Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Moscow Local Telephone Network

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 01:25:07,917 INFO [shellcode_manager] (94.29.124.89) no match, writing hexdump (ddf46e155a23b6dc841fa1cd1322d98a :2262228) - MS17010 (EternalBlue)
2019-06-27 03:02:33
Comments on same subnet:
IP Type Details Datetime
94.29.124.45 spambotsattack
This server has bad connection, some apps don't even work.
2021-03-01 14:14:02
94.29.124.106 attackspambots
Unauthorized connection attempt from IP address 94.29.124.106 on Port 445(SMB)
2019-11-01 00:55:10
94.29.124.106 attackbots
Unauthorised access (Oct 10) SRC=94.29.124.106 LEN=52 TTL=113 ID=18762 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-11 02:53:13
94.29.124.85 attack
Unauthorized connection attempt from IP address 94.29.124.85 on Port 445(SMB)
2019-09-24 03:47:59
94.29.124.55 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 19-09-2019 10:57:44.
2019-09-19 18:50:59
94.29.124.46 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 21:12:56,007 INFO [amun_request_handler] PortScan Detected on Port: 445 (94.29.124.46)
2019-09-17 10:43:26
94.29.124.80 attackbotsspam
Unauthorized connection attempt from IP address 94.29.124.80 on Port 445(SMB)
2019-09-11 03:35:35
94.29.124.233 attackspambots
Unauthorized connection attempt from IP address 94.29.124.233 on Port 445(SMB)
2019-09-05 16:41:37
94.29.124.190 attackspam
Unauthorized connection attempt from IP address 94.29.124.190 on Port 445(SMB)
2019-08-14 14:51:37
94.29.124.138 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 20:38:13,986 INFO [amun_request_handler] PortScan Detected on Port: 445 (94.29.124.138)
2019-08-09 09:43:39
94.29.124.45 attack
Unauthorized connection attempt from IP address 94.29.124.45 on Port 445(SMB)
2019-07-31 21:31:45
94.29.124.233 attack
Unauthorized connection attempt from IP address 94.29.124.233 on Port 445(SMB)
2019-07-31 19:29:12
94.29.124.55 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 06:10:11,551 INFO [amun_request_handler] PortScan Detected on Port: 445 (94.29.124.55)
2019-07-17 19:25:55
94.29.124.190 attack
445/tcp 445/tcp 445/tcp...
[2019-05-06/06-26]4pkt,1pt.(tcp)
2019-06-27 01:00:48
94.29.124.37 attackspam
Unauthorized connection attempt from IP address 94.29.124.37 on Port 445(SMB)
2019-06-22 16:38:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.29.124.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29151
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.29.124.89.			IN	A

;; AUTHORITY SECTION:
.			436	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 27 03:02:26 CST 2019
;; MSG SIZE  rcvd: 116
Host info
89.124.29.94.in-addr.arpa has no PTR record
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 89.124.29.94.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
150.223.1.4 attack
May 10 13:49:58 pihole sshd[21414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.1.4 
...
2020-05-10 17:27:45
179.209.91.153 attack
Automatic report - Port Scan Attack
2020-05-10 17:34:38
106.13.19.4 attack
fail2ban/May 10 09:04:21 h1962932 sshd[6481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.4  user=root
May 10 09:04:23 h1962932 sshd[6481]: Failed password for root from 106.13.19.4 port 44228 ssh2
May 10 09:08:01 h1962932 sshd[6825]: Invalid user csczserver from 106.13.19.4 port 53934
May 10 09:08:01 h1962932 sshd[6825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.4
May 10 09:08:01 h1962932 sshd[6825]: Invalid user csczserver from 106.13.19.4 port 53934
May 10 09:08:03 h1962932 sshd[6825]: Failed password for invalid user csczserver from 106.13.19.4 port 53934 ssh2
2020-05-10 17:26:40
51.89.149.213 attack
2020-05-10T11:23:08.058023  sshd[4950]: Invalid user admin from 51.89.149.213 port 57638
2020-05-10T11:23:08.071875  sshd[4950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.149.213
2020-05-10T11:23:08.058023  sshd[4950]: Invalid user admin from 51.89.149.213 port 57638
2020-05-10T11:23:09.527631  sshd[4950]: Failed password for invalid user admin from 51.89.149.213 port 57638 ssh2
...
2020-05-10 17:23:52
49.234.18.158 attack
2020-05-10T08:21:15.891098abusebot-2.cloudsearch.cf sshd[17383]: Invalid user git from 49.234.18.158 port 47862
2020-05-10T08:21:15.897639abusebot-2.cloudsearch.cf sshd[17383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.18.158
2020-05-10T08:21:15.891098abusebot-2.cloudsearch.cf sshd[17383]: Invalid user git from 49.234.18.158 port 47862
2020-05-10T08:21:17.624448abusebot-2.cloudsearch.cf sshd[17383]: Failed password for invalid user git from 49.234.18.158 port 47862 ssh2
2020-05-10T08:27:47.654546abusebot-2.cloudsearch.cf sshd[17581]: Invalid user secretar from 49.234.18.158 port 50626
2020-05-10T08:27:47.660617abusebot-2.cloudsearch.cf sshd[17581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.18.158
2020-05-10T08:27:47.654546abusebot-2.cloudsearch.cf sshd[17581]: Invalid user secretar from 49.234.18.158 port 50626
2020-05-10T08:27:49.868898abusebot-2.cloudsearch.cf sshd[17581]: Failed
...
2020-05-10 17:25:41
139.198.17.144 attackbots
odoo8
...
2020-05-10 17:43:48
92.222.78.178 attackbotsspam
frenzy
2020-05-10 17:49:07
222.186.42.136 attack
10.05.2020 09:48:21 SSH access blocked by firewall
2020-05-10 17:52:31
106.54.205.236 attack
May 10 11:40:34 legacy sshd[17576]: Failed password for root from 106.54.205.236 port 35800 ssh2
May 10 11:41:54 legacy sshd[17606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.205.236
May 10 11:41:56 legacy sshd[17606]: Failed password for invalid user user from 106.54.205.236 port 53494 ssh2
...
2020-05-10 17:56:15
189.181.193.82 attackspam
Automatic report - Port Scan Attack
2020-05-10 17:39:22
168.232.198.218 attackspam
May 10 04:13:56 askasleikir sshd[35584]: Failed password for invalid user tunel from 168.232.198.218 port 47072 ssh2
May 10 04:12:07 askasleikir sshd[35577]: Failed password for invalid user piao from 168.232.198.218 port 52916 ssh2
2020-05-10 17:19:31
45.14.150.133 attack
May 10 10:15:31 ns382633 sshd\[14388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.133  user=root
May 10 10:15:33 ns382633 sshd\[14388\]: Failed password for root from 45.14.150.133 port 51970 ssh2
May 10 10:30:55 ns382633 sshd\[18190\]: Invalid user jb from 45.14.150.133 port 47130
May 10 10:30:55 ns382633 sshd\[18190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.133
May 10 10:30:57 ns382633 sshd\[18190\]: Failed password for invalid user jb from 45.14.150.133 port 47130 ssh2
2020-05-10 17:18:13
51.178.24.61 attackspambots
May 10 09:59:55 xeon sshd[35886]: Failed password for invalid user deploy from 51.178.24.61 port 40052 ssh2
2020-05-10 17:31:24
218.153.133.68 attackspam
May 10 10:29:08 sigma sshd\[24249\]: Invalid user deploy from 218.153.133.68May 10 10:29:10 sigma sshd\[24249\]: Failed password for invalid user deploy from 218.153.133.68 port 46516 ssh2
...
2020-05-10 17:42:20
159.203.123.99 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-05-10 17:46:26

Recently Reported IPs

118.173.120.194 92.247.119.131 241.106.165.167 69.163.200.24
64.20.140.7 54.129.40.72 71.74.180.193 122.52.109.188
175.83.4.237 129.54.17.95 14.237.204.90 235.23.12.135
227.69.34.216 168.228.151.31 47.198.65.5 179.46.172.100
87.138.233.22 24.237.99.120 45.237.26.231 220.45.61.149