This IP address has been reported a total of
198
times from
135 distinct
sources.
67.207.94.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Port scan / connection attempts on ports 4782/TCP, 5552/TCP, 8000/TCP to unused IP
Blocked by UFW (TCP on 14000)
Source port: 61001
TTL: 241
Packet length: 44
TOS: 0x08
This report ( ...
show moreBlocked by UFW (TCP on 14000)
Source port: 61001
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 67.207.94.149) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2024-08-17T02:52:57.405751+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[1290588]: Invalid user userguest ...
show more2024-08-17T02:52:57.405751+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[1290588]: Invalid user userguest from 67.207.94.149 port 43960
2024-08-17T02:56:32.392173+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[1290784]: Invalid user ubnt from 67.207.94.149 port 59308
2024-08-17T03:00:04.236280+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[1291035]: Invalid user cookie from 67.207.94.149 port 34156
...
show less
Aug 17 04:56:37 cho sshd[2617911]: Invalid user ubnt from 67.207.94.149 port 48104
Aug 17 04:56:37 c ...
show moreAug 17 04:56:37 cho sshd[2617911]: Invalid user ubnt from 67.207.94.149 port 48104
Aug 17 04:56:37 cho sshd[2617911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149
Aug 17 04:56:40 cho sshd[2617911]: Failed password for invalid user ubnt from 67.207.94.149 port 48104 ssh2
Aug 17 04:57:28 cho sshd[2617946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149 user=root
Aug 17 04:57:30 cho sshd[2617946]: Failed password for root from 67.207.94.149 port 59276 ssh2
...
show less
Aug 17 03:45:59 bonsai sshd[21548]: Invalid user 07 from 67.207.94.149
Aug 17 03:50:34 bonsai sshd[2 ...
show moreAug 17 03:45:59 bonsai sshd[21548]: Invalid user 07 from 67.207.94.149
Aug 17 03:50:34 bonsai sshd[22283]: Invalid user nagios from 67.207.94.149
Aug 17 03:52:45 bonsai sshd[22560]: Invalid user hosts from 67.207.94.149
...
show less
Aug 17 04:15:55 ns1 sshd[2231315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreAug 17 04:15:55 ns1 sshd[2231315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149 user=root
Aug 17 04:15:56 ns1 sshd[2231315]: Failed password for root from 67.207.94.149 port 37224 ssh2
Aug 17 04:16:38 ns1 sshd[2241817]: Invalid user user5 from 67.207.94.149 port 53360
Aug 17 04:16:38 ns1 sshd[2241817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149
Aug 17 04:16:40 ns1 sshd[2241817]: Failed password for invalid user user5 from 67.207.94.149 port 53360 ssh2
...
show less
2024-08-17T01:01:21.477705+01:00 asphaltdev sshd[2003045]: Invalid user bot from 67.207.94.149 port ...
show more2024-08-17T01:01:21.477705+01:00 asphaltdev sshd[2003045]: Invalid user bot from 67.207.94.149 port 48432
2024-08-17T01:01:21.478883+01:00 asphaltdev sshd[2003045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149
2024-08-17T01:01:23.260624+01:00 asphaltdev sshd[2003045]: Failed password for invalid user bot from 67.207.94.149 port 48432 ssh2
...
show less
2024-08-17T00:41:51.341804+01:00 asphaltdev sshd[1999930]: Invalid user vagrant from 67.207.94.149 p ...
show more2024-08-17T00:41:51.341804+01:00 asphaltdev sshd[1999930]: Invalid user vagrant from 67.207.94.149 port 60030
2024-08-17T00:41:51.342973+01:00 asphaltdev sshd[1999930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149
2024-08-17T00:41:53.505889+01:00 asphaltdev sshd[1999930]: Failed password for invalid user vagrant from 67.207.94.149 port 60030 ssh2
...
show less
2024-08-16T18:37:28.150231 skippy the magnificent sshd[74257]: Disconnected from authenticating user ...
show more2024-08-16T18:37:28.150231 skippy the magnificent sshd[74257]: Disconnected from authenticating user root 67.207.94.149 port 44636 [preauth]
2024-08-16T18:40:38.462704 skippy the magnificent sshd[74270]: Invalid user admin from 67.207.94.149 port 48666
2024-08-16T18:40:38.471115 skippy the magnificent sshd[74270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.94.149
2024-08-16T18:40:40.945627 skippy the magnificent sshd[74270]: Failed password for invalid user admin from 67.207.94.149 port 48666 ssh2
2024-08-16T18:40:42.736279 skippy the magnificent sshd[74270]: Disconnected from invalid user admin 67.207.94.149 port 48666 [preauth]
...
show less
Aug 17 00:10:53 sasrv sshd[2329784]: Invalid user cookie from 67.207.94.149 port 38922
Aug 17 00:14: ...
show moreAug 17 00:10:53 sasrv sshd[2329784]: Invalid user cookie from 67.207.94.149 port 38922
Aug 17 00:14:07 sasrv sshd[2329859]: User root from 67.207.94.149 not allowed because not listed in AllowUsers
Aug 17 00:14:45 sasrv sshd[2329889]: Invalid user toor from 67.207.94.149 port 51036
Aug 17 00:15:23 sasrv sshd[2329928]: User root from 67.207.94.149 not allowed because not listed in AllowUsers
Aug 17 00:16:01 sasrv sshd[2329954]: User root from 67.207.94.149 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 198 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩