Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Jun 23 23:36:10 meumeu sshd[1269142]: Invalid user query from 14.29.145.11 port 48700
Jun 23 23:36:10 meumeu sshd[1269142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11 
Jun 23 23:36:10 meumeu sshd[1269142]: Invalid user query from 14.29.145.11 port 48700
Jun 23 23:36:11 meumeu sshd[1269142]: Failed password for invalid user query from 14.29.145.11 port 48700 ssh2
Jun 23 23:40:03 meumeu sshd[1269369]: Invalid user ubuntu from 14.29.145.11 port 41412
Jun 23 23:40:03 meumeu sshd[1269369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11 
Jun 23 23:40:03 meumeu sshd[1269369]: Invalid user ubuntu from 14.29.145.11 port 41412
Jun 23 23:40:05 meumeu sshd[1269369]: Failed password for invalid user ubuntu from 14.29.145.11 port 41412 ssh2
Jun 23 23:43:54 meumeu sshd[1269597]: Invalid user ubuntu from 14.29.145.11 port 34120
...
2020-06-24 06:13:12
attackspam
$f2bV_matches
2020-06-23 08:29:27
attack
Jun 13 21:09:30 scw-6657dc sshd[17831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
Jun 13 21:09:30 scw-6657dc sshd[17831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
Jun 13 21:09:33 scw-6657dc sshd[17831]: Failed password for invalid user michelle from 14.29.145.11 port 58558 ssh2
...
2020-06-14 05:29:13
attackspam
May 31 05:42:07 h2646465 sshd[9318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May 31 05:42:09 h2646465 sshd[9318]: Failed password for root from 14.29.145.11 port 41454 ssh2
May 31 05:45:59 h2646465 sshd[9647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May 31 05:46:01 h2646465 sshd[9647]: Failed password for root from 14.29.145.11 port 59278 ssh2
May 31 05:49:21 h2646465 sshd[9872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May 31 05:49:22 h2646465 sshd[9872]: Failed password for root from 14.29.145.11 port 46480 ssh2
May 31 05:52:35 h2646465 sshd[10126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May 31 05:52:37 h2646465 sshd[10126]: Failed password for root from 14.29.145.11 port 33677 ssh2
May 31 05:55:47 h2646465 sshd[10370]: Inva
2020-05-31 13:21:35
attack
2020-05-22T06:58:00.572863vps773228.ovh.net sshd[22696]: Failed password for invalid user cfc from 14.29.145.11 port 46534 ssh2
2020-05-22T07:02:12.806157vps773228.ovh.net sshd[22725]: Invalid user cwang from 14.29.145.11 port 39383
2020-05-22T07:02:12.821638vps773228.ovh.net sshd[22725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
2020-05-22T07:02:12.806157vps773228.ovh.net sshd[22725]: Invalid user cwang from 14.29.145.11 port 39383
2020-05-22T07:02:14.563954vps773228.ovh.net sshd[22725]: Failed password for invalid user cwang from 14.29.145.11 port 39383 ssh2
...
2020-05-22 14:10:30
attackspambots
May 15 07:15:30 eventyay sshd[12618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
May 15 07:15:32 eventyay sshd[12618]: Failed password for invalid user wwwtest from 14.29.145.11 port 40135 ssh2
May 15 07:17:26 eventyay sshd[12658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
...
2020-05-15 13:31:14
attackbotsspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-05-09 18:00:59
attackspambots
May  7 05:35:13 ns392434 sshd[1499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May  7 05:35:15 ns392434 sshd[1499]: Failed password for root from 14.29.145.11 port 46447 ssh2
May  7 05:44:06 ns392434 sshd[1933]: Invalid user virginia from 14.29.145.11 port 34354
May  7 05:44:06 ns392434 sshd[1933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11
May  7 05:44:06 ns392434 sshd[1933]: Invalid user virginia from 14.29.145.11 port 34354
May  7 05:44:07 ns392434 sshd[1933]: Failed password for invalid user virginia from 14.29.145.11 port 34354 ssh2
May  7 05:48:54 ns392434 sshd[1976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.11  user=root
May  7 05:48:56 ns392434 sshd[1976]: Failed password for root from 14.29.145.11 port 58748 ssh2
May  7 05:53:48 ns392434 sshd[2172]: Invalid user usuario from 14.29.145.11 port 54908
2020-05-07 15:31:19
attackspam
$f2bV_matches
2020-04-06 07:25:21
attackbots
Unauthorized SSH login attempts
2020-03-29 05:14:50
Comments on same subnet:
IP Type Details Datetime
14.29.145.27 attackspambots
Unauthorized connection attempt detected from IP address 14.29.145.27 to port 2220 [J]
2020-02-03 00:36:06
14.29.145.27 attackspambots
Unauthorized connection attempt detected from IP address 14.29.145.27 to port 2220 [J]
2020-01-29 21:46:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.29.145.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51532
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.29.145.11.			IN	A

;; AUTHORITY SECTION:
.			512	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032802 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 29 05:14:47 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 11.145.29.14.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 11.145.29.14.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
156.210.145.189 attack
52869/tcp
[2020-01-29]1pkt
2020-01-30 03:25:04
180.76.108.151 attackbotsspam
Unauthorized connection attempt detected from IP address 180.76.108.151 to port 2220 [J]
2020-01-30 03:35:10
197.253.232.129 attackspambots
2019-11-24 21:35:15 1iYybB-0006nG-4W SMTP connection from \(\[197.253.215.210\]\) \[197.253.232.129\]:56216 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 21:35:21 1iYybH-0006nT-G7 SMTP connection from \(\[197.253.215.210\]\) \[197.253.232.129\]:46639 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 21:35:22 1iYybK-0006nU-5i SMTP connection from \(\[197.253.215.210\]\) \[197.253.232.129\]:5508 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 03:45:46
103.9.227.170 attackspambots
Honeypot attack, port: 445, PTR: sijoli-170-227-9.jatengprov.go.id.
2020-01-30 03:17:53
125.161.128.219 attackbots
1433/tcp
[2020-01-29]1pkt
2020-01-30 03:46:18
50.239.143.6 attack
Unauthorized connection attempt detected from IP address 50.239.143.6 to port 2220 [J]
2020-01-30 03:41:36
62.231.7.221 attackbotsspam
Jan 29 19:15:31 nginx sshd[3984]: Connection from 62.231.7.221 port 53382 on 10.23.102.80 port 22
Jan 29 19:15:31 nginx sshd[3984]: Received disconnect from 62.231.7.221 port 53382:11: Bye Bye [preauth]
2020-01-30 03:41:16
208.117.55.132 attackbots
From: 	GEO-Real Company Add enquiry09@realtyagent.com to my Address Book
2020-01-30 03:20:08
37.29.79.178 attackbotsspam
Unauthorized connection attempt from IP address 37.29.79.178 on Port 445(SMB)
2020-01-30 03:33:36
197.26.40.191 attack
2019-03-15 10:55:08 H=\(\[197.26.40.191\]\) \[197.26.40.191\]:42439 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-15 10:55:28 H=\(\[197.26.40.191\]\) \[197.26.40.191\]:42684 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-15 10:55:36 H=\(\[197.26.40.191\]\) \[197.26.40.191\]:42787 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-30 03:37:38
49.37.130.177 attackspam
445/tcp
[2020-01-29]1pkt
2020-01-30 03:41:53
182.232.114.226 attack
Unauthorized connection attempt from IP address 182.232.114.226 on Port 445(SMB)
2020-01-30 03:40:53
45.80.65.1 attackspam
Unauthorized connection attempt detected from IP address 45.80.65.1 to port 2220 [J]
2020-01-30 03:30:26
197.26.32.124 attackspam
2019-11-24 19:34:01 1iYwhr-0003FA-Tg SMTP connection from \(\[197.26.32.124\]\) \[197.26.32.124\]:11554 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 19:34:06 1iYwhx-0003FR-75 SMTP connection from \(\[197.26.32.124\]\) \[197.26.32.124\]:11606 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-11-24 19:34:11 1iYwi1-0003FX-R1 SMTP connection from \(\[197.26.32.124\]\) \[197.26.32.124\]:11644 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2020-01-30 03:38:47
202.163.105.185 attack
Unauthorized connection attempt from IP address 202.163.105.185 on Port 445(SMB)
2020-01-30 03:23:39

Recently Reported IPs

200.162.131.62 179.160.200.68 13.127.121.55 97.99.220.128
84.251.24.127 173.0.84.228 74.80.59.104 74.88.221.235
43.231.68.205 221.140.92.206 62.38.243.10 87.231.189.55
179.228.207.8 100.179.172.174 154.254.225.123 5.235.203.94
202.159.151.75 59.171.31.58 65.30.158.231 71.170.93.81