This IP address has been reported a total of
52
times from
43 distinct
sources.
206.189.148.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
$f2bV_matches
Brute-Force
SSH
Anonymous
2026-07-07T11:16:44.673138+02:00 host.nilsbossaller.de sshd[390130]: Connection closed by authentica ...
show more2026-07-07T11:16:44.673138+02:00 host.nilsbossaller.de sshd[390130]: Connection closed by authenticating user root 206.189.148.149 port 55856 [preauth]
2026-07-07T11:16:43.026000+02:00 host.nilsbossaller.de sshd[390132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.149 user=root
2026-07-07T11:16:44.945791+02:00 host.nilsbossaller.de sshd[390132]: Failed password for root from 206.189.148.149 port 55866 ssh2
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 206.189.148.149 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Di ...
show more(sshd) Failed SSH login from 206.189.148.149 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 7 03:58:43 server5 sshd[19724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.149 user=root
Jul 7 03:58:43 server5 sshd[19725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.149 user=root
Jul 7 03:58:43 server5 sshd[19722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.149 user=root
Jul 7 03:58:45 server5 sshd[19724]: Failed password for root from 206.189.148.149 port 32830 ssh2
Jul 7 03:58:45 server5 sshd[19725]: Failed password for root from 206.189.148.149 port 32822 ssh2
show less
2026-07-06T09:52:28.376656+02:00 www sshd-session[379103]: Failed password for root from 206.189.148 ...
show more2026-07-06T09:52:28.376656+02:00 www sshd-session[379103]: Failed password for root from 206.189.148.149 port 36050 ssh2
2026-07-06T09:52:26.226426+02:00 www sshd-session[379100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.149 user=root
2026-07-06T09:52:28.504591+02:00 www sshd-session[379100]: Failed password for root from 206.189.148.149 port 36048 ssh2
2026-07-06T09:52:29.871847+02:00 www sshd-session[379100]: Connection closed by authenticating user root 206.189.148.149 port 36048 [preauth]
2026-07-06T09:52:29.878455+02:00 www sshd-session[379099]: Connection closed by authenticating user root 206.189.148.149 port 36044 [preauth]
show less
2026-07-06T01:49:51.139449 host sshd-session[368661]: user XXXX from 206.189.148.149 not allowed bec ...
show more2026-07-06T01:49:51.139449 host sshd-session[368661]: user XXXX from 206.189.148.149 not allowed because not listed in AllowUsers 2026-07-06T01:49:51.319512 host sshd-session[368661]: Connection closed by invalid user root 206.189.148.149 port 50756 [preauth] 2026-07-06T01:49:51.400221 host sshd-session[368664]: Connection closed by invalid user root 206.189.148.149 port 50778 [preauth]
show less