Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Lines containing failures of 49.69.158.159
Aug  4 09:04:05 neweola sshd[5283]: Bad protocol version identification '' from 49.69.158.159 port 40699
Aug  4 09:04:10 neweola sshd[5284]: Invalid user pi from 49.69.158.159 port 40970
Aug  4 09:04:11 neweola sshd[5284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.158.159 
Aug  4 09:04:12 neweola sshd[5284]: Failed password for invalid user pi from 49.69.158.159 port 40970 ssh2
Aug  4 09:04:16 neweola sshd[5284]: Connection closed by invalid user pi 49.69.158.159 port 40970 [preauth]
Aug  4 09:04:21 neweola sshd[5287]: Invalid user pi from 49.69.158.159 port 45583
Aug  4 09:04:22 neweola sshd[5287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.158.159 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.69.158.159
2020-08-10 12:48:47
Comments on same subnet:
IP Type Details Datetime
49.69.158.69 attack
20 attempts against mh-ssh on storm
2020-08-12 08:00:19
49.69.158.156 attackbotsspam
(sshd) Failed SSH login from 49.69.158.156 (CN/China/-): 5 in the last 300 secs
2020-08-09 19:21:34
49.69.158.216 attack
20 attempts against mh-ssh on ice
2020-07-06 05:23:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.69.158.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49304
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.69.158.159.			IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080901 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 10 12:48:42 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 159.158.69.49.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.158.69.49.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
59.153.235.93 attackspambots
1594778420 - 07/15/2020 04:00:20 Host: 59.153.235.93/59.153.235.93 Port: 445 TCP Blocked
2020-07-15 17:33:07
139.59.43.196 attack
C1,WP GET /suche/2019/wp-login.php
2020-07-15 17:28:28
200.129.102.38 attack
Jul 15 09:39:07 *hidden* sshd[22000]: Failed password for invalid user deploy from 200.129.102.38 port 34632 ssh2
2020-07-15 17:27:52
150.129.8.31 attackbotsspam
Web Server Attack
2020-07-15 17:53:34
192.241.238.215 attackbotsspam
Port scan denied
2020-07-15 17:50:57
45.95.168.121 attack
firewall-block, port(s): 3478/udp
2020-07-15 17:59:26
139.59.174.107 attack
Jul 15 06:48:03 b-vps wordpress(www.gpfans.cz)[26396]: Authentication attempt for unknown user buchtic from 139.59.174.107
...
2020-07-15 17:29:49
192.241.239.19 attack
Port scan denied
2020-07-15 17:33:57
116.58.226.241 attackspam
Unauthorized connection attempt from IP address 116.58.226.241 on Port 445(SMB)
2020-07-15 17:41:48
132.148.241.6 attackspam
132.148.241.6 - - [15/Jul/2020:08:15:46 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.241.6 - - [15/Jul/2020:08:15:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2024 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
132.148.241.6 - - [15/Jul/2020:08:15:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2018 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-15 17:32:33
103.109.209.227 attack
"Unauthorized connection attempt on SSHD detected"
2020-07-15 17:42:12
40.88.131.206 attackbotsspam
sshd: Failed password for invalid user .... from 40.88.131.206 port 25444 ssh2
2020-07-15 17:24:30
40.71.199.120 attack
Jul 15 10:53:11 sigma sshd\[5417\]: Invalid user admin from 40.71.199.120Jul 15 10:53:13 sigma sshd\[5417\]: Failed password for invalid user admin from 40.71.199.120 port 39321 ssh2
...
2020-07-15 17:55:03
45.62.250.104 attackbotsspam
Jul 15 08:01:31 localhost sshd[79184]: Invalid user lzh from 45.62.250.104 port 53470
Jul 15 08:01:31 localhost sshd[79184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.62.250.104
Jul 15 08:01:31 localhost sshd[79184]: Invalid user lzh from 45.62.250.104 port 53470
Jul 15 08:01:33 localhost sshd[79184]: Failed password for invalid user lzh from 45.62.250.104 port 53470 ssh2
Jul 15 08:11:09 localhost sshd[80065]: Invalid user dropbox from 45.62.250.104 port 47585
...
2020-07-15 17:54:46
222.247.69.45 attackspambots
"SERVER-WEBAPP GPON Router authentication bypass and command injection attempt"
2020-07-15 18:01:35

Recently Reported IPs

242.5.116.28 39.59.7.12 87.246.7.143 117.41.137.170
75.64.211.7 180.105.155.157 103.61.102.73 184.147.155.18
106.13.88.192 45.127.62.54 110.193.177.83 167.71.177.236
210.64.226.243 163.24.194.162 53.132.247.172 163.131.212.43
122.107.159.105 155.117.108.190 76.100.21.85 107.32.119.221