Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: PT Comunicacoes S.A.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
May 10 14:12:00 melroy-server sshd[9973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.42.29 
May 10 14:12:02 melroy-server sshd[9973]: Failed password for invalid user avanthi from 85.245.42.29 port 54141 ssh2
...
2020-05-11 00:08:20
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.245.42.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.245.42.29.			IN	A

;; AUTHORITY SECTION:
.			361	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051000 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 00:08:15 CST 2020
;; MSG SIZE  rcvd: 116
Host info
29.42.245.85.in-addr.arpa domain name pointer bl12-42-29.dsl.telepac.pt.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
29.42.245.85.in-addr.arpa	name = bl12-42-29.dsl.telepac.pt.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.57.220.28 attackspambots
Attempt to hack Wordpress Login, XMLRPC or other login
2020-10-04 04:51:00
112.238.151.20 attackbotsspam
REQUESTED PAGE: /GponForm/diag_Form?images/
2020-10-04 05:02:34
114.67.254.244 attack
Brute-force attempt banned
2020-10-04 04:37:37
159.65.1.41 attack
20 attempts against mh-ssh on cloud
2020-10-04 04:51:19
119.45.46.159 attack
Oct  3 22:38:48 v22019038103785759 sshd\[8173\]: Invalid user myuser1 from 119.45.46.159 port 59826
Oct  3 22:38:48 v22019038103785759 sshd\[8173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.46.159
Oct  3 22:38:50 v22019038103785759 sshd\[8173\]: Failed password for invalid user myuser1 from 119.45.46.159 port 59826 ssh2
Oct  3 22:44:41 v22019038103785759 sshd\[8809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.46.159  user=root
Oct  3 22:44:43 v22019038103785759 sshd\[8809\]: Failed password for root from 119.45.46.159 port 35086 ssh2
...
2020-10-04 04:47:19
122.51.248.76 attackspambots
Invalid user toor from 122.51.248.76 port 48458
2020-10-04 04:40:59
35.204.93.160 attack
RU spamvertising/fraud - From: Your Nail Fungus 

- UBE 188.240.221.164 (EHLO digitaldreamss.org) Virtono Networks Srl - BLACKLISTED
- Spam link digitaldreamss.org = 188.240.221.161 Virtono Networks Srl – BLACKLISTED
- Spam link redfloppy.com = 185.246.116.174 Vpsville LLC – repetitive phishing redirect:
a) aptrk15.com = 35.204.93.160 Google
b) trck.fun = 104.18.35.68, 104.18.34.68, 172.67.208.63 Cloudflare
c) muw.agileconnection.company = 107.179.2.229 Global Frag Networks (common with multiple spam series)
d) effective URL: www.google.com

Images - 185.246.116.174 Vpsville LLC
- http://redfloppy.com/web/imgs/j2cp9tu3.png = link to health fraud video
- http://redfloppy.com/web/imgs/ugqwjele.png = unsubscribe; no entity/address
2020-10-04 04:53:26
190.156.238.155 attackspam
SSH brute-force attack detected from [190.156.238.155]
2020-10-04 04:29:10
139.155.91.141 attack
Brute%20Force%20SSH
2020-10-04 04:32:32
46.105.75.105 attackbots
$f2bV_matches
2020-10-04 04:50:32
140.143.207.57 attack
Oct  3 22:20:48 cho sshd[4146872]: Failed password for invalid user lucas from 140.143.207.57 port 33944 ssh2
Oct  3 22:25:26 cho sshd[4147200]: Invalid user noc from 140.143.207.57 port 59114
Oct  3 22:25:26 cho sshd[4147200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57 
Oct  3 22:25:26 cho sshd[4147200]: Invalid user noc from 140.143.207.57 port 59114
Oct  3 22:25:29 cho sshd[4147200]: Failed password for invalid user noc from 140.143.207.57 port 59114 ssh2
...
2020-10-04 04:57:12
139.59.161.78 attack
Oct  3 20:19:22 plex-server sshd[3105136]: Failed password for invalid user cat from 139.59.161.78 port 58268 ssh2
Oct  3 20:22:55 plex-server sshd[3106801]: Invalid user test from 139.59.161.78 port 13600
Oct  3 20:22:55 plex-server sshd[3106801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.161.78 
Oct  3 20:22:55 plex-server sshd[3106801]: Invalid user test from 139.59.161.78 port 13600
Oct  3 20:22:57 plex-server sshd[3106801]: Failed password for invalid user test from 139.59.161.78 port 13600 ssh2
...
2020-10-04 04:33:30
1.255.48.197 attackspambots
(From annabelle@merchantpay.top) I have a quick question about working with your business. Like most business owners you just want to survive through to 2021. In order for that to happen you need to save every dollar possible right? This is an honest question, would you continue with the high credit card processing fees if there was another way?  New laws are on your side. Test this newly released card processing model this October -  just send a phone number and we'll call.

$24.99/mo Flat Fee Credit Card Processing (Unlimited)

1) As a small business owner accepting credit/debit, recently passed State Laws are on your side. - Were you aware? 
New state regulations now in effect, the law was successfully passed in 46 states - effective since August 2019. 

Since that date you shouldn't be paying above 0.75% Credit Card Processing Fees. 
2) You're legally able to demand this new option. 

Bottom Line: Your processor isn't telling you everything. Why are they hiding the lower fee options?

We repre
2020-10-04 04:44:26
51.254.32.102 attack
Oct  3 16:51:18 ny01 sshd[25000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102
Oct  3 16:51:20 ny01 sshd[25000]: Failed password for invalid user oracle from 51.254.32.102 port 46790 ssh2
Oct  3 16:54:54 ny01 sshd[25376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102
2020-10-04 04:59:02
84.208.227.60 attackbots
Oct 1 22:22:45 *hidden* sshd[30335]: Failed password for *hidden* from 84.208.227.60 port 47618 ssh2 Oct 1 22:26:26 *hidden* sshd[32260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.208.227.60 user=root Oct 1 22:26:28 *hidden* sshd[32260]: Failed password for *hidden* from 84.208.227.60 port 57198 ssh2
2020-10-04 04:48:24

Recently Reported IPs

199.99.52.158 51.161.34.38 162.243.136.160 94.141.237.42
181.165.198.76 112.104.26.247 36.88.80.51 217.182.66.30
61.219.48.114 188.227.124.53 3.6.190.76 114.33.153.188
93.76.73.231 84.17.49.193 191.98.82.147 42.114.202.117
62.37.160.152 178.174.236.64 36.228.228.176 91.234.62.160