Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.85.158.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.85.158.249.			IN	A

;; AUTHORITY SECTION:
.			466	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011200 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 19:29:07 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 249.158.85.166.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.82.98, trying next server
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.158.85.166.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
213.80.113.81 attackbotsspam
(sshd) Failed SSH login from 213.80.113.81 (SE/Sweden/h-113-81.A137.corp.bahnhof.se): 5 in the last 3600 secs
2020-04-03 21:20:49
80.241.251.238 attack
80.241.251.238 - - [03/Apr/2020:08:50:04 +0300] "POST /cgi-bin/mainfunction.cgi HTTP/1.1" 404 196 "-" "XTC BOTNET"
2020-04-03 21:24:09
36.92.143.71 attackspambots
2020-04-01T14:50:25.959970ts3.arvenenaske.de sshd[17361]: Invalid user ljy from 36.92.143.71 port 34058
2020-04-01T14:50:25.966997ts3.arvenenaske.de sshd[17361]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.143.71 user=ljy
2020-04-01T14:50:25.968004ts3.arvenenaske.de sshd[17361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.143.71
2020-04-01T14:50:25.959970ts3.arvenenaske.de sshd[17361]: Invalid user ljy from 36.92.143.71 port 34058
2020-04-01T14:50:27.849152ts3.arvenenaske.de sshd[17361]: Failed password for invalid user ljy from 36.92.143.71 port 34058 ssh2
2020-04-01T14:56:06.997150ts3.arvenenaske.de sshd[17366]: Invalid user iy from 36.92.143.71 port 44048
2020-04-01T14:56:07.004682ts3.arvenenaske.de sshd[17366]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.143.71 user=iy
2020-04-01T14:56:07.005927ts3.arvenenaske.de sshd[173........
------------------------------
2020-04-03 20:37:13
125.140.189.95 attackspambots
Port probing on unauthorized port 81
2020-04-03 21:21:27
34.83.85.228 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/34.83.85.228/ 
 
 US - 1H : (102)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN15169 
 
 IP : 34.83.85.228 
 
 CIDR : 34.80.0.0/14 
 
 PREFIX COUNT : 602 
 
 UNIQUE IP COUNT : 8951808 
 
 
 ATTACKS DETECTED ASN15169 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 8 
 
 DateTime : 2020-04-03 15:00:52 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery
2020-04-03 21:18:09
175.24.16.135 attackspambots
Apr  1 11:14:26 cumulus sshd[6127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.16.135  user=r.r
Apr  1 11:14:28 cumulus sshd[6127]: Failed password for r.r from 175.24.16.135 port 43164 ssh2
Apr  1 11:14:28 cumulus sshd[6127]: Received disconnect from 175.24.16.135 port 43164:11: Bye Bye [preauth]
Apr  1 11:14:28 cumulus sshd[6127]: Disconnected from 175.24.16.135 port 43164 [preauth]
Apr  1 11:28:47 cumulus sshd[6783]: Invalid user qu from 175.24.16.135 port 60910
Apr  1 11:28:47 cumulus sshd[6783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.16.135
Apr  1 11:28:49 cumulus sshd[6783]: Failed password for invalid user qu from 175.24.16.135 port 60910 ssh2
Apr  1 11:28:50 cumulus sshd[6783]: Received disconnect from 175.24.16.135 port 60910:11: Bye Bye [preauth]
Apr  1 11:28:50 cumulus sshd[6783]: Disconnected from 175.24.16.135 port 60910 [preauth]
Apr  1 11:34:26 cumu........
-------------------------------
2020-04-03 20:47:24
109.62.242.28 attackbotsspam
1585918845 - 04/03/2020 15:00:45 Host: 109.62.242.28/109.62.242.28 Port: 445 TCP Blocked
2020-04-03 21:27:04
14.249.235.50 attackbotsspam
Unauthorized connection attempt from IP address 14.249.235.50 on Port 445(SMB)
2020-04-03 20:40:27
103.89.176.74 attack
Apr  3 14:51:31 markkoudstaal sshd[12488]: Failed password for root from 103.89.176.74 port 55226 ssh2
Apr  3 14:56:10 markkoudstaal sshd[13119]: Failed password for root from 103.89.176.74 port 58128 ssh2
Apr  3 15:00:46 markkoudstaal sshd[13763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.176.74
2020-04-03 21:25:46
78.177.90.249 attackspambots
Unauthorized connection attempt from IP address 78.177.90.249 on Port 445(SMB)
2020-04-03 21:10:32
212.188.12.103 attack
Apr  3 14:11:50 sso sshd[8668]: Failed password for root from 212.188.12.103 port 35988 ssh2
...
2020-04-03 20:45:30
103.145.12.44 attackspambots
[2020-04-03 08:59:56] NOTICE[12114][C-00000a53] chan_sip.c: Call from '' (103.145.12.44:62154) to extension '6814301148413828003' rejected because extension not found in context 'public'.
[2020-04-03 08:59:56] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-03T08:59:56.734-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="6814301148413828003",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.44/62154",ACLName="no_extension_match"
[2020-04-03 09:01:02] NOTICE[12114][C-00000a54] chan_sip.c: Call from '' (103.145.12.44:58573) to extension '4804501148893076002' rejected because extension not found in context 'public'.
[2020-04-03 09:01:02] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-03T09:01:02.162-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="4804501148893076002",SessionID="0x7f020c033c08",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remo
...
2020-04-03 21:06:36
36.76.245.245 attack
Unauthorized connection attempt from IP address 36.76.245.245 on Port 445(SMB)
2020-04-03 20:44:55
78.128.113.119 attackbots
abuse-sasl
2020-04-03 20:42:40
119.28.73.77 attackbots
SSH bruteforce
2020-04-03 20:44:06

Recently Reported IPs

165.220.196.0 153.11.11.222 160.138.179.25 192.243.32.127
27.204.28.136 218.54.182.237 82.22.231.69 94.95.249.108
149.209.12.26 163.124.130.14 227.109.77.227 253.44.223.176
57.216.71.112 91.179.5.34 93.65.76.173 15.51.73.98
72.9.209.71 213.59.55.158 217.72.165.87 87.111.204.104