119.29.85.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.29.85.64	attack	Oct 9 04:33:27 mail sshd[3341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.85.64 Oct 9 04:33:29 mail sshd[3341]: Failed password for invalid user listd from 119.29.85.64 port 56678 ssh2 ...	2020-10-10 01:38:52
119.29.85.64	attack	Oct 9 04:33:27 mail sshd[3341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.85.64 Oct 9 04:33:29 mail sshd[3341]: Failed password for invalid user listd from 119.29.85.64 port 56678 ssh2 ...	2020-10-09 17:23:32
119.29.85.127	attackbotsspam	ThinkPHP Remote Code Execution Vulnerability	2019-07-29 08:03:03
119.29.85.83	attack	Multiple failed RDP login attempts	2019-07-11 11:02:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.29.85.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17845
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.29.85.104.			IN	A

;; AUTHORITY SECTION:
.			313	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:30:30 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 104.85.29.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.85.29.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
221.228.109.146	attackbots	SSH login attempts.	2020-09-07 04:52:07
93.170.170.103	attack	My AVG protection blocks this RDC attempt from this IP address repeatedly.	2020-09-07 04:41:17
161.35.200.233	attack	Sep 6 21:42:40 vpn01 sshd[19317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233 Sep 6 21:42:41 vpn01 sshd[19317]: Failed password for invalid user bb2server from 161.35.200.233 port 49646 ssh2 ...	2020-09-07 04:59:03
223.191.52.85	attack	1599411289 - 09/06/2020 18:54:49 Host: 223.191.52.85/223.191.52.85 Port: 445 TCP Blocked	2020-09-07 05:11:47
37.187.54.45	attack	SSH login attempts.	2020-09-07 05:05:48
112.85.42.200	attackbots	Sep 6 16:29:52 NPSTNNYC01T sshd[31865]: Failed password for root from 112.85.42.200 port 42463 ssh2 Sep 6 16:30:04 NPSTNNYC01T sshd[31865]: error: maximum authentication attempts exceeded for root from 112.85.42.200 port 42463 ssh2 [preauth] Sep 6 16:30:10 NPSTNNYC01T sshd[31884]: Failed password for root from 112.85.42.200 port 2482 ssh2 ...	2020-09-07 05:05:22
54.38.55.136	attackbots	SSH login attempts.	2020-09-07 04:34:26
51.195.7.14	attack	[2020-09-06 16:45:01] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:49377' - Wrong password [2020-09-06 16:45:01] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T16:45:01.581-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4717",SessionID="0x7f2ddc39c178",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/49377",Challenge="22a4bd60",ReceivedChallenge="22a4bd60",ReceivedHash="04051dd4db43c3b2186b148fd898a2b5" [2020-09-06 16:45:07] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:49416' - Wrong password [2020-09-06 16:45:07] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T16:45:07.912-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8464",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/49416", ...	2020-09-07 04:50:42
54.37.159.45	attack	SSH login attempts.	2020-09-07 05:09:35
95.211.211.232	attackbots	CMS (WordPress or Joomla) login attempt.	2020-09-07 05:11:01
222.186.169.192	attack	Sep 6 21:02:50 instance-2 sshd[29110]: Failed password for root from 222.186.169.192 port 2698 ssh2 Sep 6 21:02:54 instance-2 sshd[29110]: Failed password for root from 222.186.169.192 port 2698 ssh2 Sep 6 21:02:59 instance-2 sshd[29110]: Failed password for root from 222.186.169.192 port 2698 ssh2 Sep 6 21:03:03 instance-2 sshd[29110]: Failed password for root from 222.186.169.192 port 2698 ssh2	2020-09-07 05:10:30
124.236.22.12	attackspambots	Too many connections or unauthorized access detected from Arctic banned ip	2020-09-07 05:07:12
102.37.12.59	attackspambots	2020-09-06T23:45:00.854638hostname sshd[25812]: Failed password for invalid user daniel from 102.37.12.59 port 1088 ssh2 2020-09-06T23:54:48.063647hostname sshd[29582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.12.59 user=root 2020-09-06T23:54:49.687627hostname sshd[29582]: Failed password for root from 102.37.12.59 port 1088 ssh2 ...	2020-09-07 05:10:44
138.197.175.236	attack	Port Scan detected from 138.197.175.236 (CA/Canada/Ontario/Markham/-). 4 hits in the last 281 seconds	2020-09-07 05:00:02
190.198.248.245	attackspambots	Unauthorised access (Sep 5) SRC=190.198.248.245 LEN=52 TTL=50 ID=28779 DF TCP DPT=445 WINDOW=8192 CWR ECE SYN	2020-09-07 04:38:19

Recently Reported IPs

119.29.86.125	119.29.85.245	119.29.86.143	119.29.83.118
119.29.86.158	119.29.86.245	119.29.86.202	119.29.82.101
119.29.87.167	119.29.87.251	117.13.174.254	119.29.88.249
119.29.89.253	119.29.9.40	119.29.9.68	119.29.92.185
119.29.92.36	119.29.90.18	119.29.92.72	119.29.93.170