Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Santiago de Cali

Region: Departamento del Valle del Cauca

Country: Colombia

Internet Service Provider: Emcali - Rangos Fijos PPPoE

Hostname: unknown

Organization: EMPRESAS MUNICIPALES DE CALI E.I.C.E. E.S.P.

Usage Type: unknown

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 200.29.108.214 to port 2220 [J]
2020-01-26 06:49:29
attackspam
Unauthorized connection attempt detected from IP address 200.29.108.214 to port 2220 [J]
2020-01-14 20:34:52
attackspam
Jan  2 01:39:12 server sshd\[11921\]: Invalid user zbigniew from 200.29.108.214
Jan  2 01:39:12 server sshd\[11921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co 
Jan  2 01:39:14 server sshd\[11921\]: Failed password for invalid user zbigniew from 200.29.108.214 port 46753 ssh2
Jan  2 01:51:41 server sshd\[14597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co  user=operator
Jan  2 01:51:43 server sshd\[14597\]: Failed password for operator from 200.29.108.214 port 25633 ssh2
...
2020-01-02 08:52:07
attackbotsspam
Dec  9 03:48:32 ny01 sshd[25863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Dec  9 03:48:34 ny01 sshd[25863]: Failed password for invalid user gaile from 200.29.108.214 port 36513 ssh2
Dec  9 03:55:18 ny01 sshd[26996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
2019-12-09 17:15:16
attackspambots
2019-12-05T09:32:15.301687abusebot-5.cloudsearch.cf sshd\[8354\]: Invalid user www from 200.29.108.214 port 23873
2019-12-05 17:57:40
attack
Nov 15 17:02:17 legacy sshd[3044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Nov 15 17:02:20 legacy sshd[3044]: Failed password for invalid user kongxx from 200.29.108.214 port 50497 ssh2
Nov 15 17:06:44 legacy sshd[3143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
...
2019-11-16 05:23:46
attack
Nov 12 09:03:33 meumeu sshd[5153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214 
Nov 12 09:03:35 meumeu sshd[5153]: Failed password for invalid user leavelle from 200.29.108.214 port 22497 ssh2
Nov 12 09:07:42 meumeu sshd[5599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214 
...
2019-11-12 18:27:45
attackbots
ssh failed login
2019-11-12 02:38:23
attack
Nov  6 02:52:18 php1 sshd\[12952\]: Invalid user 123 from 200.29.108.214
Nov  6 02:52:18 php1 sshd\[12952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co
Nov  6 02:52:21 php1 sshd\[12952\]: Failed password for invalid user 123 from 200.29.108.214 port 40065 ssh2
Nov  6 02:56:46 php1 sshd\[13452\]: Invalid user adM1N123 from 200.29.108.214
Nov  6 02:56:46 php1 sshd\[13452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co
2019-11-06 21:30:35
attackbots
2019-10-31T06:32:38.903368abusebot.cloudsearch.cf sshd\[29009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co  user=root
2019-10-31 18:47:27
attackbotsspam
2019-10-30T20:29:45.121666abusebot-8.cloudsearch.cf sshd\[25671\]: Invalid user ahmed2010 from 200.29.108.214 port 22305
2019-10-31 04:41:59
attackspambots
2019-10-02T19:16:53.306157abusebot-8.cloudsearch.cf sshd\[16265\]: Invalid user user from 200.29.108.214 port 12641
2019-10-03 03:29:19
attackspambots
Sep 10 01:36:46 hcbbdb sshd\[22366\]: Invalid user zabbix from 200.29.108.214
Sep 10 01:36:46 hcbbdb sshd\[22366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co
Sep 10 01:36:48 hcbbdb sshd\[22366\]: Failed password for invalid user zabbix from 200.29.108.214 port 46690 ssh2
Sep 10 01:43:32 hcbbdb sshd\[23116\]: Invalid user admin from 200.29.108.214
Sep 10 01:43:32 hcbbdb sshd\[23116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=selvamotor.emcali.net.co
2019-09-10 10:00:45
attackspam
Sep  1 22:07:16 web1 sshd\[23087\]: Invalid user filippid_admin from 200.29.108.214
Sep  1 22:07:16 web1 sshd\[23087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Sep  1 22:07:18 web1 sshd\[23087\]: Failed password for invalid user filippid_admin from 200.29.108.214 port 24065 ssh2
Sep  1 22:12:01 web1 sshd\[23553\]: Invalid user raissa from 200.29.108.214
Sep  1 22:12:01 web1 sshd\[23553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
2019-09-02 16:25:24
attackbotsspam
Aug 30 01:07:37 ns41 sshd[23918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Aug 30 01:07:39 ns41 sshd[23918]: Failed password for invalid user noi from 200.29.108.214 port 4449 ssh2
2019-08-30 07:49:47
attackspambots
Automatic report - Banned IP Access
2019-08-26 02:41:18
attackspambots
Aug 21 16:59:48 ny01 sshd[24398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Aug 21 16:59:50 ny01 sshd[24398]: Failed password for invalid user ubuntu from 200.29.108.214 port 52737 ssh2
Aug 21 17:04:28 ny01 sshd[24854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
2019-08-22 05:21:05
attackspambots
Aug 18 21:28:15 plusreed sshd[6288]: Invalid user damares from 200.29.108.214
...
2019-08-19 15:06:14
attackspambots
Aug  7 11:10:21 MK-Soft-VM7 sshd\[5133\]: Invalid user baker from 200.29.108.214 port 46241
Aug  7 11:10:21 MK-Soft-VM7 sshd\[5133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214
Aug  7 11:10:23 MK-Soft-VM7 sshd\[5133\]: Failed password for invalid user baker from 200.29.108.214 port 46241 ssh2
...
2019-08-07 19:46:16
attack
Jul 26 20:31:20 rpi sshd[15001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.108.214 
Jul 26 20:31:22 rpi sshd[15001]: Failed password for invalid user info from 200.29.108.214 port 16673 ssh2
2019-07-27 02:40:07
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.29.108.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10199
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.29.108.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072601 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 27 02:40:01 CST 2019
;; MSG SIZE  rcvd: 118
Host info
214.108.29.200.in-addr.arpa domain name pointer selvamotor.emcali.net.co.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
214.108.29.200.in-addr.arpa	name = selvamotor.emcali.net.co.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
220.255.237.149 attackbotsspam
Honeypot hit.
2019-11-21 01:05:23
128.75.170.151 attack
DATE:2019-11-20 15:44:43, IP:128.75.170.151, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-11-21 01:02:42
84.17.47.44 attackspambots
(From rodgerTew@outlook.com) Local Business Citations are powerful ranking tools for any local business. But Not All Business Citations are created equal. Get Top Local Citations for your business that will help you get higher Local Rank and also increase your local visibility in your area. You will get 1500 Quality Back Links from citation sites to increase the position of your business in local search. 
 
More info: 
https://www.monkeydigital.co/product/google-maps-citations/ 
 
thanks and regards 
Monkey Digital Team 
support@monkeydigital.co
2019-11-21 01:27:42
186.156.177.115 attack
Nov 20 16:57:39 localhost sshd\[21198\]: Invalid user ishimaru from 186.156.177.115 port 40446
Nov 20 16:57:39 localhost sshd\[21198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.156.177.115
Nov 20 16:57:40 localhost sshd\[21198\]: Failed password for invalid user ishimaru from 186.156.177.115 port 40446 ssh2
2019-11-21 01:41:37
157.55.39.95 attackbotsspam
Joomla User : try to access forms...
2019-11-21 01:36:08
122.51.78.154 attackbots
Nov 20 22:35:24 areeb-Workstation sshd[3738]: Failed password for root from 122.51.78.154 port 48454 ssh2
Nov 20 22:39:25 areeb-Workstation sshd[4570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.78.154
...
2019-11-21 01:28:56
93.119.178.174 attack
Nov 20 17:52:23 v22019058497090703 sshd[7285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.119.178.174
Nov 20 17:52:24 v22019058497090703 sshd[7285]: Failed password for invalid user lefforge from 93.119.178.174 port 41420 ssh2
Nov 20 17:56:29 v22019058497090703 sshd[8500]: Failed password for root from 93.119.178.174 port 59492 ssh2
...
2019-11-21 01:30:51
113.167.142.86 attack
2019-11-20 14:37:06 H=(static.vnpt.vn) [113.167.142.86]:13068 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=113.167.142.86)
2019-11-20 14:37:07 unexpected disconnection while reading SMTP command from (static.vnpt.vn) [113.167.142.86]:13068 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:34:01 H=(static.vnpt.vn) [113.167.142.86]:26393 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=113.167.142.86)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.167.142.86
2019-11-21 01:06:19
103.42.216.107 attackbotsspam
2019-11-20 15:03:22 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)
2019-11-20 15:03:23 unexpected disconnection while reading SMTP command from (103-42-216-107.fmgmyanmar.com) [103.42.216.107]:63629 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:36:53 H=(103-42-216-107.fmgmyanmar.com) [103.42.216.107]:21816 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=103.42.216.107)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.42.216.107
2019-11-21 01:36:56
63.88.23.165 attackbotsspam
63.88.23.165 was recorded 13 times by 8 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 13, 106, 432
2019-11-21 01:38:11
148.70.201.162 attack
Nov 20 16:46:22 jane sshd[20798]: Failed password for root from 148.70.201.162 port 48564 ssh2
...
2019-11-21 01:27:22
49.232.13.12 attackbotsspam
Nov 20 14:43:34 venus sshd\[30888\]: Invalid user buna from 49.232.13.12 port 56370
Nov 20 14:43:34 venus sshd\[30888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.13.12
Nov 20 14:43:36 venus sshd\[30888\]: Failed password for invalid user buna from 49.232.13.12 port 56370 ssh2
...
2019-11-21 01:38:24
181.164.1.54 attackbotsspam
2019-11-20 14:26:31 H=(54-1-164-181.fibertel.com.ar) [181.164.1.54]:41227 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=181.164.1.54)
2019-11-20 14:26:32 unexpected disconnection while reading SMTP command from (54-1-164-181.fibertel.com.ar) [181.164.1.54]:41227 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:36:33 H=(54-1-164-181.fibertel.com.ar) [181.164.1.54]:10162 I=[10.100.18.21]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=181.164.1.54)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=181.164.1.54
2019-11-21 01:31:26
190.133.12.134 attackbots
2019-11-20 15:03:18 unexpected disconnection while reading SMTP command from r190-133-12-134.dialup.adsl.anteldata.net.uy [190.133.12.134]:22022 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:13:53 unexpected disconnection while reading SMTP command from r190-133-12-134.dialup.adsl.anteldata.net.uy [190.133.12.134]:23709 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-11-20 15:35:24 unexpected disconnection while reading SMTP command from r190-133-12-134.dialup.adsl.anteldata.net.uy [190.133.12.134]:27223 I=[10.100.18.21]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=190.133.12.134
2019-11-21 01:15:40
155.4.32.16 attack
2019-11-20T17:12:00.002579shield sshd\[19948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h-32-16.a182.priv.bahnhof.se  user=root
2019-11-20T17:12:01.789182shield sshd\[19948\]: Failed password for root from 155.4.32.16 port 52198 ssh2
2019-11-20T17:15:48.927136shield sshd\[20413\]: Invalid user jvb from 155.4.32.16 port 42345
2019-11-20T17:15:48.931491shield sshd\[20413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=h-32-16.a182.priv.bahnhof.se
2019-11-20T17:15:50.823481shield sshd\[20413\]: Failed password for invalid user jvb from 155.4.32.16 port 42345 ssh2
2019-11-21 01:15:57

Recently Reported IPs

27.190.83.99 53.55.134.196 103.123.151.118 11.254.183.182
27.200.225.76 135.137.155.37 106.12.99.239 97.13.104.19
75.99.150.10 13.127.252.253 254.103.143.94 67.88.85.125
142.26.50.238 42.228.10.252 182.232.23.131 227.227.249.132
85.202.10.42 14.162.2.159 252.135.15.13 182.232.22.89