Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 13 05:10:11 v220250758066366549 sshd[3226]: Invalid user cleo from 182.146.131.149 port 50037
Nov 13 05:10:12 v220250758066366549 sshd[3226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.146.131.149 ...
show moreNov 13 05:10:11 v220250758066366549 sshd[3226]: Invalid user cleo from 182.146.131.149 port 50037
Nov 13 05:10:12 v220250758066366549 sshd[3226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.146.131.149
Nov 13 05:10:13 v220250758066366549 sshd[3226]: Failed password for invalid user cleo from 182.146.131.149 port 50037 ssh2
... RK-Cloud
show less
2026-11-12T08:43:05.520486+01:00 luna sshd-session[859938]: Invalid user guest from 182.146.131.149 port 49040
2026-11-12T08:43:43.766641+01:00 luna sshd-session[860349]: Invalid user hai from 182.146.131.149 port 50054
2026-11-12T08:44:02.291514+01: ...
show more2026-11-12T08:43:05.520486+01:00 luna sshd-session[859938]: Invalid user guest from 182.146.131.149 port 49040
2026-11-12T08:43:43.766641+01:00 luna sshd-session[860349]: Invalid user hai from 182.146.131.149 port 50054
2026-11-12T08:44:02.291514+01:00 luna sshd-session[860647]: Invalid user albert from 182.146.131.149 port 46442
2026-11-12T08:44:48.865124+01:00 luna sshd-session[861212]: Invalid user user from 182.146.131.149 port 47820
2026-11-12T08:45:06.515668+01:00 luna sshd-session[861535]: Invalid user admin from 182.146.131.149 port 48288
2026-11-12T08:45:21.490747+01:00 luna sshd-session[861792]: Invalid user hh from 182.146.131.149 port 48737
2026-11-12T08:45:38.866970+01:00 luna sshd-session[862085]: Invalid user gyx from 182.146.131.149 port 49169
2026-11-12T08:45:55.098517+01:00 luna sshd-session[862286]: Invalid user user1 from 182.146.131.149 port 49608
2026-11-12T08:46:12.903755+01:00 luna sshd-session[862490]: Invalid user boyke from 182.146.131.149 port 50051
2026-11-
...
show less
2026-11-12T04:13:10.428377+01:00 prod-02 sshd[2261740]: Failed password for root from 182.146.131.149 port 48058 ssh2
2026-11-12T04:13:25.168978+01:00 prod-02 sshd[2261742]: Invalid user top from 182.146.131.149 port 48571
...
2026-11-11T21:36:55.203129srv sshd[23987]: Invalid user oracle from 182.146.131.149 port 47358
2026-11-11T21:37:09.897693srv sshd[24235]: Invalid user zhy from 182.146.131.149 port 47867
2026-11-11T21:37:24.490421srv sshd[24558]: Invalid user openlav ...
show more2026-11-11T21:36:55.203129srv sshd[23987]: Invalid user oracle from 182.146.131.149 port 47358
2026-11-11T21:37:09.897693srv sshd[24235]: Invalid user zhy from 182.146.131.149 port 47867
2026-11-11T21:37:24.490421srv sshd[24558]: Invalid user openlava from 182.146.131.149 port 48344
2026-11-11T21:37:37.617284srv sshd[24922]: Invalid user b from 182.146.131.149 port 48817
2026-11-11T21:38:17.612680srv sshd[26134]: Invalid user ftpuser from 182.146.131.149 port 46119
...
show less
2026-11-11T18:08:06.288678+02:00 smtp-01.hosts.ferron.sh sshd-session[3759128]: Invalid user hzw from 182.146.131.149 port 49329
2026-11-11T18:08:59.504589+02:00 smtp-01.hosts.ferron.sh sshd-session[3759400]: Invalid user test4 from 182.146.131.149 p ...
show more2026-11-11T18:08:06.288678+02:00 smtp-01.hosts.ferron.sh sshd-session[3759128]: Invalid user hzw from 182.146.131.149 port 49329
2026-11-11T18:08:59.504589+02:00 smtp-01.hosts.ferron.sh sshd-session[3759400]: Invalid user test4 from 182.146.131.149 port 46367
2026-11-11T18:09:23.651799+02:00 smtp-01.hosts.ferron.sh sshd-session[3759546]: Invalid user bitrix from 182.146.131.149 port 46908
2026-11-11T18:09:48.924984+02:00 smtp-01.hosts.ferron.sh sshd-session[3759673]: Invalid user spa from 182.146.131.149 port 47677
2026-11-11T18:10:10.078593+02:00 smtp-01.hosts.ferron.sh sshd-session[3759801]: Invalid user gpadmin from 182.146.131.149 port 48401
...
show less
Nov 11 11:07:47 vps-6 sshd[1339822]: Invalid user hzw from 182.146.131.149 port 48926
Nov 11 11:07:47 vps-6 sshd[1339822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.146.131.149
Nov 11 11:07:50 vps-6 ...
show moreNov 11 11:07:47 vps-6 sshd[1339822]: Invalid user hzw from 182.146.131.149 port 48926
Nov 11 11:07:47 vps-6 sshd[1339822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.146.131.149
Nov 11 11:07:50 vps-6 sshd[1339822]: Failed password for invalid user hzw from 182.146.131.149 port 48926 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Brute-Force
SSH
Anonymous
[email.tmg.gr] ssh-invalid-user: logs=/var/log/secure; samples=Nov 9 07:33:58 email sshd[26704]: Failed password for root from 182.146.131.149 port 48363 ssh2 | Nov 9 07:34:22 email sshd[26771]: Failed password for root from 182.146.131.149 port 4897 ...
show more[email.tmg.gr] ssh-invalid-user: logs=/var/log/secure; samples=Nov 9 07:33:58 email sshd[26704]: Failed password for root from 182.146.131.149 port 48363 ssh2 | Nov 9 07:34:22 email sshd[26771]: Failed password for root from 182.146.131.149 port 48979 ssh2 | Nov 9 07:34:42 email sshd[26786]: Invalid user work from 182.146.131.149 port 49585
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
