Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
2019-07-19T21:59:29.785957WS-Zach sshd[23627]: User root from 46.101.149.106 not allowed because none of user's groups are listed in AllowGroups
2019-07-19T21:59:29.795975WS-Zach sshd[23627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106  user=root
2019-07-19T21:59:29.785957WS-Zach sshd[23627]: User root from 46.101.149.106 not allowed because none of user's groups are listed in AllowGroups
2019-07-19T21:59:31.442625WS-Zach sshd[23627]: Failed password for invalid user root from 46.101.149.106 port 38156 ssh2
2019-07-19T22:25:02.577253WS-Zach sshd[4823]: Invalid user squadserver from 46.101.149.106 port 45410
...
2019-07-20 13:01:22
attackspambots
Jul 19 23:13:05 debian sshd\[10879\]: Invalid user noah from 46.101.149.106 port 38446
Jul 19 23:13:05 debian sshd\[10879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106
...
2019-07-20 06:16:21
attackbots
2019-07-19T08:22:01.715096abusebot-5.cloudsearch.cf sshd\[11881\]: Invalid user test from 46.101.149.106 port 48048
2019-07-19 16:24:46
attack
Invalid user zimbra from 46.101.149.106 port 42318
2019-07-13 17:08:53
attackspambots
Jul  7 22:40:43 finn sshd[21975]: Invalid user cl from 46.101.149.106 port 48762
Jul  7 22:40:43 finn sshd[21975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106
Jul  7 22:40:45 finn sshd[21975]: Failed password for invalid user cl from 46.101.149.106 port 48762 ssh2
Jul  7 22:40:45 finn sshd[21975]: Received disconnect from 46.101.149.106 port 48762:11: Bye Bye [preauth]
Jul  7 22:40:45 finn sshd[21975]: Disconnected from 46.101.149.106 port 48762 [preauth]
Jul  7 22:43:44 finn sshd[22063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106  user=r.r
Jul  7 22:43:46 finn sshd[22063]: Failed password for r.r from 46.101.149.106 port 47816 ssh2
Jul  7 22:43:46 finn sshd[22063]: Received disconnect from 46.101.149.106 port 47816:11: Bye Bye [preauth]
Jul  7 22:43:46 finn sshd[22063]: Disconnected from 46.101.149.106 port 47816 [preauth]


........
-----------------------------------------------
https://ww
2019-07-12 04:03:59
attackspam
Jul 11 06:04:46 ncomp sshd[15472]: Invalid user kuku from 46.101.149.106
Jul 11 06:04:46 ncomp sshd[15472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106
Jul 11 06:04:46 ncomp sshd[15472]: Invalid user kuku from 46.101.149.106
Jul 11 06:04:48 ncomp sshd[15472]: Failed password for invalid user kuku from 46.101.149.106 port 59804 ssh2
2019-07-11 12:18:15
attackspam
Jul  7 22:40:43 finn sshd[21975]: Invalid user cl from 46.101.149.106 port 48762
Jul  7 22:40:43 finn sshd[21975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106
Jul  7 22:40:45 finn sshd[21975]: Failed password for invalid user cl from 46.101.149.106 port 48762 ssh2
Jul  7 22:40:45 finn sshd[21975]: Received disconnect from 46.101.149.106 port 48762:11: Bye Bye [preauth]
Jul  7 22:40:45 finn sshd[21975]: Disconnected from 46.101.149.106 port 48762 [preauth]
Jul  7 22:43:44 finn sshd[22063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.106  user=r.r
Jul  7 22:43:46 finn sshd[22063]: Failed password for r.r from 46.101.149.106 port 47816 ssh2
Jul  7 22:43:46 finn sshd[22063]: Received disconnect from 46.101.149.106 port 47816:11: Bye Bye [preauth]
Jul  7 22:43:46 finn sshd[22063]: Disconnected from 46.101.149.106 port 47816 [preauth]


........
-----------------------------------------------
https://ww
2019-07-08 18:43:02
Comments on same subnet:
IP Type Details Datetime
46.101.149.23 attackbotsspam
Oct 11 07:27:23 onepixel sshd[2151916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23 
Oct 11 07:27:23 onepixel sshd[2151916]: Invalid user project from 46.101.149.23 port 36614
Oct 11 07:27:25 onepixel sshd[2151916]: Failed password for invalid user project from 46.101.149.23 port 36614 ssh2
Oct 11 07:31:09 onepixel sshd[2152544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
Oct 11 07:31:11 onepixel sshd[2152544]: Failed password for root from 46.101.149.23 port 42010 ssh2
2020-10-11 16:43:00
46.101.149.23 attackbotsspam
Oct 11 03:31:36 plg sshd[29718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
Oct 11 03:31:38 plg sshd[29718]: Failed password for invalid user root from 46.101.149.23 port 47876 ssh2
Oct 11 03:34:24 plg sshd[29741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
Oct 11 03:34:26 plg sshd[29741]: Failed password for invalid user root from 46.101.149.23 port 41204 ssh2
Oct 11 03:37:06 plg sshd[29775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
Oct 11 03:37:08 plg sshd[29775]: Failed password for invalid user root from 46.101.149.23 port 34536 ssh2
Oct 11 03:39:49 plg sshd[29852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
...
2020-10-11 10:02:21
46.101.149.23 attackspambots
Aug 31 23:01:01 dev0-dcde-rnet sshd[370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23
Aug 31 23:01:03 dev0-dcde-rnet sshd[370]: Failed password for invalid user admin from 46.101.149.23 port 60882 ssh2
Aug 31 23:15:36 dev0-dcde-rnet sshd[468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23
2020-09-01 07:08:48
46.101.149.23 attackbotsspam
 TCP (SYN) 46.101.149.23:52064 -> port 1051, len 44
2020-08-23 03:17:10
46.101.149.23 attackspambots
 TCP (SYN) 46.101.149.23:47431 -> port 31013, len 44
2020-08-18 23:28:01
46.101.149.197 attack
(sshd) Failed SSH login from 46.101.149.197 (DE/Germany/-): 5 in the last 300 secs
2020-08-12 13:19:28
46.101.149.23 attack
Aug 11 17:45:13 firewall sshd[15183]: Failed password for root from 46.101.149.23 port 39744 ssh2
Aug 11 17:49:18 firewall sshd[15303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.149.23  user=root
Aug 11 17:49:20 firewall sshd[15303]: Failed password for root from 46.101.149.23 port 49694 ssh2
...
2020-08-12 05:33:29
46.101.149.23 attackbots
Aug 10 14:46:25 ns41 sshd[10507]: Failed password for root from 46.101.149.23 port 39700 ssh2
Aug 10 14:46:25 ns41 sshd[10507]: Failed password for root from 46.101.149.23 port 39700 ssh2
2020-08-10 20:53:04
46.101.149.23 attackbots
07/31/2020-04:20:42.253951 46.101.149.23 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-31 17:37:01
46.101.149.23 attackbots
 TCP (SYN) 46.101.149.23:56293 -> port 3425, len 44
2020-07-25 07:11:32
46.101.149.23 attack
Port scan: Attack repeated for 24 hours
2020-07-17 18:12:37
46.101.149.23 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 30 - port: 20797 proto: TCP cat: Misc Attack
2020-06-21 07:30:32
46.101.149.23 attackspambots
Invalid user cdg from 46.101.149.23 port 49696
2020-06-13 19:11:58
46.101.149.23 attack
Wordpress malicious attack:[sshd]
2020-06-06 12:20:06
46.101.149.23 attack
Port scan denied
2020-06-01 03:49:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.101.149.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8398
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;46.101.149.106.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 23:39:19 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 106.149.101.46.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 106.149.101.46.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
92.63.194.26 attack
Sep 11 18:10:16 XXXXXX sshd[16350]: Invalid user admin from 92.63.194.26 port 52404
2019-09-12 03:05:05
193.112.55.60 attackspam
Sep 11 22:21:19 server sshd\[1917\]: Invalid user csgo-server from 193.112.55.60 port 44826
Sep 11 22:21:19 server sshd\[1917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.55.60
Sep 11 22:21:20 server sshd\[1917\]: Failed password for invalid user csgo-server from 193.112.55.60 port 44826 ssh2
Sep 11 22:28:06 server sshd\[32540\]: Invalid user csgoserver from 193.112.55.60 port 49886
Sep 11 22:28:06 server sshd\[32540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.55.60
2019-09-12 03:35:13
148.72.212.161 attackspam
Sep 11 20:51:53 apollo sshd\[5789\]: Invalid user teamspeak3-user from 148.72.212.161Sep 11 20:51:55 apollo sshd\[5789\]: Failed password for invalid user teamspeak3-user from 148.72.212.161 port 51766 ssh2Sep 11 21:00:13 apollo sshd\[5800\]: Invalid user www from 148.72.212.161
...
2019-09-12 03:38:18
174.138.19.114 attackbotsspam
Sep 11 08:53:18 php2 sshd\[18502\]: Invalid user butter from 174.138.19.114
Sep 11 08:53:18 php2 sshd\[18502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.19.114
Sep 11 08:53:20 php2 sshd\[18502\]: Failed password for invalid user butter from 174.138.19.114 port 47906 ssh2
Sep 11 08:59:50 php2 sshd\[19070\]: Invalid user testing from 174.138.19.114
Sep 11 08:59:50 php2 sshd\[19070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.19.114
2019-09-12 03:15:29
209.126.230.74 attack
Port scan on 4 port(s): 43397 46515 57418 61004
2019-09-12 03:05:31
116.111.16.55 attackspam
Sep 11 20:59:10 web2 sshd[8243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.111.16.55
Sep 11 20:59:12 web2 sshd[8243]: Failed password for invalid user admin from 116.111.16.55 port 52811 ssh2
2019-09-12 03:46:51
151.80.155.98 attackspambots
Sep 11 15:35:48 plusreed sshd[20813]: Invalid user vncuser123 from 151.80.155.98
...
2019-09-12 03:40:32
115.159.146.169 attackbots
Sep 11 09:11:24 hpm sshd\[11073\]: Invalid user clouduser from 115.159.146.169
Sep 11 09:11:24 hpm sshd\[11073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.146.169
Sep 11 09:11:26 hpm sshd\[11073\]: Failed password for invalid user clouduser from 115.159.146.169 port 44466 ssh2
Sep 11 09:17:21 hpm sshd\[11617\]: Invalid user git from 115.159.146.169
Sep 11 09:17:21 hpm sshd\[11617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.146.169
2019-09-12 03:25:32
182.156.196.50 attackspambots
$f2bV_matches
2019-09-12 03:06:34
180.76.162.66 attackspambots
Sep 11 09:31:07 friendsofhawaii sshd\[23983\]: Invalid user server from 180.76.162.66
Sep 11 09:31:07 friendsofhawaii sshd\[23983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.66
Sep 11 09:31:09 friendsofhawaii sshd\[23983\]: Failed password for invalid user server from 180.76.162.66 port 35273 ssh2
Sep 11 09:37:46 friendsofhawaii sshd\[24540\]: Invalid user server from 180.76.162.66
Sep 11 09:37:46 friendsofhawaii sshd\[24540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.66
2019-09-12 03:51:28
104.248.121.67 attackspambots
2019-09-11T18:59:53.961988abusebot-2.cloudsearch.cf sshd\[28580\]: Invalid user ts from 104.248.121.67 port 55304
2019-09-12 03:12:26
187.36.255.161 attackbotsspam
Sep 11 09:14:29 hanapaa sshd\[7597\]: Invalid user dockeruser from 187.36.255.161
Sep 11 09:14:29 hanapaa sshd\[7597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.36.255.161
Sep 11 09:14:32 hanapaa sshd\[7597\]: Failed password for invalid user dockeruser from 187.36.255.161 port 44532 ssh2
Sep 11 09:22:05 hanapaa sshd\[8252\]: Invalid user sinusbot from 187.36.255.161
Sep 11 09:22:05 hanapaa sshd\[8252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.36.255.161
2019-09-12 03:36:43
109.100.179.205 attackbots
Unauthorised access (Sep 11) SRC=109.100.179.205 LEN=44 TTL=53 ID=24407 TCP DPT=8080 WINDOW=60142 SYN
2019-09-12 03:47:22
52.253.228.47 attack
Sep 11 09:34:22 aiointranet sshd\[9337\]: Invalid user 29 from 52.253.228.47
Sep 11 09:34:22 aiointranet sshd\[9337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47
Sep 11 09:34:23 aiointranet sshd\[9337\]: Failed password for invalid user 29 from 52.253.228.47 port 1024 ssh2
Sep 11 09:41:10 aiointranet sshd\[9928\]: Invalid user 106 from 52.253.228.47
Sep 11 09:41:10 aiointranet sshd\[9928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47
2019-09-12 03:46:01
122.176.26.96 attack
$f2bV_matches
2019-09-12 03:26:26

Recently Reported IPs

155.118.101.182 72.136.17.242 34.77.236.1 218.68.243.133
124.212.160.211 54.244.130.76 2600:387:a:3::1d 107.165.164.2
182.83.138.164 91.196.103.204 132.132.128.201 188.133.131.117
91.203.192.234 55.172.89.20 112.17.74.48 89.98.61.177
176.107.131.35 143.71.230.89 188.177.152.64 125.25.120.143