Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Guiyang

Region: Guizhou

Country: China

Internet Service Provider: China Mobile Communications Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Sep 18 10:53:14 localhost sshd[1231116]: Failed password for root from 117.149.21.145 port 41729 ssh2
Sep 18 10:56:19 localhost sshd[1238323]: Invalid user test from 117.149.21.145 port 48065
Sep 18 10:56:19 localhost sshd[1238323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145 
Sep 18 10:56:19 localhost sshd[1238323]: Invalid user test from 117.149.21.145 port 48065
Sep 18 10:56:22 localhost sshd[1238323]: Failed password for invalid user test from 117.149.21.145 port 48065 ssh2
...
2020-09-19 00:34:26
attackspam
Automatic report - Banned IP Access
2020-09-18 16:38:01
attackspam
Invalid user kuantic from 117.149.21.145 port 41185
2020-09-18 06:52:25
attackbotsspam
Aug  3 06:53:56 home sshd[1736881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145 
Aug  3 06:53:56 home sshd[1736881]: Invalid user = from 117.149.21.145 port 32865
Aug  3 06:53:59 home sshd[1736881]: Failed password for invalid user = from 117.149.21.145 port 32865 ssh2
Aug  3 06:58:35 home sshd[1738633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145  user=root
Aug  3 06:58:37 home sshd[1738633]: Failed password for root from 117.149.21.145 port 48705 ssh2
...
2020-08-03 16:48:19
attackbotsspam
Jul 31 16:08:25 serwer sshd\[8069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145  user=root
Jul 31 16:08:26 serwer sshd\[8069\]: Failed password for root from 117.149.21.145 port 41697 ssh2
Jul 31 16:12:57 serwer sshd\[8663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145  user=root
...
2020-07-31 22:59:18
attack
2020-07-25T05:52:05.815360+02:00  sshd[11504]: Failed password for invalid user opt from 117.149.21.145 port 11329 ssh2
2020-07-25 15:19:59
attackspambots
Jul  7 07:55:53 lnxmysql61 sshd[6122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
2020-07-07 15:39:17
attack
Jul  4 10:17:19 buvik sshd[21078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
Jul  4 10:17:20 buvik sshd[21078]: Failed password for invalid user hr from 117.149.21.145 port 20481 ssh2
Jul  4 10:21:43 buvik sshd[21658]: Invalid user yxc from 117.149.21.145
...
2020-07-04 18:21:10
attack
Feb 28 19:23:53 NPSTNNYC01T sshd[2764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
Feb 28 19:23:55 NPSTNNYC01T sshd[2764]: Failed password for invalid user radio from 117.149.21.145 port 3713 ssh2
Feb 28 19:28:49 NPSTNNYC01T sshd[3107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
...
2020-02-29 08:32:33
attack
2020-01-29T17:54:06.121086luisaranguren sshd[2627796]: Invalid user cupka from 117.149.21.145 port 62593
2020-01-29T17:54:08.049926luisaranguren sshd[2627796]: Failed password for invalid user cupka from 117.149.21.145 port 62593 ssh2
...
2020-01-29 15:38:44
attackbotsspam
Jan 20 23:13:50 ns41 sshd[7532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
Jan 20 23:13:50 ns41 sshd[7532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145
2020-01-21 06:30:45
attack
Unauthorized connection attempt detected from IP address 117.149.21.145 to port 2220 [J]
2020-01-08 13:41:40
attack
Oct 29 14:56:12 venus sshd\[839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.21.145  user=root
Oct 29 14:56:14 venus sshd\[839\]: Failed password for root from 117.149.21.145 port 52193 ssh2
Oct 29 15:02:55 venus sshd\[885\]: Invalid user thomas from 117.149.21.145 port 50465
...
2019-10-29 23:20:46
attackbotsspam
Oct  5 04:04:33 www_kotimaassa_fi sshd[29750]: Failed password for root from 117.149.21.145 port 21473 ssh2
...
2019-10-05 16:54:05
attack
Sep 28 18:11:10 www sshd\[4566\]: Invalid user wr from 117.149.21.145 port 56193
...
2019-09-29 02:06:06
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.149.21.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28710
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.149.21.145.			IN	A

;; AUTHORITY SECTION:
.			224	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092800 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 29 02:06:01 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 145.21.149.117.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
Server:		10.251.0.1
Address:	10.251.0.1#53

** server can't find 145.21.149.117.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
188.254.0.197 attack
May 31 13:56:19 ns382633 sshd\[14896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.197  user=root
May 31 13:56:21 ns382633 sshd\[14896\]: Failed password for root from 188.254.0.197 port 38157 ssh2
May 31 14:06:08 ns382633 sshd\[16941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.197  user=root
May 31 14:06:10 ns382633 sshd\[16941\]: Failed password for root from 188.254.0.197 port 41602 ssh2
May 31 14:09:02 ns382633 sshd\[17179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.197  user=root
2020-06-01 01:39:29
45.170.231.203 attack
port scan and connect, tcp 23 (telnet)
2020-06-01 01:31:39
185.147.215.14 attackspambots
[2020-05-31 13:17:32] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:49624' - Wrong password
[2020-05-31 13:17:32] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T13:17:32.027-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2943",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/49624",Challenge="0748ca65",ReceivedChallenge="0748ca65",ReceivedHash="a379fd4a5686d86b1911fbb56e4364de"
[2020-05-31 13:18:03] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:59361' - Wrong password
[2020-05-31 13:18:03] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T13:18:03.143-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2944",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21
...
2020-06-01 01:29:38
45.84.0.36 attackbotsspam
May 31 15:09:16 root sshd[4442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.0.36  user=root
May 31 15:09:18 root sshd[4442]: Failed password for root from 45.84.0.36 port 45006 ssh2
...
2020-06-01 01:32:08
36.37.115.106 attack
Port scan denied
2020-06-01 01:31:06
106.12.48.217 attackbots
SSH Brute-Force reported by Fail2Ban
2020-06-01 01:55:35
184.168.193.160 attackspambots
MLV GET /1/wp-includes/wlwmanifest.xml
2020-06-01 01:57:19
87.251.74.140 attack
May 31 19:26:18 debian-2gb-nbg1-2 kernel: \[13204754.087413\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=59368 PROTO=TCP SPT=44773 DPT=7238 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-01 01:38:44
62.234.110.8 attackbots
May 31 09:27:58 NPSTNNYC01T sshd[28814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.110.8
May 31 09:28:00 NPSTNNYC01T sshd[28814]: Failed password for invalid user brenda from 62.234.110.8 port 49194 ssh2
May 31 09:32:22 NPSTNNYC01T sshd[29027]: Failed password for root from 62.234.110.8 port 34466 ssh2
...
2020-06-01 01:36:29
45.122.220.252 attack
May 31 15:18:53 localhost sshd\[28642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.252  user=root
May 31 15:18:55 localhost sshd\[28642\]: Failed password for root from 45.122.220.252 port 44194 ssh2
May 31 15:27:08 localhost sshd\[28798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.252  user=root
...
2020-06-01 01:41:18
203.195.229.145 attack
10 attempts against mh-pma-try-ban on cell
2020-06-01 01:45:39
46.101.73.64 attackbotsspam
May 31 12:04:52 game-panel sshd[26107]: Failed password for root from 46.101.73.64 port 52322 ssh2
May 31 12:09:34 game-panel sshd[26453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.73.64
May 31 12:09:35 game-panel sshd[26453]: Failed password for invalid user admin from 46.101.73.64 port 55502 ssh2
2020-06-01 01:21:42
195.206.105.217 attackspam
RDP Bruteforce
2020-06-01 01:30:47
185.143.74.251 attack
May 31 19:13:16 mail postfix/smtpd\[27690\]: warning: unknown\[185.143.74.251\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 31 19:14:48 mail postfix/smtpd\[27690\]: warning: unknown\[185.143.74.251\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 31 19:45:19 mail postfix/smtpd\[28747\]: warning: unknown\[185.143.74.251\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 31 19:46:51 mail postfix/smtpd\[28515\]: warning: unknown\[185.143.74.251\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-06-01 01:49:18
1.162.199.45 attackbots
Attempted connection to port 23.
2020-06-01 01:50:25

Recently Reported IPs

156.205.129.227 63.73.181.169 65.221.22.11 66.197.248.230
106.68.220.175 126.20.52.188 213.115.5.131 178.5.231.241
117.201.79.230 108.235.170.130 46.152.105.230 134.210.234.10
10.183.126.219 122.86.116.45 78.48.163.2 94.210.68.108
77.85.129.4 100.37.140.159 122.244.20.72 199.116.78.161