204 (CN/China/-/-/-/[AS4134 Chinanet]): 1 in the last 3600 secs; IP: 49.64.96.204; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: Jul 17 10:39:47 www sshd[3097863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.96.204 user=root show less	Brute-Force SSH
🇩🇪 dwmp	2024-07-17 00:01:32 (1 year ago)	Jul 17 02:01:14 plesk sshd[837435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jul 17 02:01:14 plesk sshd[837435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.64.96.204 user=root Jul 17 02:01:16 plesk sshd[837435]: Failed password for root from 49.64.96.204 port 5335 ssh2 Jul 17 02:01:18 plesk sshd[837435]: Failed password for root from 49.64.96.204 port 5335 ssh2 Jul 17 02:01:32 plesk sshd[837435]: Failed password for root from 49.64.96.204 port 5335 ssh2 ... show less	Brute-Force SSH
🇫🇷 Sipherion	2024-07-16 21:36:31 (1 year ago)	Fail2Ban - \[SSHD\] Brute-force SSH server from this IP	Brute-Force SSH

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2600:1f11:961:1602:9280:5243:4d2e:dd17

🇲🇳 203.21.120.126

🇹🇭 202.29.232.118

🇨🇳 175.10.33.38

🇩🇪 167.94.146.46

🇺🇦 213.227.245.154

🇲🇩 185.164.80.171

🇺🇸 184.105.247.248

🇩🇪 167.172.187.11

🇫🇷 85.217.140.10

🇸🇪 82.209.191.11

🇰🇷 34.47.74.45

🇺🇸 20.171.127.101

🇺🇸 20.65.145.179

🇺🇸 4.246.117.137

🇬🇧 195.96.139.243

🇬🇧 193.163.125.192

🇰🇷 152.69.232.121

🇮🇳 125.16.27.190

🇨🇳 123.165.85.24