Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jul 22 13:28:53 dignus sshd[25452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jul 22 13:28:55 dignus sshd[25452]: Failed password for invalid user nelson from 129.211.55.22 port 55362 ssh2
Jul 22 13:35:36 dignus sshd[26351]: Invalid user sshvpn from 129.211.55.22 port 43584
Jul 22 13:35:36 dignus sshd[26351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jul 22 13:35:38 dignus sshd[26351]: Failed password for invalid user sshvpn from 129.211.55.22 port 43584 ssh2
...
2020-07-23 04:49:58
attackspambots
Jul 20 05:50:04 h2779839 sshd[11125]: Invalid user admin from 129.211.55.22 port 45274
Jul 20 05:50:04 h2779839 sshd[11125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jul 20 05:50:04 h2779839 sshd[11125]: Invalid user admin from 129.211.55.22 port 45274
Jul 20 05:50:07 h2779839 sshd[11125]: Failed password for invalid user admin from 129.211.55.22 port 45274 ssh2
Jul 20 05:53:53 h2779839 sshd[12679]: Invalid user zxx from 129.211.55.22 port 56264
Jul 20 05:53:53 h2779839 sshd[12679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jul 20 05:53:53 h2779839 sshd[12679]: Invalid user zxx from 129.211.55.22 port 56264
Jul 20 05:53:55 h2779839 sshd[12679]: Failed password for invalid user zxx from 129.211.55.22 port 56264 ssh2
Jul 20 05:55:08 h2779839 sshd[12828]: Invalid user dekait from 129.211.55.22 port 41328
...
2020-07-20 14:25:58
attack
SSH brute force
2020-07-08 09:37:40
attack
2020-06-24T03:25:07.571936billing sshd[7465]: Failed password for invalid user cacti from 129.211.55.22 port 59016 ssh2
2020-06-24T03:32:50.749825billing sshd[24598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22  user=root
2020-06-24T03:32:52.295782billing sshd[24598]: Failed password for root from 129.211.55.22 port 57948 ssh2
...
2020-06-24 06:48:19
attack
Jun 13 06:24:00 dignus sshd[11402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22  user=root
Jun 13 06:24:02 dignus sshd[11402]: Failed password for root from 129.211.55.22 port 37314 ssh2
Jun 13 06:29:07 dignus sshd[11852]: Invalid user ts3bot1 from 129.211.55.22 port 34474
Jun 13 06:29:07 dignus sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jun 13 06:29:09 dignus sshd[11852]: Failed password for invalid user ts3bot1 from 129.211.55.22 port 34474 ssh2
...
2020-06-13 21:33:24
attackbots
Jun  9 19:10:30 itv-usvr-01 sshd[485]: Invalid user ekologia from 129.211.55.22
Jun  9 19:10:30 itv-usvr-01 sshd[485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
Jun  9 19:10:30 itv-usvr-01 sshd[485]: Invalid user ekologia from 129.211.55.22
Jun  9 19:10:32 itv-usvr-01 sshd[485]: Failed password for invalid user ekologia from 129.211.55.22 port 41942 ssh2
Jun  9 19:17:30 itv-usvr-01 sshd[813]: Invalid user cuisine from 129.211.55.22
2020-06-09 21:06:43
attackspam
$f2bV_matches
2020-06-04 02:13:43
attackspambots
May 28 14:42:13 vps sshd[1027481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22  user=root
May 28 14:42:16 vps sshd[1027481]: Failed password for root from 129.211.55.22 port 39276 ssh2
May 28 14:48:09 vps sshd[4279]: Invalid user qwert from 129.211.55.22 port 45696
May 28 14:48:09 vps sshd[4279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 28 14:48:11 vps sshd[4279]: Failed password for invalid user qwert from 129.211.55.22 port 45696 ssh2
...
2020-05-29 00:14:17
attackbots
May 25 06:07:17 vps sshd[753365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 25 06:07:19 vps sshd[753365]: Failed password for invalid user webadmin from 129.211.55.22 port 60366 ssh2
May 25 06:12:52 vps sshd[781210]: Invalid user william from 129.211.55.22 port 37204
May 25 06:12:52 vps sshd[781210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 25 06:12:54 vps sshd[781210]: Failed password for invalid user william from 129.211.55.22 port 37204 ssh2
...
2020-05-25 16:13:12
attackbots
Invalid user bpp from 129.211.55.22 port 41414
2020-05-24 06:43:24
attackspambots
May 22 20:50:01 home sshd[27425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 22 20:50:03 home sshd[27425]: Failed password for invalid user nkb from 129.211.55.22 port 55342 ssh2
May 22 20:51:28 home sshd[27648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
...
2020-05-23 03:16:29
attackbotsspam
$f2bV_matches
2020-05-22 07:16:40
attackspam
May 19 11:49:59 ns37 sshd[22449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 19 11:49:59 ns37 sshd[22449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
2020-05-20 01:10:17
attackspam
Invalid user scarab from 129.211.55.22 port 45788
2020-05-12 06:56:58
Comments on same subnet:
IP Type Details Datetime
129.211.55.6 attackspambots
Jun 17 18:29:39 srv sshd[22374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
2020-06-18 00:32:54
129.211.55.6 attack
Jun  9 13:26:35 localhost sshd[53949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6  user=root
Jun  9 13:26:37 localhost sshd[53949]: Failed password for root from 129.211.55.6 port 54728 ssh2
Jun  9 13:32:01 localhost sshd[54430]: Invalid user mjkang from 129.211.55.6 port 57610
Jun  9 13:32:01 localhost sshd[54430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
Jun  9 13:32:01 localhost sshd[54430]: Invalid user mjkang from 129.211.55.6 port 57610
Jun  9 13:32:03 localhost sshd[54430]: Failed password for invalid user mjkang from 129.211.55.6 port 57610 ssh2
...
2020-06-09 21:52:49
129.211.55.6 attack
Invalid user mv from 129.211.55.6 port 39540
2020-05-30 12:23:08
129.211.55.6 attack
May 26 17:51:27 icinga sshd[28795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6 
May 26 17:51:30 icinga sshd[28795]: Failed password for invalid user hadoop from 129.211.55.6 port 60594 ssh2
May 26 18:04:04 icinga sshd[48560]: Failed password for root from 129.211.55.6 port 38580 ssh2
...
2020-05-27 00:56:55
129.211.55.6 attackbots
May 25 06:14:36 web1 sshd[16964]: Invalid user neriishi from 129.211.55.6 port 60360
May 25 06:14:36 web1 sshd[16964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
May 25 06:14:36 web1 sshd[16964]: Invalid user neriishi from 129.211.55.6 port 60360
May 25 06:14:38 web1 sshd[16964]: Failed password for invalid user neriishi from 129.211.55.6 port 60360 ssh2
May 25 06:26:20 web1 sshd[20156]: Invalid user usuario from 129.211.55.6 port 55972
May 25 06:26:20 web1 sshd[20156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
May 25 06:26:20 web1 sshd[20156]: Invalid user usuario from 129.211.55.6 port 55972
May 25 06:26:22 web1 sshd[20156]: Failed password for invalid user usuario from 129.211.55.6 port 55972 ssh2
May 25 06:31:59 web1 sshd[21554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6  user=root
May 25 06:32:01 web1 sshd[2
...
2020-05-25 04:54:04
129.211.55.6 attackspambots
Observed on multiple hosts.
2020-05-05 10:44:12
129.211.55.6 attack
Apr 28 15:33:30 PorscheCustomer sshd[15511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
Apr 28 15:33:32 PorscheCustomer sshd[15511]: Failed password for invalid user terry from 129.211.55.6 port 46516 ssh2
Apr 28 15:36:39 PorscheCustomer sshd[15704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
...
2020-04-28 22:30:50
129.211.55.124 attackbotsspam
SSH bruteforce
2020-04-21 05:16:31
129.211.55.6 attack
$f2bV_matches
2020-04-20 13:30:01
129.211.55.6 attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-04-13 16:26:47
129.211.55.6 attack
Apr  5 12:31:10 dev0-dcde-rnet sshd[1423]: Failed password for root from 129.211.55.6 port 59980 ssh2
Apr  5 12:35:29 dev0-dcde-rnet sshd[1447]: Failed password for root from 129.211.55.6 port 52648 ssh2
2020-04-05 20:32:01
129.211.55.6 attack
Apr  4 11:28:35 minden010 sshd[11475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
Apr  4 11:28:37 minden010 sshd[11475]: Failed password for invalid user caizekun from 129.211.55.6 port 56950 ssh2
Apr  4 11:34:54 minden010 sshd[14532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
...
2020-04-04 19:38:21
129.211.55.6 attackbots
Mar 29 09:44:47 ws19vmsma01 sshd[106542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
Mar 29 09:44:49 ws19vmsma01 sshd[106542]: Failed password for invalid user dgm from 129.211.55.6 port 52466 ssh2
...
2020-03-30 02:01:53
129.211.55.6 attackbotsspam
$f2bV_matches
2020-03-29 10:03:36
129.211.55.6 attackspambots
Mar 28 17:54:18 legacy sshd[319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
Mar 28 17:54:20 legacy sshd[319]: Failed password for invalid user ybe from 129.211.55.6 port 34018 ssh2
Mar 28 17:59:12 legacy sshd[480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.6
...
2020-03-29 01:05:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.211.55.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62476
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.211.55.22.			IN	A

;; AUTHORITY SECTION:
.			325	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051101 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 06:56:54 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 22.55.211.129.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.55.211.129.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
96.70.52.227 attack
proto=tcp  .  spt=50635  .  dpt=25  .     (Found on   Dark List de Dec 17)     (355)
2019-12-17 21:08:21
170.254.248.61 attackspambots
email spam
2019-12-17 21:30:52
65.75.93.36 attack
Dec 16 18:08:01 serwer sshd\[15153\]: Invalid user kylie from 65.75.93.36 port 40425
Dec 16 18:08:01 serwer sshd\[15153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.75.93.36
Dec 16 18:08:03 serwer sshd\[15153\]: Failed password for invalid user kylie from 65.75.93.36 port 40425 ssh2
Dec 16 18:15:05 serwer sshd\[16163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.75.93.36  user=root
Dec 16 18:15:07 serwer sshd\[16163\]: Failed password for root from 65.75.93.36 port 22464 ssh2
Dec 16 18:20:55 serwer sshd\[16791\]: Invalid user nagios from 65.75.93.36 port 19304
Dec 16 18:20:55 serwer sshd\[16791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.75.93.36
Dec 16 18:20:58 serwer sshd\[16791\]: Failed password for invalid user nagios from 65.75.93.36 port 19304 ssh2
Dec 16 18:26:46 serwer sshd\[17770\]: pam_unix\(sshd:auth\): authentication fa
...
2019-12-17 21:13:57
78.36.202.254 attackspambots
email spam
2019-12-17 21:44:05
103.69.20.43 attack
email spam
2019-12-17 21:38:03
101.100.177.165 attackbots
email spam
2019-12-17 21:08:04
181.52.240.91 attack
2019-12-17 07:11:20 H=(static-ip-18152024091.cable.net.co) [181.52.240.91]:35815 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-12-17 07:13:07 H=(static-ip-18152024091.cable.net.co) [181.52.240.91]:38466 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-12-17 07:13:09 H=(static-ip-18152024091.cable.net.co) [181.52.240.91]:38466 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-12-17 21:28:51
150.107.103.159 attackbotsspam
postfix
2019-12-17 21:32:53
41.215.60.126 attack
email spam
2019-12-17 21:16:43
92.255.248.230 attackbotsspam
proto=tcp  .  spt=58146  .  dpt=25  .     (Found on   Dark List de Dec 17)     (364)
2019-12-17 21:38:54
188.243.58.75 attackbotsspam
proto=tcp  .  spt=53821  .  dpt=25  .     (Found on   Dark List de Dec 17)     (264)
2019-12-17 21:23:16
41.160.6.186 attack
Minecraft server DDoS attack/proxy
2019-12-17 21:17:18
119.18.153.154 attackbots
email spam
2019-12-17 21:35:41
85.238.101.59 attackbots
email spam
2019-12-17 21:41:30
46.172.223.250 attackbots
email spam
2019-12-17 21:46:06

Recently Reported IPs

80.113.109.112 231.147.160.7 19.17.96.202 10.88.184.104
134.255.34.27 161.18.252.147 212.51.196.182 222.212.170.85
95.55.123.170 97.89.70.127 113.245.9.121 176.37.48.27
45.192.195.15 121.135.5.221 14.144.12.157 87.8.233.134
90.248.55.116 88.236.224.234 164.148.57.35 51.77.197.189