Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Shanghai Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Oct 12 03:30:48 xtremcommunity sshd\[439884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
Oct 12 03:30:50 xtremcommunity sshd\[439884\]: Failed password for root from 58.246.149.142 port 40454 ssh2
Oct 12 03:34:53 xtremcommunity sshd\[439982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
Oct 12 03:34:55 xtremcommunity sshd\[439982\]: Failed password for root from 58.246.149.142 port 42670 ssh2
Oct 12 03:39:00 xtremcommunity sshd\[440060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
...
2019-10-12 19:02:27
attackspambots
Oct  2 07:48:12 MK-Soft-Root1 sshd[10777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142 
Oct  2 07:48:14 MK-Soft-Root1 sshd[10777]: Failed password for invalid user marcus from 58.246.149.142 port 43978 ssh2
...
2019-10-02 18:01:06
attack
Sep 24 06:52:29 www5 sshd\[29202\]: Invalid user salvia from 58.246.149.142
Sep 24 06:52:29 www5 sshd\[29202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 24 06:52:31 www5 sshd\[29202\]: Failed password for invalid user salvia from 58.246.149.142 port 56616 ssh2
...
2019-09-24 16:38:33
attack
Sep 23 23:06:04 vtv3 sshd\[5107\]: Invalid user ex from 58.246.149.142 port 35478
Sep 23 23:06:04 vtv3 sshd\[5107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:06:07 vtv3 sshd\[5107\]: Failed password for invalid user ex from 58.246.149.142 port 35478 ssh2
Sep 23 23:09:44 vtv3 sshd\[6635\]: Invalid user zq from 58.246.149.142 port 40146
Sep 23 23:09:44 vtv3 sshd\[6635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:21:07 vtv3 sshd\[12590\]: Invalid user bot from 58.246.149.142 port 54150
Sep 23 23:21:07 vtv3 sshd\[12590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:21:08 vtv3 sshd\[12590\]: Failed password for invalid user bot from 58.246.149.142 port 54150 ssh2
Sep 23 23:24:59 vtv3 sshd\[14119\]: Invalid user user from 58.246.149.142 port 58810
Sep 23 23:24:59 vtv3 sshd\[14119\]: pam_unix\(sshd:
2019-09-24 06:21:51
attackspam
Sep 15 05:41:08 mail sshd[13150]: Failed password for invalid user public from 58.246.149.142 port 35182 ssh2
Sep 15 05:41:09 mail sshd[13150]: Received disconnect from 58.246.149.142: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=58.246.149.142
2019-09-16 04:33:28
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.246.149.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51869
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.246.149.142.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091501 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 16 04:33:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.149.246.58.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 142.149.246.58.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
92.119.231.177 attackbotsspam
May 26 01:39:43 srv-ubuntu-dev3 sshd[35000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177  user=root
May 26 01:39:45 srv-ubuntu-dev3 sshd[35000]: Failed password for root from 92.119.231.177 port 60166 ssh2
May 26 01:42:28 srv-ubuntu-dev3 sshd[35438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177  user=root
May 26 01:42:30 srv-ubuntu-dev3 sshd[35438]: Failed password for root from 92.119.231.177 port 51328 ssh2
May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: Invalid user admin from 92.119.231.177
May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177
May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: Invalid user admin from 92.119.231.177
May 26 01:45:25 srv-ubuntu-dev3 sshd[35934]: Failed password for invalid user admin from 92.119.231.177 port 42506 ssh2
May 26 01:48:09 srv-ubuntu-dev3 ss
...
2020-05-26 08:05:23
196.52.43.113 attack
Honeypot attack, port: 81, PTR: 196.52.43.113.netsystemsresearch.com.
2020-05-26 08:21:18
200.146.215.26 attack
May 26 01:57:01 inter-technics sshd[7429]: Invalid user nagios from 200.146.215.26 port 63728
May 26 01:57:01 inter-technics sshd[7429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.215.26
May 26 01:57:01 inter-technics sshd[7429]: Invalid user nagios from 200.146.215.26 port 63728
May 26 01:57:04 inter-technics sshd[7429]: Failed password for invalid user nagios from 200.146.215.26 port 63728 ssh2
May 26 02:01:06 inter-technics sshd[7720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.215.26  user=root
May 26 02:01:07 inter-technics sshd[7720]: Failed password for root from 200.146.215.26 port 52418 ssh2
...
2020-05-26 08:17:46
222.186.175.202 attack
Scanned 53 times in the last 24 hours on port 22
2020-05-26 08:13:18
77.243.181.54 attackbots
Honeypot attack, port: 81, PTR: PTR record not found
2020-05-26 08:22:36
118.24.197.247 attackspam
Ssh brute force
2020-05-26 08:01:21
112.217.225.59 attack
leo_www
2020-05-26 08:22:57
144.217.67.224 attackspambots
Abuse of XMLRPC
2020-05-26 07:56:08
45.10.53.61 attackbots
WordPress XMLRPC scan :: 45.10.53.61 0.116 - [25/May/2020:23:28:37  0000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-05-26 07:57:59
116.206.157.175 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-26 08:16:10
165.22.100.8 attackspambots
Abuse of XMLRPC
2020-05-26 07:53:29
134.209.24.143 attackbotsspam
$f2bV_matches
2020-05-26 07:51:32
92.118.161.9 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 89 - port: 123 proto: UDP cat: Misc Attack
2020-05-26 08:20:10
43.243.75.82 attackspambots
...
2020-05-26 07:44:05
61.153.203.82 attack
20/5/25@20:01:44: FAIL: Alarm-Network address from=61.153.203.82
20/5/25@20:01:44: FAIL: Alarm-Network address from=61.153.203.82
...
2020-05-26 08:16:31

Recently Reported IPs

201.138.175.50 83.247.153.117 182.84.28.168 3.180.184.98
2.27.207.219 202.151.30.145 45.221.88.146 103.192.76.65
187.27.27.39 104.225.223.8 18.222.89.246 139.198.121.125
118.241.173.147 47.219.220.240 14.161.23.220 149.56.22.122
92.118.38.52 82.127.237.205 51.91.164.154 151.73.61.3