City: unknown
Region: Guangdong
Country: China
Internet Service Provider: China Telecom
Hostname: unknown
Organization: China Telecom (Group)
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.29.164.137 | attackspam | 2020-06-03T09:49:50.732186vps751288.ovh.net sshd\[28047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 user=root 2020-06-03T09:49:52.511657vps751288.ovh.net sshd\[28047\]: Failed password for root from 14.29.164.137 port 46974 ssh2 2020-06-03T09:53:51.443787vps751288.ovh.net sshd\[28079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 user=root 2020-06-03T09:53:53.975705vps751288.ovh.net sshd\[28079\]: Failed password for root from 14.29.164.137 port 60650 ssh2 2020-06-03T09:57:56.828304vps751288.ovh.net sshd\[28101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 user=root |
2020-06-03 19:41:45 |
| 14.29.164.137 | attackbotsspam | Apr 21 03:53:17 webhost01 sshd[28775]: Failed password for root from 14.29.164.137 port 35303 ssh2 Apr 21 04:01:39 webhost01 sshd[28913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 ... |
2020-04-21 05:51:31 |
| 14.29.164.137 | attackspambots | Apr 15 01:15:31 NPSTNNYC01T sshd[23164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Apr 15 01:15:33 NPSTNNYC01T sshd[23164]: Failed password for invalid user elemental from 14.29.164.137 port 36929 ssh2 Apr 15 01:16:54 NPSTNNYC01T sshd[23369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 ... |
2020-04-15 14:17:03 |
| 14.29.164.137 | attack | $lgm |
2020-04-10 13:44:55 |
| 14.29.164.137 | attackspam | Apr 9 15:00:07 [host] sshd[11506]: Invalid user d Apr 9 15:00:07 [host] sshd[11506]: pam_unix(sshd: Apr 9 15:00:10 [host] sshd[11506]: Failed passwor |
2020-04-10 02:12:04 |
| 14.29.164.137 | attack | prod6 ... |
2020-04-09 06:26:59 |
| 14.29.164.137 | attackspam | Mar 29 14:53:50 legacy sshd[1919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Mar 29 14:53:52 legacy sshd[1919]: Failed password for invalid user gil from 14.29.164.137 port 40688 ssh2 Mar 29 14:59:32 legacy sshd[2091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 ... |
2020-03-30 03:49:08 |
| 14.29.164.137 | attack | Invalid user djg from 14.29.164.137 port 57544 |
2020-03-29 00:55:03 |
| 14.29.164.137 | attack | Mar 11 21:18:19 nextcloud sshd\[16367\]: Invalid user 12345678 from 14.29.164.137 Mar 11 21:18:19 nextcloud sshd\[16367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Mar 11 21:18:20 nextcloud sshd\[16367\]: Failed password for invalid user 12345678 from 14.29.164.137 port 46711 ssh2 |
2020-03-12 04:39:16 |
| 14.29.164.137 | attackbots | k+ssh-bruteforce |
2020-03-11 15:07:27 |
| 14.29.164.137 | attackspambots | Feb 13 05:55:21 MK-Soft-VM8 sshd[12526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Feb 13 05:55:23 MK-Soft-VM8 sshd[12526]: Failed password for invalid user benjamin from 14.29.164.137 port 43510 ssh2 ... |
2020-02-13 13:08:21 |
| 14.29.164.137 | attackspam | Feb 10 05:08:50 firewall sshd[32324]: Invalid user jrw from 14.29.164.137 Feb 10 05:08:52 firewall sshd[32324]: Failed password for invalid user jrw from 14.29.164.137 port 52450 ssh2 Feb 10 05:13:39 firewall sshd[32470]: Invalid user xnl from 14.29.164.137 ... |
2020-02-10 16:23:24 |
| 14.29.164.137 | attack | Jan 30 23:40:12 SilenceServices sshd[27408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 Jan 30 23:40:14 SilenceServices sshd[27408]: Failed password for invalid user kanchan from 14.29.164.137 port 44904 ssh2 Jan 30 23:49:36 SilenceServices sshd[24629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.164.137 |
2020-01-31 06:58:35 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.29.164.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31276
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.29.164.51. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061300 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 18:11:11 CST 2019
;; MSG SIZE rcvd: 116
Host 51.164.29.14.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 51.164.29.14.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.187.96.240 | attack | 1600621121 - 09/20/2020 18:58:41 Host: 185.187.96.240/185.187.96.240 Port: 22 TCP Blocked |
2020-09-21 18:14:47 |
| 200.38.232.248 | attackbots | scan for /wp-config.bak |
2020-09-21 17:54:21 |
| 89.248.160.139 | attackspam |
|
2020-09-21 17:51:56 |
| 35.189.172.158 | attack | Sep 21 11:27:48 pornomens sshd\[24527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.189.172.158 user=root Sep 21 11:27:51 pornomens sshd\[24527\]: Failed password for root from 35.189.172.158 port 57588 ssh2 Sep 21 11:37:59 pornomens sshd\[24669\]: Invalid user komatsu from 35.189.172.158 port 46818 Sep 21 11:37:59 pornomens sshd\[24669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.189.172.158 ... |
2020-09-21 18:01:29 |
| 171.7.65.96 | attackbotsspam | Sep 21 11:33:23 plg sshd[26601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.7.65.96 Sep 21 11:33:25 plg sshd[26601]: Failed password for invalid user test from 171.7.65.96 port 7282 ssh2 Sep 21 11:35:42 plg sshd[26650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.7.65.96 user=root Sep 21 11:35:45 plg sshd[26650]: Failed password for invalid user root from 171.7.65.96 port 7194 ssh2 Sep 21 11:38:03 plg sshd[26698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.7.65.96 Sep 21 11:38:05 plg sshd[26698]: Failed password for invalid user postgres from 171.7.65.96 port 55030 ssh2 ... |
2020-09-21 18:04:17 |
| 202.38.153.233 | attackbotsspam | Sep 20 21:46:17 propaganda sshd[28905]: Connection from 202.38.153.233 port 33528 on 10.0.0.161 port 22 rdomain "" Sep 20 21:46:17 propaganda sshd[28905]: Connection closed by 202.38.153.233 port 33528 [preauth] |
2020-09-21 18:07:30 |
| 113.20.99.51 | attack | Listed on zen-spamhaus also barracudaCentral / proto=6 . srcport=47840 . dstport=445 . (2299) |
2020-09-21 18:13:21 |
| 191.232.195.8 | attackbots | Sep 21 12:22:11 journals sshd\[78593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.195.8 user=root Sep 21 12:22:13 journals sshd\[78593\]: Failed password for root from 191.232.195.8 port 51376 ssh2 Sep 21 12:27:10 journals sshd\[79164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.195.8 user=root Sep 21 12:27:12 journals sshd\[79164\]: Failed password for root from 191.232.195.8 port 34662 ssh2 Sep 21 12:32:04 journals sshd\[79940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.195.8 user=root ... |
2020-09-21 17:46:41 |
| 180.76.165.58 | attackspam | 2020-09-21T03:34:23.238017linuxbox-skyline sshd[49779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.165.58 user=root 2020-09-21T03:34:24.530293linuxbox-skyline sshd[49779]: Failed password for root from 180.76.165.58 port 49012 ssh2 ... |
2020-09-21 17:34:33 |
| 192.241.141.162 | attackbotsspam | 192.241.141.162 - - \[21/Sep/2020:11:21:47 +0200\] "POST /wp-login.php HTTP/1.0" 200 8395 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 192.241.141.162 - - \[21/Sep/2020:11:21:49 +0200\] "POST /wp-login.php HTTP/1.0" 200 8195 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 192.241.141.162 - - \[21/Sep/2020:11:21:50 +0200\] "POST /wp-login.php HTTP/1.0" 200 8211 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-09-21 17:51:24 |
| 68.183.96.194 | attackbots | 2020-09-20 UTC: (31x) - admin,deploy,ftp,ftpadmin,guest,hadoop,jira,prueba,root(17x),test,test123,ubuntu,user,www(2x) |
2020-09-21 17:48:01 |
| 46.101.165.62 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 17233 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-21 17:40:36 |
| 103.98.16.135 | attackspam | Sep 21 11:24:44 xeon sshd[2825]: Failed password for invalid user admin from 103.98.16.135 port 56020 ssh2 |
2020-09-21 18:04:32 |
| 159.203.85.196 | attackbotsspam | DATE:2020-09-21 11:45:29, IP:159.203.85.196, PORT:ssh SSH brute force auth (docker-dc) |
2020-09-21 18:12:47 |
| 106.54.217.12 | attackspambots | Failed password for root from 106.54.217.12 port 44898 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12 user=root Failed password for root from 106.54.217.12 port 44324 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12 user=root Failed password for root from 106.54.217.12 port 43744 ssh2 |
2020-09-21 18:12:29 |