104.211.142.129

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 104.211.142.129 to port 1433 [T]	2020-07-22 02:56:57
attackspam	89. On Jul 20 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 104.211.142.129.	2020-07-21 07:52:12
attackbots	Jul 18 10:20:33 sshgateway sshd\[1112\]: Invalid user admin from 104.211.142.129 Jul 18 10:20:33 sshgateway sshd\[1112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.142.129 Jul 18 10:20:35 sshgateway sshd\[1112\]: Failed password for invalid user admin from 104.211.142.129 port 56334 ssh2	2020-07-18 19:11:04
attackbots	Jul 16 18:34:32 lvps178-77-74-153 sshd[1532]: User root from 104.211.142.129 not allowed because none of user's groups are listed in AllowGroups ...	2020-07-17 03:55:33

Comments on same subnet:

IP	Type	Details	Datetime
104.211.142.201	attack	sshd: Failed password for .... from 104.211.142.201 port 62033 ssh2	2020-07-18 17:47:41
104.211.142.201	attackbotsspam	Jul 15 14:46:19 * sshd[2376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.142.201 Jul 15 14:46:19 * sshd[2377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.142.201	2020-07-15 20:47:37
104.211.142.191	attackbotsspam	RDP Brute-Force (Grieskirchen RZ2)	2020-04-08 05:08:41

Type

Details

Datetime

104.211.142.201

attack

sshd: Failed password for .... from 104.211.142.201 port 62033 ssh2

2020-07-18 17:47:41

104.211.142.201

attackbotsspam

Jul 15 14:46:19 * sshd[2376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.142.201
Jul 15 14:46:19 * sshd[2377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.142.201

2020-07-15 20:47:37

104.211.142.191

attackbotsspam

RDP Brute-Force (Grieskirchen RZ2)

2020-04-08 05:08:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.211.142.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.211.142.129.		IN	A

;; AUTHORITY SECTION:
.			457	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071603 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 03:55:30 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 129.142.211.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.142.211.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
137.59.0.6	attackbotsspam	2020-02-05T05:51:13.873457 sshd[17497]: Invalid user jenkins from 137.59.0.6 port 54402 2020-02-05T05:51:13.887934 sshd[17497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.59.0.6 2020-02-05T05:51:13.873457 sshd[17497]: Invalid user jenkins from 137.59.0.6 port 54402 2020-02-05T05:51:15.799851 sshd[17497]: Failed password for invalid user jenkins from 137.59.0.6 port 54402 ssh2 2020-02-05T05:55:03.305428 sshd[17605]: Invalid user cuongtv from 137.59.0.6 port 41063 ...	2020-02-05 13:29:47
84.215.23.72	attackspambots	Feb 5 06:08:10 silence02 sshd[30472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.215.23.72 Feb 5 06:08:12 silence02 sshd[30472]: Failed password for invalid user alhrw from 84.215.23.72 port 47014 ssh2 Feb 5 06:11:39 silence02 sshd[30673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.215.23.72	2020-02-05 13:26:48
47.100.92.157	attackspambots	Unauthorized connection attempt detected from IP address 47.100.92.157 to port 1433 [J]	2020-02-05 10:42:02
2a00:1158:2:6d00::2	attackbots	02/05/2020-05:55:22.513593 2a00:1158:0002:6d00:0000:0000:0000:0002 Protocol: 6 SURICATA TLS invalid record/traffic	2020-02-05 13:14:43
210.4.118.100	attackbots	Feb 5 05:55:28 grey postfix/smtpd\[26517\]: NOQUEUE: reject: RCPT from unknown\[210.4.118.100\]: 554 5.7.1 Service unavailable\; Client host \[210.4.118.100\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=210.4.118.100\; from=\ to=\ proto=ESMTP helo=\<\[210.4.118.100\]\> ...	2020-02-05 13:10:10
134.209.125.36	attackbots	xmlrpc attack	2020-02-05 13:23:02
59.126.220.144	attackbotsspam	Unauthorized connection attempt detected from IP address 59.126.220.144 to port 81 [J]	2020-02-05 10:40:00
45.74.150.144	attackbotsspam	Unauthorized connection attempt detected from IP address 45.74.150.144 to port 5555 [J]	2020-02-05 10:42:51
139.155.93.180	attackspambots	Feb 5 06:09:05 legacy sshd[18671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.93.180 Feb 5 06:09:07 legacy sshd[18671]: Failed password for invalid user mega from 139.155.93.180 port 33458 ssh2 Feb 5 06:12:57 legacy sshd[18924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.93.180 ...	2020-02-05 13:17:20
37.247.111.218	attack	Unauthorized connection attempt detected from IP address 37.247.111.218 to port 2220 [J]	2020-02-05 10:43:49
118.216.168.92	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-05 13:25:18
222.186.175.216	attackbots	Unauthorized connection attempt detected from IP address 222.186.175.216 to port 22 [J]	2020-02-05 13:23:44
82.80.154.234	attackbotsspam	Unauthorized connection attempt detected from IP address 82.80.154.234 to port 23 [J]	2020-02-05 10:37:04
162.243.130.170	attackspambots	Port Scan detected from 162.243.130.170 (US/United States/zg-0131a-362.stretchoid.com). 4 hits in the last 270 seconds	2020-02-05 13:29:11
138.197.74.25	attack	Autoban 138.197.74.25 AUTH/CONNECT	2020-02-05 13:19:50

Recently Reported IPs

255.183.238.47	58.130.120.224	6.155.75.242	116.31.31.75
68.129.219.59	190.44.122.30	238.187.208.247	218.75.38.213
132.26.218.151	230.194.241.106	191.66.213.206	28.229.54.6
176.245.94.192	184.34.209.188	254.121.93.83	173.252.127.118
38.242.16.3	215.208.211.111	234.20.117.176	97.189.154.70