This IP address has been reported a total of
295
times from
171 distinct
sources.
149.202.42.143 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Detected Hacking, SQL Injection or general Web App Attack
SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ...
show moreSSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Nov 21 04:53:01 fallback sshd[3662903]: Failed password for invalid user user3 from 149.202.42.143 p ...
show moreNov 21 04:53:01 fallback sshd[3662903]: Failed password for invalid user user3 from 149.202.42.143 port 45028 ssh2
Nov 21 04:56:14 fallback sshd[3664352]: Invalid user chris from 149.202.42.143 port 47386
Nov 21 04:56:14 fallback sshd[3664352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.42.143
Nov 21 04:56:16 fallback sshd[3664352]: Failed password for invalid user chris from 149.202.42.143 port 47386 ssh2
Nov 21 04:58:01 fallback sshd[3665110]: Invalid user user from 149.202.42.143 port 38730
...
show less
Nov 21 02:13:15 jump sshd[1696266]: Invalid user user from 149.202.42.143 port 55870
Nov 21 02:13:17 ...
show moreNov 21 02:13:15 jump sshd[1696266]: Invalid user user from 149.202.42.143 port 55870
Nov 21 02:13:17 jump sshd[1696266]: Failed password for invalid user user from 149.202.42.143 port 55870 ssh2
Nov 21 02:19:53 jump sshd[1696489]: Invalid user test from 149.202.42.143 port 57186
...
show less
Nov 21 02:33:21 jira sshd[279243]: Connection from 149.202.42.143 port 40138 on 138.201.123.138 port ...
show moreNov 21 02:33:21 jira sshd[279243]: Connection from 149.202.42.143 port 40138 on 138.201.123.138 port 22 rdomain ""
Nov 21 02:33:21 jira sshd[279243]: Invalid user sqlsrv from 149.202.42.143 port 40138
Nov 21 02:33:21 jira sshd[279243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.42.143
Nov 21 02:33:23 jira sshd[279243]: Failed password for invalid user sqlsrv from 149.202.42.143 port 40138 ssh2
Nov 21 02:33:23 jira sshd[279243]: Disconnected from invalid user sqlsrv 149.202.42.143 port 40138 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 295 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩