必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Dec  3 00:42:09 sbg01 sshd[13594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Dec  3 00:42:12 sbg01 sshd[13594]: Failed password for invalid user app from 49.235.214.68 port 44222 ssh2
Dec  3 00:49:03 sbg01 sshd[13698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
2019-12-03 07:50:03
attack
Dec  2 06:29:04 vibhu-HP-Z238-Microtower-Workstation sshd\[20189\]: Invalid user rupinna from 49.235.214.68
Dec  2 06:29:04 vibhu-HP-Z238-Microtower-Workstation sshd\[20189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Dec  2 06:29:06 vibhu-HP-Z238-Microtower-Workstation sshd\[20189\]: Failed password for invalid user rupinna from 49.235.214.68 port 48308 ssh2
Dec  2 06:36:14 vibhu-HP-Z238-Microtower-Workstation sshd\[20861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68  user=root
Dec  2 06:36:16 vibhu-HP-Z238-Microtower-Workstation sshd\[20861\]: Failed password for root from 49.235.214.68 port 51096 ssh2
...
2019-12-02 09:14:09
attackspambots
Nov 29 09:37:43 root sshd[17264]: Failed password for root from 49.235.214.68 port 45862 ssh2
Nov 29 09:49:44 root sshd[17426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68 
Nov 29 09:49:47 root sshd[17426]: Failed password for invalid user info from 49.235.214.68 port 34108 ssh2
...
2019-11-29 17:37:39
attackspam
Nov 17 04:29:23 firewall sshd[10821]: Invalid user martineaud from 49.235.214.68
Nov 17 04:29:25 firewall sshd[10821]: Failed password for invalid user martineaud from 49.235.214.68 port 37594 ssh2
Nov 17 04:34:04 firewall sshd[10913]: Invalid user roziah from 49.235.214.68
...
2019-11-17 16:30:21
attackbotsspam
2019-11-16T23:45:21.362635shield sshd\[14668\]: Invalid user jahari from 49.235.214.68 port 50224
2019-11-16T23:45:21.367060shield sshd\[14668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
2019-11-16T23:45:23.320116shield sshd\[14668\]: Failed password for invalid user jahari from 49.235.214.68 port 50224 ssh2
2019-11-16T23:49:56.369273shield sshd\[15805\]: Invalid user grohler from 49.235.214.68 port 56504
2019-11-16T23:49:56.372326shield sshd\[15805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
2019-11-17 07:57:25
attackbots
Tried sshing with brute force.
2019-11-16 23:43:23
attack
Nov 15 05:54:54 vps691689 sshd[10419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Nov 15 05:54:56 vps691689 sshd[10419]: Failed password for invalid user corsentino from 49.235.214.68 port 49062 ssh2
...
2019-11-15 13:15:06
attackspam
Nov  7 07:14:25 auw2 sshd\[19523\]: Invalid user nsapril from 49.235.214.68
Nov  7 07:14:25 auw2 sshd\[19523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Nov  7 07:14:26 auw2 sshd\[19523\]: Failed password for invalid user nsapril from 49.235.214.68 port 33358 ssh2
Nov  7 07:18:23 auw2 sshd\[19860\]: Invalid user song from 49.235.214.68
Nov  7 07:18:23 auw2 sshd\[19860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
2019-11-08 04:04:53
attackspambots
Oct 31 03:53:26 server sshd\[20923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68  user=root
Oct 31 03:53:28 server sshd\[20923\]: Failed password for root from 49.235.214.68 port 34724 ssh2
Oct 31 23:12:05 server sshd\[24392\]: Invalid user stpi from 49.235.214.68
Oct 31 23:12:05 server sshd\[24392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68 
Oct 31 23:12:07 server sshd\[24392\]: Failed password for invalid user stpi from 49.235.214.68 port 58968 ssh2
...
2019-11-01 06:50:18
attack
2019-10-09T05:47:48.438758lon01.zurich-datacenter.net sshd\[12639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68  user=root
2019-10-09T05:47:50.717311lon01.zurich-datacenter.net sshd\[12639\]: Failed password for root from 49.235.214.68 port 46528 ssh2
2019-10-09T05:52:29.975439lon01.zurich-datacenter.net sshd\[12737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68  user=root
2019-10-09T05:52:32.162983lon01.zurich-datacenter.net sshd\[12737\]: Failed password for root from 49.235.214.68 port 51450 ssh2
2019-10-09T05:57:15.379257lon01.zurich-datacenter.net sshd\[12840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68  user=root
...
2019-10-09 12:38:46
attack
Unauthorized SSH login attempts
2019-10-08 17:28:35
attack
Oct  3 22:48:04 dev0-dcfr-rnet sshd[26955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Oct  3 22:48:06 dev0-dcfr-rnet sshd[26955]: Failed password for invalid user public from 49.235.214.68 port 40970 ssh2
Oct  3 22:52:03 dev0-dcfr-rnet sshd[27006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
2019-10-04 06:24:01
attackbots
2019-10-01T08:48:33.184799abusebot-8.cloudsearch.cf sshd\[5817\]: Invalid user go from 49.235.214.68 port 53540
2019-10-01 16:50:17
attackbots
Sep 22 14:41:14 minden010 sshd[8033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
Sep 22 14:41:15 minden010 sshd[8033]: Failed password for invalid user px from 49.235.214.68 port 60882 ssh2
Sep 22 14:46:30 minden010 sshd[9787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.214.68
...
2019-09-22 21:44:40
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.235.214.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34280
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.235.214.68.			IN	A

;; AUTHORITY SECTION:
.			508	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092200 1800 900 604800 86400

;; Query time: 486 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 22 21:44:35 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 68.214.235.49.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 68.214.235.49.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
62.28.253.197 attackbotsspam
Mar  6 14:40:08 hanapaa sshd\[10528\]: Invalid user condor from 62.28.253.197
Mar  6 14:40:08 hanapaa sshd\[10528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.253.197
Mar  6 14:40:10 hanapaa sshd\[10528\]: Failed password for invalid user condor from 62.28.253.197 port 13450 ssh2
Mar  6 14:45:12 hanapaa sshd\[10990\]: Invalid user esadmin from 62.28.253.197
Mar  6 14:45:12 hanapaa sshd\[10990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.253.197
2020-03-07 08:49:40
177.135.26.154 attackbots
Unauthorized connection attempt from IP address 177.135.26.154 on Port 445(SMB)
2020-03-07 09:08:03
92.118.37.83 attack
Mar  7 02:12:23 debian-2gb-nbg1-2 kernel: \[5802706.154649\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.83 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=3893 PROTO=TCP SPT=52895 DPT=60053 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-07 09:17:41
58.56.5.232 attackbotsspam
Unauthorized connection attempt from IP address 58.56.5.232 on Port 445(SMB)
2020-03-07 09:27:09
54.36.135.150 attack
Mar  7 06:06:16 gw1 sshd[27879]: Failed password for root from 54.36.135.150 port 37730 ssh2
...
2020-03-07 09:19:33
212.80.220.147 attack
Chat Spam
2020-03-07 08:51:29
5.126.176.252 attackbots
Email rejected due to spam filtering
2020-03-07 09:24:54
121.242.140.66 attack
Unauthorized connection attempt from IP address 121.242.140.66 on Port 445(SMB)
2020-03-07 09:01:45
5.101.51.58 attack
Mar  6 22:37:17 mail1 sshd[7852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.51.58  user=r.r
Mar  6 22:37:19 mail1 sshd[7852]: Failed password for r.r from 5.101.51.58 port 34538 ssh2
Mar  6 22:37:19 mail1 sshd[7852]: Received disconnect from 5.101.51.58 port 34538:11: Bye Bye [preauth]
Mar  6 22:37:19 mail1 sshd[7852]: Disconnected from 5.101.51.58 port 34538 [preauth]
Mar  6 23:00:50 mail1 sshd[9180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.51.58  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=5.101.51.58
2020-03-07 09:01:24
129.28.64.128 attackspambots
Mar  7 01:03:45 santamaria sshd\[2006\]: Invalid user wpyan from 129.28.64.128
Mar  7 01:03:46 santamaria sshd\[2006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.64.128
Mar  7 01:03:48 santamaria sshd\[2006\]: Failed password for invalid user wpyan from 129.28.64.128 port 52858 ssh2
...
2020-03-07 08:47:28
202.175.46.170 attackbots
fail2ban -- 202.175.46.170
...
2020-03-07 09:07:28
203.91.114.244 attackspam
Unauthorized connection attempt from IP address 203.91.114.244 on Port 445(SMB)
2020-03-07 09:03:35
203.189.206.109 attackbots
Mar  7 00:11:18 l03 sshd[1150]: Invalid user ubuntu from 203.189.206.109 port 36212
...
2020-03-07 09:09:11
51.68.251.201 attackbotsspam
Mar  7 01:50:03 vps647732 sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.251.201
Mar  7 01:50:04 vps647732 sshd[19596]: Failed password for invalid user git-admin from 51.68.251.201 port 33492 ssh2
...
2020-03-07 09:03:13
112.35.27.98 attack
Mar  6 22:55:10 srv-ubuntu-dev3 sshd[7970]: Invalid user hongli from 112.35.27.98
Mar  6 22:55:10 srv-ubuntu-dev3 sshd[7970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.27.98
Mar  6 22:55:10 srv-ubuntu-dev3 sshd[7970]: Invalid user hongli from 112.35.27.98
Mar  6 22:55:13 srv-ubuntu-dev3 sshd[7970]: Failed password for invalid user hongli from 112.35.27.98 port 52542 ssh2
Mar  6 22:58:55 srv-ubuntu-dev3 sshd[8546]: Invalid user yamashita from 112.35.27.98
Mar  6 22:58:55 srv-ubuntu-dev3 sshd[8546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.27.98
Mar  6 22:58:55 srv-ubuntu-dev3 sshd[8546]: Invalid user yamashita from 112.35.27.98
Mar  6 22:58:57 srv-ubuntu-dev3 sshd[8546]: Failed password for invalid user yamashita from 112.35.27.98 port 50776 ssh2
Mar  6 23:02:47 srv-ubuntu-dev3 sshd[9201]: Invalid user mssql from 112.35.27.98
...
2020-03-07 08:56:52

最近上报的IP列表

144.76.149.117 144.76.149.115 19.248.247.10 94.177.240.4
127.56.186.220 22.245.113.143 94.3.239.0 140.15.23.17
120.248.66.89 182.78.9.220 190.35.111.137 250.104.136.244
255.21.130.72 89.16.107.99 89.108.169.2 216.124.151.114
121.168.136.233 162.217.165.50 49.126.23.87 148.224.190.192