Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: PJSC MegaFon

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Unauthorized connection attempt from IP address 94.25.229.21 on Port 445(SMB)
2020-09-15 21:16:46
attackbots
Unauthorized connection attempt from IP address 94.25.229.21 on Port 445(SMB)
2020-09-15 13:14:53
Comments on same subnet:
IP Type Details Datetime
94.25.229.103 attack
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2020-07-13 02:19:36
94.25.229.241 attack
20/6/21@23:54:18: FAIL: Alarm-Network address from=94.25.229.241
20/6/21@23:54:19: FAIL: Alarm-Network address from=94.25.229.241
...
2020-06-22 13:36:47
94.25.229.118 attackbots
Unauthorized connection attempt detected from IP address 94.25.229.118 to port 445
2020-05-30 04:30:08
94.25.229.96 attackspambots
Fail2Ban Ban Triggered
2020-05-27 15:00:59
94.25.229.42 attackspam
1589373229 - 05/13/2020 14:33:49 Host: 94.25.229.42/94.25.229.42 Port: 445 TCP Blocked
2020-05-14 02:20:05
94.25.229.163 attackspambots
Unauthorized connection attempt from IP address 94.25.229.163 on Port 445(SMB)
2020-04-01 01:06:49
94.25.229.203 attackspam
Honeypot attack, port: 445, PTR: client.yota.ru.
2020-03-31 03:12:57
94.25.229.18 attackbots
Unauthorized connection attempt from IP address 94.25.229.18 on Port 445(SMB)
2020-02-19 07:09:09
94.25.229.158 attackspam
Unauthorized connection attempt from IP address 94.25.229.158 on Port 445(SMB)
2020-02-19 06:10:09
94.25.229.100 attack
Unauthorized connection attempt from IP address 94.25.229.100 on Port 445(SMB)
2020-02-08 03:55:04
94.25.229.79 attackbotsspam
1578575361 - 01/09/2020 14:09:21 Host: 94.25.229.79/94.25.229.79 Port: 445 TCP Blocked
2020-01-09 23:04:59
94.25.229.212 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:23.
2020-01-03 23:29:10
94.25.229.122 attackspam
Unauthorized connection attempt detected from IP address 94.25.229.122 to port 445
2019-12-14 00:34:40
94.25.229.50 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 20:50:44.
2019-10-08 06:08:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.25.229.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.25.229.21.			IN	A

;; AUTHORITY SECTION:
.			573	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091402 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 15 05:23:36 CST 2020
;; MSG SIZE  rcvd: 116
Host info
21.229.25.94.in-addr.arpa domain name pointer client.yota.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.229.25.94.in-addr.arpa	name = client.yota.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
96.78.175.36 attack
fail2ban -- 96.78.175.36
...
2020-10-09 03:20:47
2.88.64.51 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-09 03:23:12
128.199.84.201 attackspam
Oct  8 18:21:33 v22019038103785759 sshd\[32546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201  user=root
Oct  8 18:21:35 v22019038103785759 sshd\[32546\]: Failed password for root from 128.199.84.201 port 53806 ssh2
Oct  8 18:25:42 v22019038103785759 sshd\[470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201  user=root
Oct  8 18:25:44 v22019038103785759 sshd\[470\]: Failed password for root from 128.199.84.201 port 55326 ssh2
Oct  8 18:29:41 v22019038103785759 sshd\[804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.84.201  user=root
...
2020-10-09 03:20:20
109.123.117.250 attackspam
Port scan denied
2020-10-09 03:46:50
87.251.74.39 attack
400 BAD REQUEST
2020-10-09 03:44:54
192.241.175.250 attackbots
Oct  8 07:30:50 prod4 sshd\[6185\]: Address 192.241.175.250 maps to sheriff.mobi, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  8 07:30:52 prod4 sshd\[6185\]: Failed password for root from 192.241.175.250 port 41054 ssh2
Oct  8 07:40:07 prod4 sshd\[8669\]: Address 192.241.175.250 maps to sheriff.mobi, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
...
2020-10-09 03:40:43
128.199.109.128 attack
Bruteforce detected by fail2ban
2020-10-09 03:39:35
61.143.152.13 attackbots
IP 61.143.152.13 attacked honeypot on port: 1433 at 10/7/2020 1:40:04 PM
2020-10-09 03:22:24
174.138.20.105 attackspam
2020-10-08T17:58:11.015372hostname sshd[70237]: Failed password for root from 174.138.20.105 port 36342 ssh2
...
2020-10-09 03:18:42
141.212.123.188 attackbots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.
2020-10-09 03:48:51
219.74.129.43 attack
37215/tcp 37215/tcp 8080/tcp
[2020-10-02/07]3pkt
2020-10-09 03:33:21
192.254.250.178 attackbotsspam
Unauthorised access to wp-admin
2020-10-09 03:23:57
146.185.25.164 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-09 03:48:33
61.143.152.9 attackbots
IP 61.143.152.9 attacked honeypot on port: 1433 at 10/7/2020 1:39:45 PM
2020-10-09 03:44:22
179.54.191.14 attackspam
Found on   CINS badguys     / proto=6  .  srcport=52923  .  dstport=445 SMB  .     (3816)
2020-10-09 03:25:41

Recently Reported IPs

22.1.213.75 59.80.96.213 95.161.65.184 88.89.217.191
74.62.86.11 211.182.227.235 135.13.229.108 232.183.70.243
215.115.74.122 77.134.145.209 227.247.69.45 245.97.156.254
4.101.134.2 12.22.161.132 192.41.154.194 166.13.251.217
106.81.98.201 136.81.10.172 52.15.205.178 178.133.110.129