Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shenzhen Yunjie Network Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
445/tcp
[2019-07-20]1pkt
2019-07-20 22:14:26
Comments on same subnet:
IP Type Details Datetime
157.119.29.6 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-03 08:11:18
157.119.29.20 attackspambots
02/14/2020-08:45:55.864244 157.119.29.20 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-02-15 04:37:15
157.119.29.26 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-11 07:14:26
157.119.29.20 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-08 15:41:35
157.119.29.11 attackbots
01/09/2020-02:16:05.077262 157.119.29.11 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-01-09 19:08:35
157.119.29.20 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-24 04:48:09
157.119.29.20 attackspam
Unauthorised access (Dec  3) SRC=157.119.29.20 LEN=40 TTL=237 ID=50730 TCP DPT=445 WINDOW=1024 SYN
2019-12-04 01:25:17
157.119.29.40 attack
1433/tcp 445/tcp...
[2019-10-06/12-02]13pkt,2pt.(tcp)
2019-12-02 18:54:25
157.119.29.20 attack
SMB Server BruteForce Attack
2019-11-18 14:17:55
157.119.29.26 attackspambots
Unauthorised access (Nov  9) SRC=157.119.29.26 LEN=40 TTL=240 ID=3338 TCP DPT=1433 WINDOW=1024 SYN
2019-11-10 07:16:36
157.119.29.22 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-10-16 20:11:04
157.119.29.26 attackspam
firewall-block, port(s): 1433/tcp
2019-10-13 16:28:02
157.119.29.13 attackbots
Unauthorised access (Sep 17) SRC=157.119.29.13 LEN=40 TOS=0x10 PREC=0x40 TTL=237 ID=42963 TCP DPT=445 WINDOW=1024 SYN
2019-09-17 14:04:17
157.119.29.22 attack
Scanning random ports - tries to find possible vulnerable services
2019-09-01 16:28:46
157.119.29.22 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2019-08-06 11:35:34
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.119.29.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18067
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.119.29.2.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072000 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 20 22:14:11 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 2.29.119.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 2.29.119.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
183.129.216.58 attack
Invalid user uy from 183.129.216.58 port 2359
2020-04-20 03:01:50
116.228.37.90 attackbotsspam
Apr 19 18:48:02 vps58358 sshd\[25221\]: Invalid user 2011 from 116.228.37.90Apr 19 18:48:02 vps58358 sshd\[25222\]: Invalid user 2011 from 116.228.37.90Apr 19 18:48:04 vps58358 sshd\[25221\]: Failed password for invalid user 2011 from 116.228.37.90 port 53800 ssh2Apr 19 18:48:04 vps58358 sshd\[25222\]: Failed password for invalid user 2011 from 116.228.37.90 port 53802 ssh2Apr 19 18:52:28 vps58358 sshd\[25307\]: Invalid user support22 from 116.228.37.90Apr 19 18:52:28 vps58358 sshd\[25308\]: Invalid user support22 from 116.228.37.90
...
2020-04-20 02:46:47
106.12.9.10 attackspambots
srv02 Mass scanning activity detected Target: 4735  ..
2020-04-20 02:51:52
51.91.212.81 attackbots
Apr 19 20:31:23 debian-2gb-nbg1-2 kernel: \[9580049.157032\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.91.212.81 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=60307 DPT=10161 WINDOW=65535 RES=0x00 SYN URGP=0
2020-04-20 02:32:40
119.28.104.62 attackspambots
2020-04-19T11:55:14.748420shield sshd\[9211\]: Invalid user ubuntu from 119.28.104.62 port 36858
2020-04-19T11:55:14.752495shield sshd\[9211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.104.62
2020-04-19T11:55:16.865435shield sshd\[9211\]: Failed password for invalid user ubuntu from 119.28.104.62 port 36858 ssh2
2020-04-19T11:59:53.598515shield sshd\[10323\]: Invalid user wo from 119.28.104.62 port 55936
2020-04-19T11:59:53.602226shield sshd\[10323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.104.62
2020-04-20 02:29:45
77.42.96.93 attackspambots
Unauthorized connection attempt detected from IP address 77.42.96.93 to port 23
2020-04-20 02:56:09
59.188.2.30 attack
Apr 16 19:15:13 lock-38 sshd[1088434]: Failed password for invalid user firefart from 59.188.2.30 port 50352 ssh2
Apr 16 19:18:59 lock-38 sshd[1088542]: Invalid user se from 59.188.2.30 port 46239
Apr 16 19:18:59 lock-38 sshd[1088542]: Invalid user se from 59.188.2.30 port 46239
Apr 16 19:18:59 lock-38 sshd[1088542]: Failed password for invalid user se from 59.188.2.30 port 46239 ssh2
Apr 16 19:20:51 lock-38 sshd[1088611]: Failed password for root from 59.188.2.30 port 60803 ssh2
...
2020-04-20 02:32:06
162.243.129.90 attack
firewall-block, port(s): 5631/tcp
2020-04-20 02:52:39
139.59.59.207 attackspam
SSH/22 MH Probe, BF, Hack -
2020-04-20 03:06:17
142.93.195.15 attackspam
(sshd) Failed SSH login from 142.93.195.15 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 19 20:21:07 amsweb01 sshd[27992]: Invalid user ubuntu from 142.93.195.15 port 49950
Apr 19 20:21:09 amsweb01 sshd[27992]: Failed password for invalid user ubuntu from 142.93.195.15 port 49950 ssh2
Apr 19 20:25:48 amsweb01 sshd[28733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.15  user=root
Apr 19 20:25:50 amsweb01 sshd[28733]: Failed password for root from 142.93.195.15 port 53362 ssh2
Apr 19 20:29:46 amsweb01 sshd[29179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.15  user=root
2020-04-20 02:36:11
195.69.222.169 attackbots
Triggered by Fail2Ban at Ares web server
2020-04-20 03:00:21
164.68.110.24 attack
Apr 19 19:56:40 host5 sshd[9351]: Invalid user up from 164.68.110.24 port 55514
...
2020-04-20 03:03:47
62.24.104.71 attack
2020-04-19 01:12:46 server sshd[87282]: Failed password for invalid user admin from 62.24.104.71 port 56146 ssh2
2020-04-20 02:40:27
152.168.137.2 attackbotsspam
Apr 19 20:34:41 meumeu sshd[20086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 
Apr 19 20:34:43 meumeu sshd[20086]: Failed password for invalid user tester from 152.168.137.2 port 56532 ssh2
Apr 19 20:41:48 meumeu sshd[21152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 
...
2020-04-20 02:46:00
186.91.205.203 attack
DATE:2020-04-19 13:59:37, IP:186.91.205.203, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)
2020-04-20 02:37:54

Recently Reported IPs

207.180.164.143 175.2.194.159 123.16.76.39 57.42.85.118
9.111.201.209 197.201.153.139 46.58.111.122 46.101.242.66
204.176.169.72 216.148.100.230 37.52.148.178 161.142.162.144
81.217.50.221 104.236.95.191 54.68.216.105 185.216.32.211
37.120.150.134 109.184.164.26 105.247.109.72 213.149.62.57