Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Shanghai Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Oct 12 03:30:48 xtremcommunity sshd\[439884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
Oct 12 03:30:50 xtremcommunity sshd\[439884\]: Failed password for root from 58.246.149.142 port 40454 ssh2
Oct 12 03:34:53 xtremcommunity sshd\[439982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
Oct 12 03:34:55 xtremcommunity sshd\[439982\]: Failed password for root from 58.246.149.142 port 42670 ssh2
Oct 12 03:39:00 xtremcommunity sshd\[440060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142  user=root
...
2019-10-12 19:02:27
attackspambots
Oct  2 07:48:12 MK-Soft-Root1 sshd[10777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142 
Oct  2 07:48:14 MK-Soft-Root1 sshd[10777]: Failed password for invalid user marcus from 58.246.149.142 port 43978 ssh2
...
2019-10-02 18:01:06
attack
Sep 24 06:52:29 www5 sshd\[29202\]: Invalid user salvia from 58.246.149.142
Sep 24 06:52:29 www5 sshd\[29202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 24 06:52:31 www5 sshd\[29202\]: Failed password for invalid user salvia from 58.246.149.142 port 56616 ssh2
...
2019-09-24 16:38:33
attack
Sep 23 23:06:04 vtv3 sshd\[5107\]: Invalid user ex from 58.246.149.142 port 35478
Sep 23 23:06:04 vtv3 sshd\[5107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:06:07 vtv3 sshd\[5107\]: Failed password for invalid user ex from 58.246.149.142 port 35478 ssh2
Sep 23 23:09:44 vtv3 sshd\[6635\]: Invalid user zq from 58.246.149.142 port 40146
Sep 23 23:09:44 vtv3 sshd\[6635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:21:07 vtv3 sshd\[12590\]: Invalid user bot from 58.246.149.142 port 54150
Sep 23 23:21:07 vtv3 sshd\[12590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.149.142
Sep 23 23:21:08 vtv3 sshd\[12590\]: Failed password for invalid user bot from 58.246.149.142 port 54150 ssh2
Sep 23 23:24:59 vtv3 sshd\[14119\]: Invalid user user from 58.246.149.142 port 58810
Sep 23 23:24:59 vtv3 sshd\[14119\]: pam_unix\(sshd:
2019-09-24 06:21:51
attackspam
Sep 15 05:41:08 mail sshd[13150]: Failed password for invalid user public from 58.246.149.142 port 35182 ssh2
Sep 15 05:41:09 mail sshd[13150]: Received disconnect from 58.246.149.142: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=58.246.149.142
2019-09-16 04:33:28
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.246.149.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51869
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.246.149.142.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091501 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 16 04:33:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.149.246.58.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 142.149.246.58.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.83.110.68 attack
SASL PLAIN auth failed: ruser=...
2020-06-08 06:41:07
114.97.185.30 attack
spam (f2b h2)
2020-06-08 06:44:59
101.255.9.105 attackbotsspam
(imapd) Failed IMAP login from 101.255.9.105 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun  8 00:56:16 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=101.255.9.105, lip=5.63.12.44, TLS, session=<1mBKToSnuKJl/wlp>
2020-06-08 06:20:08
45.201.175.183 attackspam
Jun  7 23:25:57 debian kernel: [464115.953011] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=45.201.175.183 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=31170 PROTO=TCP SPT=38818 DPT=8000 WINDOW=36793 RES=0x00 SYN URGP=0
2020-06-08 06:36:47
146.66.244.199 attackspam
[Sun Jun 07 13:22:27 2020] - Syn Flood From IP: 146.66.244.199 Port: 34428
2020-06-08 06:27:55
174.219.0.24 attackspambots
Brute forcing email accounts
2020-06-08 06:41:38
116.24.67.167 attackspambots
Jun  7 16:18:34 fwservlet sshd[26767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.24.67.167  user=r.r
Jun  7 16:18:35 fwservlet sshd[26767]: Failed password for r.r from 116.24.67.167 port 58868 ssh2
Jun  7 16:18:35 fwservlet sshd[26767]: Received disconnect from 116.24.67.167 port 58868:11: Bye Bye [preauth]
Jun  7 16:18:35 fwservlet sshd[26767]: Disconnected from 116.24.67.167 port 58868 [preauth]
Jun  7 16:23:38 fwservlet sshd[26825]: Connection closed by 116.24.67.167 port 51380 [preauth]
Jun  7 16:24:08 fwservlet sshd[26882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.24.67.167  user=r.r
Jun  7 16:24:09 fwservlet sshd[26882]: Failed password for r.r from 116.24.67.167 port 42608 ssh2
Jun  7 16:24:10 fwservlet sshd[26882]: Received disconnect from 116.24.67.167 port 42608:11: Bye Bye [preauth]
Jun  7 16:24:10 fwservlet sshd[26882]: Disconnected from 116.24.67.167 port 4........
-------------------------------
2020-06-08 06:35:59
198.100.158.173 attackspam
Jun  7 22:21:26 legacy sshd[27415]: Failed password for root from 198.100.158.173 port 50004 ssh2
Jun  7 22:23:51 legacy sshd[27524]: Failed password for root from 198.100.158.173 port 50388 ssh2
...
2020-06-08 06:26:02
70.184.171.228 attack
614. On Jun 7 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 70.184.171.228.
2020-06-08 06:19:16
185.220.100.247 attackbots
Jun  8 00:46:33 [Censored Hostname] sshd[14917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.247 
Jun  8 00:46:36 [Censored Hostname] sshd[14917]: Failed password for invalid user backuppc from 185.220.100.247 port 13276 ssh2[...]
2020-06-08 06:47:27
222.186.52.39 attackbots
Fail2Ban
2020-06-08 06:31:16
61.133.232.253 attackspam
Jun  7 21:44:35 scw-6657dc sshd[1225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.253  user=root
Jun  7 21:44:35 scw-6657dc sshd[1225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.253  user=root
Jun  7 21:44:37 scw-6657dc sshd[1225]: Failed password for root from 61.133.232.253 port 57667 ssh2
...
2020-06-08 06:45:39
181.123.177.150 attackbotsspam
Jun  7 23:47:24 pornomens sshd\[27467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.177.150  user=root
Jun  7 23:47:26 pornomens sshd\[27467\]: Failed password for root from 181.123.177.150 port 2889 ssh2
Jun  8 00:02:34 pornomens sshd\[27674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.177.150  user=root
...
2020-06-08 06:15:41
121.63.179.228 attackbotsspam
Jun  7 22:24:15 home sshd[19855]: Failed password for root from 121.63.179.228 port 37980 ssh2
Jun  7 22:26:57 home sshd[20164]: Failed password for root from 121.63.179.228 port 56202 ssh2
...
2020-06-08 06:16:34
176.8.152.47 attackbots
20/6/7@16:26:23: FAIL: Alarm-Network address from=176.8.152.47
20/6/7@16:26:23: FAIL: Alarm-Network address from=176.8.152.47
...
2020-06-08 06:18:25

Recently Reported IPs

201.138.175.50 83.247.153.117 182.84.28.168 3.180.184.98
2.27.207.219 202.151.30.145 45.221.88.146 103.192.76.65
187.27.27.39 104.225.223.8 18.222.89.246 139.198.121.125
118.241.173.147 47.219.220.240 14.161.23.220 149.56.22.122
92.118.38.52 82.127.237.205 51.91.164.154 151.73.61.3