149.202.149.49

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: OVH SAS

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Aug 15 23:55:20 SilenceServices sshd[32648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.149.49 Aug 15 23:55:22 SilenceServices sshd[32648]: Failed password for invalid user cgbae from 149.202.149.49 port 40316 ssh2 Aug 15 23:59:52 SilenceServices sshd[5825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.149.49	2019-08-16 06:55:26

Type

Details

Datetime

attackspambots

Aug 15 23:55:20 SilenceServices sshd[32648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.149.49
Aug 15 23:55:22 SilenceServices sshd[32648]: Failed password for invalid user cgbae from 149.202.149.49 port 40316 ssh2
Aug 15 23:59:52 SilenceServices sshd[5825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.149.49

2019-08-16 06:55:26

Comments on same subnet:

IP	Type	Details	Datetime
149.202.149.53	attack	Jun 24 01:09:26 nbi10516-7 sshd[21293]: Invalid user job from 149.202.149.53 port 60850 Jun 24 01:09:28 nbi10516-7 sshd[21293]: Failed password for invalid user job from 149.202.149.53 port 60850 ssh2 Jun 24 01:09:28 nbi10516-7 sshd[21293]: Received disconnect from 149.202.149.53 port 60850:11: Bye Bye [preauth] Jun 24 01:09:28 nbi10516-7 sshd[21293]: Disconnected from 149.202.149.53 port 60850 [preauth] Jun 24 01:12:36 nbi10516-7 sshd[27460]: Invalid user joe from 149.202.149.53 port 40888 Jun 24 01:12:38 nbi10516-7 sshd[27460]: Failed password for invalid user joe from 149.202.149.53 port 40888 ssh2 Jun 24 01:12:38 nbi10516-7 sshd[27460]: Received disconnect from 149.202.149.53 port 40888:11: Bye Bye [preauth] Jun 24 01:12:38 nbi10516-7 sshd[27460]: Disconnected from 149.202.149.53 port 40888 [preauth] Jun 24 01:13:56 nbi10516-7 sshd[29875]: Invalid user marta from 149.202.149.53 port 56426 Jun 24 01:13:57 nbi10516-7 sshd[29875]: Failed password for invalid user marta........ -------------------------------	2019-06-24 21:04:28

Type

Details

Datetime

149.202.149.53

attack

Jun 24 01:09:26 nbi10516-7 sshd[21293]: Invalid user job from 149.202.149.53 port 60850
Jun 24 01:09:28 nbi10516-7 sshd[21293]: Failed password for invalid user job from 149.202.149.53 port 60850 ssh2
Jun 24 01:09:28 nbi10516-7 sshd[21293]: Received disconnect from 149.202.149.53 port 60850:11: Bye Bye [preauth]
Jun 24 01:09:28 nbi10516-7 sshd[21293]: Disconnected from 149.202.149.53 port 60850 [preauth]
Jun 24 01:12:36 nbi10516-7 sshd[27460]: Invalid user joe from 149.202.149.53 port 40888
Jun 24 01:12:38 nbi10516-7 sshd[27460]: Failed password for invalid user joe from 149.202.149.53 port 40888 ssh2
Jun 24 01:12:38 nbi10516-7 sshd[27460]: Received disconnect from 149.202.149.53 port 40888:11: Bye Bye [preauth]
Jun 24 01:12:38 nbi10516-7 sshd[27460]: Disconnected from 149.202.149.53 port 40888 [preauth]
Jun 24 01:13:56 nbi10516-7 sshd[29875]: Invalid user marta from 149.202.149.53 port 56426
Jun 24 01:13:57 nbi10516-7 sshd[29875]: Failed password for invalid user marta........
-------------------------------

2019-06-24 21:04:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.202.149.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34992
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.202.149.49.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081503 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 16 06:55:21 CST 2019
;; MSG SIZE  rcvd: 118

Host info

49.149.202.149.in-addr.arpa domain name pointer ip49.ip-149-202-149.eu.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
49.149.202.149.in-addr.arpa	name = ip49.ip-149-202-149.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.39.11.32	attack	scans 2 times in preceeding hours on the ports (in chronological order) 33806 34134 resulting in total of 3 scans from 185.39.8.0/22 block.	2020-09-05 23:23:09
217.182.205.27	attackspambots	Sep 5 14:08:49 h1745522 sshd[13663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.205.27 user=root Sep 5 14:08:51 h1745522 sshd[13663]: Failed password for root from 217.182.205.27 port 52554 ssh2 Sep 5 14:12:17 h1745522 sshd[13979]: Invalid user tom from 217.182.205.27 port 57300 Sep 5 14:12:17 h1745522 sshd[13979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.205.27 Sep 5 14:12:17 h1745522 sshd[13979]: Invalid user tom from 217.182.205.27 port 57300 Sep 5 14:12:18 h1745522 sshd[13979]: Failed password for invalid user tom from 217.182.205.27 port 57300 ssh2 Sep 5 14:15:48 h1745522 sshd[14034]: Invalid user nina from 217.182.205.27 port 33816 Sep 5 14:15:48 h1745522 sshd[14034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.205.27 Sep 5 14:15:48 h1745522 sshd[14034]: Invalid user nina from 217.182.205.27 port 33816 Sep 5 14: ...	2020-09-05 23:20:18
89.248.167.141	attackspambots	ET DROP Dshield Block Listed Source group 1 - port: 8028 proto: tcp cat: Misc Attackbytes: 60	2020-09-05 23:36:03
141.98.10.211	attack	2020-09-05T17:26:10.630653centos sshd[32517]: Invalid user admin from 141.98.10.211 port 33005 2020-09-05T17:26:12.441915centos sshd[32517]: Failed password for invalid user admin from 141.98.10.211 port 33005 ssh2 2020-09-05T17:26:50.368245centos sshd[32593]: Invalid user Admin from 141.98.10.211 port 46259 ...	2020-09-05 23:37:06
203.195.205.202	attack	Sep 5 04:03:53 mavik sshd[8844]: Invalid user postgres from 203.195.205.202 Sep 5 04:03:53 mavik sshd[8844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.205.202 Sep 5 04:03:55 mavik sshd[8844]: Failed password for invalid user postgres from 203.195.205.202 port 43824 ssh2 Sep 5 04:08:39 mavik sshd[9130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.205.202 user=root Sep 5 04:08:42 mavik sshd[9130]: Failed password for root from 203.195.205.202 port 36340 ssh2 ...	2020-09-05 23:23:42
54.39.133.91	attackbotsspam	TCP (SYN) 54.39.133.91:46758 -> port 16625, len 44	2020-09-05 22:58:01
171.15.17.161	attackbotsspam	Sep 5 04:13:38 rush sshd[2658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.15.17.161 Sep 5 04:13:41 rush sshd[2658]: Failed password for invalid user zhangyong from 171.15.17.161 port 5502 ssh2 Sep 5 04:17:46 rush sshd[2758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.15.17.161 ...	2020-09-05 23:34:43
195.192.226.115	attackbotsspam	firewall-block, port(s): 23/tcp	2020-09-05 23:07:48
222.186.175.148	attackspambots	Sep 5 15:19:00 ip-172-31-61-156 sshd[21940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root Sep 5 15:19:02 ip-172-31-61-156 sshd[21940]: Failed password for root from 222.186.175.148 port 63054 ssh2 ...	2020-09-05 23:19:49
192.241.200.105	attackspam	firewall-block, port(s): 1830/tcp	2020-09-05 23:09:59
36.133.38.45	attack	Sep 4 21:30:16 ip-172-31-16-56 sshd\[8547\]: Invalid user igs from 36.133.38.45\ Sep 4 21:30:18 ip-172-31-16-56 sshd\[8547\]: Failed password for invalid user igs from 36.133.38.45 port 44958 ssh2\ Sep 4 21:31:44 ip-172-31-16-56 sshd\[8567\]: Invalid user ansible from 36.133.38.45\ Sep 4 21:31:46 ip-172-31-16-56 sshd\[8567\]: Failed password for invalid user ansible from 36.133.38.45 port 60644 ssh2\ Sep 4 21:33:15 ip-172-31-16-56 sshd\[8571\]: Failed password for root from 36.133.38.45 port 48104 ssh2\	2020-09-05 23:04:32
185.153.198.229	attack	TCP port : 22	2020-09-05 23:20:47
207.46.13.42	attackspambots	Automatic report - Banned IP Access	2020-09-05 23:29:14
92.222.93.104	attackbotsspam	SSH Brute Force	2020-09-05 23:12:02
42.82.68.176	attackbotsspam	Sep 4 18:50:20 mellenthin postfix/smtpd[30950]: NOQUEUE: reject: RCPT from unknown[42.82.68.176]: 554 5.7.1 Service unavailable; Client host [42.82.68.176] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/42.82.68.176 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[42.82.68.176]>	2020-09-05 23:19:26

Recently Reported IPs

203.87.133.174	143.110.221.130	46.27.35.55	177.139.152.31
176.122.9.102	185.251.248.119	129.28.115.92	107.170.233.150
171.244.9.27	190.88.212.34	113.160.100.201	140.255.46.109
210.55.121.117	196.251.197.27	187.32.125.210	104.169.95.140
187.193.19.53	178.213.172.82	144.255.203.137	175.56.96.153