Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: Vodafone Romania S.A.

Hostname: unknown

Organization: Vodafone Romania S.A.

Usage Type: unknown

Comments:
Type Details Datetime
attack
Feb  4 12:40:25 haigwepa sshd[21664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146 
Feb  4 12:40:27 haigwepa sshd[21664]: Failed password for invalid user prueba from 81.12.159.146 port 54824 ssh2
...
2020-02-04 20:37:22
attack
Invalid user avis from 81.12.159.146 port 46362
2020-01-19 04:52:00
attack
Jan 18 09:19:43 163-172-32-151 sshd[32524]: Invalid user avis from 81.12.159.146 port 52184
...
2020-01-18 16:32:45
attackbots
Brute-force attempt banned
2020-01-15 21:11:07
attackspam
none
2020-01-13 08:04:18
attackbotsspam
Dec 11 01:40:10 mail sshd\[4240\]: Invalid user jason from 81.12.159.146
Dec 11 01:40:10 mail sshd\[4240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Dec 11 01:40:12 mail sshd\[4240\]: Failed password for invalid user jason from 81.12.159.146 port 59906 ssh2
...
2019-12-11 08:41:29
attackspambots
FTP Brute-Force reported by Fail2Ban
2019-12-05 01:33:18
attackbots
2019-12-03T17:57:35.302552abusebot-2.cloudsearch.cf sshd\[7237\]: Invalid user ts from 81.12.159.146 port 43912
2019-12-04 02:18:35
attackspambots
Nov 25 16:12:22 nextcloud sshd\[13720\]: Invalid user ftp_test from 81.12.159.146
Nov 25 16:12:22 nextcloud sshd\[13720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Nov 25 16:12:24 nextcloud sshd\[13720\]: Failed password for invalid user ftp_test from 81.12.159.146 port 56476 ssh2
...
2019-11-25 23:13:55
attackspambots
Nov 24 19:24:41 icinga sshd[9722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Nov 24 19:24:43 icinga sshd[9722]: Failed password for invalid user ftp_test from 81.12.159.146 port 59344 ssh2
...
2019-11-25 03:03:20
attackbotsspam
Nov 23 12:10:23 v22018076622670303 sshd\[3848\]: Invalid user admin from 81.12.159.146 port 60118
Nov 23 12:10:23 v22018076622670303 sshd\[3848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Nov 23 12:10:25 v22018076622670303 sshd\[3848\]: Failed password for invalid user admin from 81.12.159.146 port 60118 ssh2
...
2019-11-23 19:16:09
attackspambots
Invalid user jboss from 81.12.159.146 port 55114
2019-11-14 16:10:41
attackspambots
Nov 11 23:43:38 pornomens sshd\[6927\]: Invalid user qhsupport from 81.12.159.146 port 48332
Nov 11 23:43:38 pornomens sshd\[6927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Nov 11 23:43:39 pornomens sshd\[6927\]: Failed password for invalid user qhsupport from 81.12.159.146 port 48332 ssh2
...
2019-11-12 07:19:03
attackbotsspam
Oct 27 15:39:21 cavern sshd[26904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
2019-11-09 03:38:38
attackbots
Nov  8 09:37:52 * sshd[6661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Nov  8 09:37:54 * sshd[6661]: Failed password for invalid user oracle from 81.12.159.146 port 43714 ssh2
2019-11-08 17:02:30
attackbots
2019-11-06T09:25:28.491264abusebot-5.cloudsearch.cf sshd\[5766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146  user=root
2019-11-06 17:33:55
attack
$f2bV_matches
2019-11-06 01:10:38
attack
Invalid user support from 81.12.159.146 port 39530
2019-10-29 07:41:13
attackspambots
Oct 26 22:07:53 unicornsoft sshd\[19649\]: Invalid user www from 81.12.159.146
Oct 26 22:07:53 unicornsoft sshd\[19649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Oct 26 22:07:55 unicornsoft sshd\[19649\]: Failed password for invalid user www from 81.12.159.146 port 33388 ssh2
2019-10-27 06:29:34
attackspambots
Oct 26 03:01:35 gw1 sshd[7039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Oct 26 03:01:37 gw1 sshd[7039]: Failed password for invalid user oracle from 81.12.159.146 port 45982 ssh2
...
2019-10-26 06:21:10
attackspam
Invalid user ubuntu from 81.12.159.146 port 43902
2019-10-25 02:12:56
attackbotsspam
Oct 21 14:03:44 MK-Soft-VM3 sshd[25340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146 
Oct 21 14:03:46 MK-Soft-VM3 sshd[25340]: Failed password for invalid user www from 81.12.159.146 port 49494 ssh2
...
2019-10-21 20:25:59
attackspambots
Oct  9 08:23:57 mail sshd\[5926\]: Invalid user test from 81.12.159.146
Oct  9 08:23:57 mail sshd\[5926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Oct  9 08:24:00 mail sshd\[5926\]: Failed password for invalid user test from 81.12.159.146 port 38722 ssh2
...
2019-10-09 14:29:38
attack
2019-10-02T06:31:50.307608abusebot-5.cloudsearch.cf sshd\[14582\]: Invalid user oracle from 81.12.159.146 port 45906
2019-10-02 14:46:28
attackbots
Oct  1 11:50:18 MK-Soft-VM3 sshd[9096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146 
Oct  1 11:50:20 MK-Soft-VM3 sshd[9096]: Failed password for invalid user usuario from 81.12.159.146 port 50808 ssh2
...
2019-10-01 17:57:49
attack
Sep  1 00:56:49 itv-usvr-01 sshd[26672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146  user=root
Sep  1 00:56:51 itv-usvr-01 sshd[26672]: Failed password for root from 81.12.159.146 port 46028 ssh2
2019-09-05 03:33:00
attackspambots
Invalid user admin from 81.12.159.146 port 48998
2019-09-01 05:07:05
attack
kp-sea2-01 recorded 2 login violations from 81.12.159.146 and was blocked at 2019-08-30 14:58:18. 81.12.159.146 has been blocked on 0 previous occasions. 81.12.159.146's first attempt was recorded at 2019-08-30 14:58:18
2019-08-30 23:11:15
attackspambots
Aug 26 23:02:59 hcbb sshd\[20402\]: Invalid user oana from 81.12.159.146
Aug 26 23:02:59 hcbb sshd\[20402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
Aug 26 23:03:01 hcbb sshd\[20402\]: Failed password for invalid user oana from 81.12.159.146 port 58246 ssh2
Aug 26 23:08:36 hcbb sshd\[20964\]: Invalid user jojo from 81.12.159.146
Aug 26 23:08:36 hcbb sshd\[20964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.12.159.146
2019-08-27 19:24:04
attackbots
$f2bV_matches
2019-08-27 10:40:51
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.12.159.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50682
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.12.159.146.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 12 22:59:51 CST 2019
;; MSG SIZE  rcvd: 117

Host info
Host 146.159.12.81.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 146.159.12.81.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
51.38.188.63 attack
2020-04-12T10:16:45.530742randservbullet-proofcloud-66.localdomain sshd[28617]: Invalid user 123root from 51.38.188.63 port 41420
2020-04-12T10:16:45.536620randservbullet-proofcloud-66.localdomain sshd[28617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.ip-51-38-188.eu
2020-04-12T10:16:45.530742randservbullet-proofcloud-66.localdomain sshd[28617]: Invalid user 123root from 51.38.188.63 port 41420
2020-04-12T10:16:47.611361randservbullet-proofcloud-66.localdomain sshd[28617]: Failed password for invalid user 123root from 51.38.188.63 port 41420 ssh2
...
2020-04-12 20:02:27
139.199.23.233 attackbots
$f2bV_matches
2020-04-12 20:07:08
106.12.136.242 attack
Apr 12 12:19:27 sso sshd[19791]: Failed password for root from 106.12.136.242 port 58758 ssh2
...
2020-04-12 19:39:34
111.231.54.28 attackspam
Apr 12 07:45:00 eventyay sshd[25003]: Failed password for root from 111.231.54.28 port 34666 ssh2
Apr 12 07:47:38 eventyay sshd[25025]: Failed password for root from 111.231.54.28 port 36318 ssh2
Apr 12 07:53:13 eventyay sshd[25158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.28
...
2020-04-12 19:48:38
27.128.240.247 attackspambots
Apr 12 15:29:10 itv-usvr-01 sshd[698]: Invalid user ddos from 27.128.240.247
Apr 12 15:29:10 itv-usvr-01 sshd[698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.240.247
Apr 12 15:29:10 itv-usvr-01 sshd[698]: Invalid user ddos from 27.128.240.247
Apr 12 15:29:12 itv-usvr-01 sshd[698]: Failed password for invalid user ddos from 27.128.240.247 port 50784 ssh2
2020-04-12 19:58:33
92.222.66.234 attack
$f2bV_matches
2020-04-12 19:43:45
162.243.128.84 attackspambots
Port Scanning Detected
2020-04-12 20:05:06
168.205.131.131 attackspambots
Automatic report - XMLRPC Attack
2020-04-12 20:01:05
203.56.4.104 attack
Apr 12 07:31:10 pve sshd[31331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.56.4.104 
Apr 12 07:31:12 pve sshd[31331]: Failed password for invalid user amber from 203.56.4.104 port 59448 ssh2
Apr 12 07:35:42 pve sshd[2321]: Failed password for root from 203.56.4.104 port 53342 ssh2
2020-04-12 19:30:54
191.7.145.246 attackbotsspam
Apr 12 13:11:03 tuxlinux sshd[64924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.145.246  user=root
Apr 12 13:11:05 tuxlinux sshd[64924]: Failed password for root from 191.7.145.246 port 53940 ssh2
Apr 12 13:11:03 tuxlinux sshd[64924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.145.246  user=root
Apr 12 13:11:05 tuxlinux sshd[64924]: Failed password for root from 191.7.145.246 port 53940 ssh2
Apr 12 13:28:27 tuxlinux sshd[65255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.145.246  user=root
...
2020-04-12 20:10:26
190.146.247.72 attackspambots
SSH login attempts.
2020-04-12 19:53:03
178.239.173.220 attack
Brute force attack against VPN service
2020-04-12 19:36:43
117.211.192.70 attack
Apr 12 13:32:56 srv01 sshd[31051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.192.70  user=root
Apr 12 13:32:58 srv01 sshd[31051]: Failed password for root from 117.211.192.70 port 57944 ssh2
Apr 12 13:36:20 srv01 sshd[31253]: Invalid user carter from 117.211.192.70 port 44006
Apr 12 13:36:20 srv01 sshd[31253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.192.70
Apr 12 13:36:20 srv01 sshd[31253]: Invalid user carter from 117.211.192.70 port 44006
Apr 12 13:36:22 srv01 sshd[31253]: Failed password for invalid user carter from 117.211.192.70 port 44006 ssh2
...
2020-04-12 19:37:03
167.99.194.54 attackspam
Apr 12 10:14:06 ns3164893 sshd[8182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.194.54
Apr 12 10:14:08 ns3164893 sshd[8182]: Failed password for invalid user laserjet from 167.99.194.54 port 47430 ssh2
...
2020-04-12 19:28:40
207.154.193.178 attackspam
Apr 12 16:37:44 gw1 sshd[6446]: Failed password for root from 207.154.193.178 port 58568 ssh2
...
2020-04-12 20:02:07

Recently Reported IPs

194.12.248.230 147.135.1.145 27.216.162.230 176.132.54.56
217.36.9.33 216.255.51.237 123.171.2.222 54.92.115.5
89.231.48.206 55.235.133.31 103.89.91.73 36.231.227.197
231.162.142.193 170.98.140.171 240.217.167.102 73.155.16.238
204.223.7.110 154.208.72.205 1.141.124.72 65.26.15.234