City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: QuadraNet Enterprises LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Feb 25 19:59:26 WHD8 postfix/smtpd\[27531\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 25 19:59:33 WHD8 postfix/smtpd\[27538\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 25 19:59:49 WHD8 postfix/smtpd\[27375\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-06 04:44:17 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.129.29.92 | attack | Unauthorized IMAP connection attempt |
2020-08-08 15:59:58 |
| 104.129.25.27 | attackbotsspam | Brute forcing email accounts |
2020-07-27 00:50:00 |
| 104.129.2.174 | attack | Jun 24 03:39:10 mail postfix/postscreen[10005]: DNSBL rank 4 for [104.129.2.174]:37414 ... |
2020-07-14 13:51:10 |
| 104.129.2.174 | attack | 3 failed Login Attempts - (Email Service) |
2020-06-21 21:23:32 |
| 104.129.2.80 | attack | $f2bV_matches |
2020-05-16 18:36:57 |
| 104.129.2.168 | attackbotsspam | Brute forcing email accounts |
2020-03-03 09:12:47 |
| 104.129.204.80 | attackproxy | appears to ipv6 to ipv4 redirect ssl with dns cache poisoning |
2020-02-11 02:35:32 |
| 104.129.204.79 | attackbots | 20/1/11@23:57:20: FAIL: Alarm-Network address from=104.129.204.79 ... |
2020-01-12 14:04:23 |
| 104.129.29.26 | attackspambots | fire |
2019-11-17 02:35:58 |
| 104.129.200.69 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 23:50:59,525 INFO [amun_request_handler] PortScan Detected on Port: 445 (104.129.200.69) |
2019-07-12 16:09:05 |
| 104.129.202.132 | attack | NAME : ZSCALER-QLA1 CIDR : 104.129.198.0/24 DDoS attack USA - California - block certain countries :) IP: 104.129.202.132 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-01 05:47:39 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.129.2.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.129.2.67. IN A
;; AUTHORITY SECTION:
. 582 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020050501 1800 900 604800 86400
;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 04:44:13 CST 2020
;; MSG SIZE rcvd: 11667.2.129.104.in-addr.arpa domain name pointer 104.129.2.67.static.quadranet.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
67.2.129.104.in-addr.arpa name = 104.129.2.67.static.quadranet.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.111.253.54 | attackbotsspam | Sep 9 21:39:33 plusreed sshd[5133]: Invalid user test from 187.111.253.54 ... |
2019-09-10 09:47:23 |
| 141.98.80.80 | attack | Sep 10 03:14:10 mail postfix/smtpd\[18325\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 10 03:14:23 mail postfix/smtpd\[18325\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 10 04:02:10 mail postfix/smtpd\[18988\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 10 04:02:18 mail postfix/smtpd\[20587\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ |
2019-09-10 10:30:37 |
| 212.83.163.47 | attack | CloudCIX Reconnaissance Scan Detected, PTR: 212-83-163-47.rev.poneytelecom.eu. |
2019-09-10 10:11:05 |
| 46.101.39.199 | attackspambots | Sep 10 03:47:39 core sshd[4471]: Invalid user p@ssw0rd123 from 46.101.39.199 port 44663 Sep 10 03:47:42 core sshd[4471]: Failed password for invalid user p@ssw0rd123 from 46.101.39.199 port 44663 ssh2 ... |
2019-09-10 10:02:58 |
| 173.234.181.79 | attack | Contact form spam, No Accept Header from Bolton, doctorversegen@gmail.com |
2019-09-10 10:17:42 |
| 208.187.167.69 | attackbotsspam | Postfix RBL failed |
2019-09-10 09:45:42 |
| 218.98.26.178 | attackspam | Sep 9 16:13:26 auw2 sshd\[18536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.178 user=root Sep 9 16:13:28 auw2 sshd\[18536\]: Failed password for root from 218.98.26.178 port 12446 ssh2 Sep 9 16:13:30 auw2 sshd\[18536\]: Failed password for root from 218.98.26.178 port 12446 ssh2 Sep 9 16:13:32 auw2 sshd\[18536\]: Failed password for root from 218.98.26.178 port 12446 ssh2 Sep 9 16:13:36 auw2 sshd\[18564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.178 user=root |
2019-09-10 10:16:43 |
| 81.22.45.100 | attack | Sep 10 03:23:43 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.100 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=47840 PROTO=TCP SPT=43476 DPT=61022 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-10 09:40:44 |
| 49.235.91.152 | attack | Sep 9 15:53:38 web1 sshd\[25723\]: Invalid user hadoop from 49.235.91.152 Sep 9 15:53:38 web1 sshd\[25723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.91.152 Sep 9 15:53:40 web1 sshd\[25723\]: Failed password for invalid user hadoop from 49.235.91.152 port 59064 ssh2 Sep 9 16:00:11 web1 sshd\[26267\]: Invalid user temp from 49.235.91.152 Sep 9 16:00:11 web1 sshd\[26267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.91.152 |
2019-09-10 10:09:45 |
| 188.166.158.153 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2019-09-10 10:24:11 |
| 218.98.40.152 | attack | Sep 9 20:39:17 aat-srv002 sshd[31639]: Failed password for root from 218.98.40.152 port 62073 ssh2 Sep 9 20:39:19 aat-srv002 sshd[31639]: Failed password for root from 218.98.40.152 port 62073 ssh2 Sep 9 20:39:21 aat-srv002 sshd[31639]: Failed password for root from 218.98.40.152 port 62073 ssh2 Sep 9 20:39:26 aat-srv002 sshd[31654]: Failed password for root from 218.98.40.152 port 23058 ssh2 ... |
2019-09-10 09:51:51 |
| 46.105.127.166 | attackbots | [Mon Sep 09 22:21:56.178521 2019] [authz_core:error] [pid 34260] [client 46.105.127.166:60149] AH01630: client denied by server configuration: /var/www/nanodivulga.ufn.edu.br/html/xmlrpc.php, referer: http://www.google.com.hk [Mon Sep 09 22:22:22.901029 2019] [authz_core:error] [pid 34459] [client 46.105.127.166:52858] AH01630: client denied by server configuration: /var/www/nanodivulga.ufn.edu.br/html/xmlrpc.php, referer: http://www.google.com.hk [Mon Sep 09 22:22:53.963421 2019] [authz_core:error] [pid 34354] [client 46.105.127.166:50932] AH01630: client denied by server configuration: /var/www/nanodivulga.ufn.edu.br/html/xmlrpc.php, referer: http://www.google.com.hk ... |
2019-09-10 10:18:57 |
| 27.254.90.106 | attack | Sep 9 15:39:04 wbs sshd\[26655\]: Invalid user redm1ne from 27.254.90.106 Sep 9 15:39:04 wbs sshd\[26655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.90.106 Sep 9 15:39:06 wbs sshd\[26655\]: Failed password for invalid user redm1ne from 27.254.90.106 port 38063 ssh2 Sep 9 15:46:21 wbs sshd\[27411\]: Invalid user bot from 27.254.90.106 Sep 9 15:46:21 wbs sshd\[27411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.90.106 |
2019-09-10 09:51:21 |
| 52.83.66.237 | attack | Sep 10 02:28:33 xb3 sshd[11345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-83-66-237.cn-northwest-1.compute.amazonaws.com.cn Sep 10 02:28:34 xb3 sshd[11345]: Failed password for invalid user student from 52.83.66.237 port 45382 ssh2 Sep 10 02:28:35 xb3 sshd[11345]: Received disconnect from 52.83.66.237: 11: Bye Bye [preauth] Sep 10 02:46:40 xb3 sshd[7469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-83-66-237.cn-northwest-1.compute.amazonaws.com.cn Sep 10 02:46:43 xb3 sshd[7469]: Failed password for invalid user admin from 52.83.66.237 port 62304 ssh2 Sep 10 02:46:43 xb3 sshd[7469]: Received disconnect from 52.83.66.237: 11: Bye Bye [preauth] Sep 10 02:51:10 xb3 sshd[5307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-83-66-237.cn-northwest-1.compute.amazonaws.com.cn user=www-data Sep 10 02:51:12 xb3 sshd[5307]: Faile........ ------------------------------- |
2019-09-10 09:53:52 |
| 218.98.26.166 | attackspambots | Sep 10 02:06:55 hb sshd\[7584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.166 user=root Sep 10 02:06:58 hb sshd\[7584\]: Failed password for root from 218.98.26.166 port 56452 ssh2 Sep 10 02:07:04 hb sshd\[7604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.166 user=root Sep 10 02:07:06 hb sshd\[7604\]: Failed password for root from 218.98.26.166 port 28339 ssh2 Sep 10 02:07:08 hb sshd\[7604\]: Failed password for root from 218.98.26.166 port 28339 ssh2 |
2019-09-10 10:07:45 |