Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Oracle Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Oct 12 17:32:10 yesfletchmain sshd\[6762\]: User root from 129.146.149.185 not allowed because not listed in AllowUsers
Oct 12 17:32:10 yesfletchmain sshd\[6762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185  user=root
Oct 12 17:32:12 yesfletchmain sshd\[6762\]: Failed password for invalid user root from 129.146.149.185 port 55232 ssh2
Oct 12 17:39:23 yesfletchmain sshd\[7094\]: User root from 129.146.149.185 not allowed because not listed in AllowUsers
Oct 12 17:39:23 yesfletchmain sshd\[7094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185  user=root
...
2019-12-24 05:58:38
attackbots
Oct 28 02:33:49 plusreed sshd[6081]: Invalid user kcz from 129.146.149.185
...
2019-10-28 14:45:46
attackspambots
2019-10-25T08:30:29.338516abusebot-3.cloudsearch.cf sshd\[6243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185  user=root
2019-10-25 16:42:28
attackspam
Invalid user admin from 129.146.149.185 port 34672
2019-10-24 23:46:27
attackbots
Oct 18 10:14:08 php1 sshd\[27606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185  user=root
Oct 18 10:14:10 php1 sshd\[27606\]: Failed password for root from 129.146.149.185 port 39334 ssh2
Oct 18 10:17:40 php1 sshd\[28039\]: Invalid user rator from 129.146.149.185
Oct 18 10:17:40 php1 sshd\[28039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
Oct 18 10:17:42 php1 sshd\[28039\]: Failed password for invalid user rator from 129.146.149.185 port 49180 ssh2
2019-10-19 06:34:56
attack
Oct 10 14:59:26 meumeu sshd[27373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185 
Oct 10 14:59:29 meumeu sshd[27373]: Failed password for invalid user P@SSW0RD123!@# from 129.146.149.185 port 52040 ssh2
Oct 10 15:03:17 meumeu sshd[28087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185 
...
2019-10-11 04:11:42
attackspam
Oct  9 01:28:40 web9 sshd\[4254\]: Invalid user %TGB\^YHN from 129.146.149.185
Oct  9 01:28:40 web9 sshd\[4254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
Oct  9 01:28:42 web9 sshd\[4254\]: Failed password for invalid user %TGB\^YHN from 129.146.149.185 port 43758 ssh2
Oct  9 01:32:24 web9 sshd\[4733\]: Invalid user %TGB\^YHN from 129.146.149.185
Oct  9 01:32:24 web9 sshd\[4733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
2019-10-10 01:14:07
attackbotsspam
Oct  4 20:18:53 eventyay sshd[28068]: Failed password for root from 129.146.149.185 port 42160 ssh2
Oct  4 20:22:40 eventyay sshd[28141]: Failed password for root from 129.146.149.185 port 53506 ssh2
...
2019-10-05 02:31:49
attackbots
Sep 28 13:41:28 aiointranet sshd\[11432\]: Invalid user test from 129.146.149.185
Sep 28 13:41:28 aiointranet sshd\[11432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
Sep 28 13:41:30 aiointranet sshd\[11432\]: Failed password for invalid user test from 129.146.149.185 port 53856 ssh2
Sep 28 13:45:20 aiointranet sshd\[11775\]: Invalid user www from 129.146.149.185
Sep 28 13:45:20 aiointranet sshd\[11775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
2019-09-29 07:51:51
attack
Sep 28 14:21:17 gw1 sshd[27218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
Sep 28 14:21:20 gw1 sshd[27218]: Failed password for invalid user ts3musicbot from 129.146.149.185 port 40182 ssh2
...
2019-09-28 17:30:39
attackbots
Invalid user raj from 129.146.149.185 port 58004
2019-09-26 03:40:13
attackbotsspam
Sep 23 10:02:35 MK-Soft-VM3 sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185 
Sep 23 10:02:37 MK-Soft-VM3 sshd[16496]: Failed password for invalid user admin from 129.146.149.185 port 43068 ssh2
...
2019-09-23 16:09:34
attack
Sep 21 00:42:21 xeon sshd[34248]: Failed password for invalid user vala from 129.146.149.185 port 49920 ssh2
2019-09-21 08:46:43
attackbotsspam
Sep  8 19:50:55 localhost sshd\[92548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185  user=mysql
Sep  8 19:50:57 localhost sshd\[92548\]: Failed password for mysql from 129.146.149.185 port 49996 ssh2
Sep  8 19:55:03 localhost sshd\[92718\]: Invalid user deploy from 129.146.149.185 port 36882
Sep  8 19:55:03 localhost sshd\[92718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185
Sep  8 19:55:05 localhost sshd\[92718\]: Failed password for invalid user deploy from 129.146.149.185 port 36882 ssh2
...
2019-09-09 06:47:22
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.146.149.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47769
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.146.149.185.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090800 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 09 06:47:16 CST 2019
;; MSG SIZE  rcvd: 119
Host info
Host 185.149.146.129.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 185.149.146.129.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
54.242.85.207 attackspam
Sep 16 01:13:32 pornomens sshd\[26486\]: Invalid user pollie from 54.242.85.207 port 34856
Sep 16 01:13:32 pornomens sshd\[26486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.242.85.207
Sep 16 01:13:34 pornomens sshd\[26486\]: Failed password for invalid user pollie from 54.242.85.207 port 34856 ssh2
...
2019-09-16 13:59:42
46.105.244.1 attackbotsspam
Sep 16 07:04:54 andromeda sshd\[32910\]: Invalid user ibraim from 46.105.244.1 port 47081
Sep 16 07:04:54 andromeda sshd\[32910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.244.1
Sep 16 07:04:56 andromeda sshd\[32910\]: Failed password for invalid user ibraim from 46.105.244.1 port 47081 ssh2
2019-09-16 13:13:45
220.85.233.145 attack
Sep 16 06:50:00 vps647732 sshd[8995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145
Sep 16 06:50:02 vps647732 sshd[8995]: Failed password for invalid user carrie from 220.85.233.145 port 38220 ssh2
...
2019-09-16 13:07:00
37.139.0.226 attackspambots
Sep 16 01:47:08 lnxded64 sshd[26144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.0.226
Sep 16 01:47:08 lnxded64 sshd[26144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.0.226
2019-09-16 13:57:23
41.169.79.166 attackspambots
proto=tcp  .  spt=50637  .  dpt=25  .     (listed on Dark List de Sep 15)     (30)
2019-09-16 13:11:33
190.145.9.67 attackbots
Automatic report - Port Scan Attack
2019-09-16 13:26:43
106.13.46.123 attackspam
Sep 16 02:22:41 MK-Soft-VM7 sshd\[6949\]: Invalid user user from 106.13.46.123 port 49784
Sep 16 02:22:41 MK-Soft-VM7 sshd\[6949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.46.123
Sep 16 02:22:43 MK-Soft-VM7 sshd\[6949\]: Failed password for invalid user user from 106.13.46.123 port 49784 ssh2
...
2019-09-16 13:21:22
165.227.194.124 attackbotsspam
Sep 16 01:55:51 eventyay sshd[11699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.194.124
Sep 16 01:55:53 eventyay sshd[11699]: Failed password for invalid user bobrien from 165.227.194.124 port 41772 ssh2
Sep 16 01:59:36 eventyay sshd[11799]: Failed password for root from 165.227.194.124 port 55442 ssh2
...
2019-09-16 13:27:21
37.53.91.78 attackspambots
proto=tcp  .  spt=45204  .  dpt=25  .     (listed on Blocklist de  Sep 15)     (29)
2019-09-16 13:15:06
109.87.141.136 attackspambots
Spamassassin_109.87.141.136
2019-09-16 13:55:46
35.202.111.227 attackspambots
RDP Bruteforce
2019-09-16 13:42:30
198.108.67.89 attack
Sep 15 17:49:27 lenivpn01 kernel: \[795358.339132\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=41450 PROTO=TCP SPT=58409 DPT=5494 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 03:59:46 lenivpn01 kernel: \[831975.839960\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=27818 PROTO=TCP SPT=35744 DPT=3521 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 16 06:41:51 lenivpn01 kernel: \[841700.837148\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.89 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=37 ID=48106 PROTO=TCP SPT=4846 DPT=9097 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-09-16 13:08:52
62.210.5.9 attackbotsspam
Sep 16 06:29:54 ArkNodeAT sshd\[10109\]: Invalid user cxh from 62.210.5.9
Sep 16 06:29:54 ArkNodeAT sshd\[10109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.5.9
Sep 16 06:29:56 ArkNodeAT sshd\[10109\]: Failed password for invalid user cxh from 62.210.5.9 port 40148 ssh2
2019-09-16 13:52:35
42.239.243.122 attackspam
Sep 14 06:19:39 toyboy sshd[955]: reveeclipse mapping checking getaddrinfo for hn.kd.ny.adsl [42.239.243.122] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 14 06:19:39 toyboy sshd[955]: Invalid user admin from 42.239.243.122
Sep 14 06:19:39 toyboy sshd[955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.239.243.122
Sep 14 06:19:41 toyboy sshd[955]: Failed password for invalid user admin from 42.239.243.122 port 40850 ssh2
Sep 14 06:19:44 toyboy sshd[955]: Failed password for invalid user admin from 42.239.243.122 port 40850 ssh2
Sep 14 06:19:46 toyboy sshd[955]: Failed password for invalid user admin from 42.239.243.122 port 40850 ssh2
Sep 14 06:19:48 toyboy sshd[955]: Failed password for invalid user admin from 42.239.243.122 port 40850 ssh2
Sep 14 06:19:51 toyboy sshd[955]: Failed password for invalid user admin from 42.239.243.122 port 40850 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=42.239.243.122
2019-09-16 13:52:09
37.187.248.39 attack
Sep 15 18:07:42 aiointranet sshd\[16590\]: Invalid user temp from 37.187.248.39
Sep 15 18:07:42 aiointranet sshd\[16590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330057.ip-37-187-248.eu
Sep 15 18:07:43 aiointranet sshd\[16590\]: Failed password for invalid user temp from 37.187.248.39 port 58836 ssh2
Sep 15 18:11:23 aiointranet sshd\[16950\]: Invalid user bitnami from 37.187.248.39
Sep 15 18:11:23 aiointranet sshd\[16950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330057.ip-37-187-248.eu
2019-09-16 14:03:09

Recently Reported IPs

194.8.147.22 206.189.56.234 41.239.149.151 45.156.158.147
14.247.178.89 186.208.122.46 70.215.11.70 152.199.204.225
149.206.140.251 159.203.199.101 79.60.107.11 118.97.97.162
89.151.178.9 36.233.180.90 116.109.70.96 113.140.68.148
45.115.4.170 46.29.166.225 204.63.127.220 196.188.241.91