Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Johannesburg

Region: Gauteng

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.167.214.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;196.167.214.252.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025062701 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 28 07:32:27 CST 2025
;; MSG SIZE  rcvd: 108
Host info
Host 252.214.167.196.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.214.167.196.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
95.224.5.20 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:50:22.
2019-10-01 16:27:26
111.255.105.108 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/111.255.105.108/ 
 TW - 1H : (217)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 111.255.105.108 
 
 CIDR : 111.255.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 WYKRYTE ATAKI Z ASN3462 :  
  1H - 18 
  3H - 44 
  6H - 57 
 12H - 87 
 24H - 149 
 
 DateTime : 2019-10-01 05:50:43 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-01 16:06:19
106.13.209.94 attackbots
Sep 30 02:41:15 xxxxxxx0 sshd[14126]: Invalid user suporte from 106.13.209.94 port 40910
Sep 30 02:41:15 xxxxxxx0 sshd[14126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.209.94
Sep 30 02:41:16 xxxxxxx0 sshd[14126]: Failed password for invalid user suporte from 106.13.209.94 port 40910 ssh2
Sep 30 02:57:23 xxxxxxx0 sshd[16598]: Invalid user lucy from 106.13.209.94 port 54762
Sep 30 02:57:23 xxxxxxx0 sshd[16598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.209.94

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.209.94
2019-10-01 16:17:24
200.58.219.218 attack
2019-10-01T08:08:43.562832abusebot-8.cloudsearch.cf sshd\[5569\]: Invalid user amuel from 200.58.219.218 port 42098
2019-10-01 16:21:23
51.38.237.214 attackspam
Oct  1 09:09:33 MK-Soft-VM5 sshd[14815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.214 
Oct  1 09:09:35 MK-Soft-VM5 sshd[14815]: Failed password for invalid user tsserver from 51.38.237.214 port 54152 ssh2
...
2019-10-01 15:53:47
106.13.5.233 attackbots
Sep 30 18:24:13 indra sshd[326919]: Invalid user celso from 106.13.5.233
Sep 30 18:24:13 indra sshd[326919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.5.233 
Sep 30 18:24:15 indra sshd[326919]: Failed password for invalid user celso from 106.13.5.233 port 59868 ssh2
Sep 30 18:24:16 indra sshd[326919]: Received disconnect from 106.13.5.233: 11: Bye Bye [preauth]
Sep 30 22:09:15 indra sshd[376211]: Invalid user ofbiz from 106.13.5.233
Sep 30 22:09:15 indra sshd[376211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.5.233 
Sep 30 22:09:17 indra sshd[376211]: Failed password for invalid user ofbiz from 106.13.5.233 port 48848 ssh2
Sep 30 22:09:18 indra sshd[376211]: Received disconnect from 106.13.5.233: 11: Bye Bye [preauth]
Sep 30 22:13:49 indra sshd[377263]: Invalid user admin from 106.13.5.233
Sep 30 22:13:49 indra sshd[377263]: pam_unix(sshd:auth): authentication failu........
-------------------------------
2019-10-01 15:54:48
222.186.42.241 attack
"Fail2Ban detected SSH brute force attempt"
2019-10-01 16:26:24
222.186.31.136 attackbotsspam
2019-10-01T08:18:34.749208abusebot-8.cloudsearch.cf sshd\[5617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.136  user=root
2019-10-01 16:21:44
128.199.252.156 attack
2019-10-01T07:20:56.359301abusebot-3.cloudsearch.cf sshd\[29982\]: Invalid user par0t from 128.199.252.156 port 46740
2019-10-01 15:57:48
61.247.17.177 attackbots
port scan and connect, tcp 23 (telnet)
2019-10-01 16:16:06
34.84.193.213 attackspam
Sep 30 23:50:09 localhost kernel: [3639627.820349] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=34.84.193.213 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=137 ID=2106 DF PROTO=TCP SPT=8484 DPT=49258 SEQ=1837534764 ACK=3485335553 WINDOW=8192 RES=0x00 ECE ACK SYN URGP=0 OPT (0204058C) 
Sep 30 23:50:12 localhost kernel: [3639630.819203] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=34.84.193.213 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=137 ID=9031 DF PROTO=TCP SPT=8484 DPT=49258 SEQ=1837534764 ACK=3485335553 WINDOW=8192 RES=0x00 ECE ACK SYN URGP=0 OPT (0204058C) 
Sep 30 23:50:18 localhost kernel: [3639636.820859] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=34.84.193.213 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=137 ID=27324 DF PROTO=TCP SPT=8484 DPT=49258 SEQ=1837534764 ACK=3485335553 WINDOW=8192 RES=0x00 ACK SYN URGP=0 OPT (0204058C)
2019-10-01 16:36:02
54.36.149.73 attackbotsspam
Automatic report - Banned IP Access
2019-10-01 15:59:03
180.15.49.233 attackspam
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/180.15.49.233/ 
 JP - 1H : (123)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : JP 
 NAME ASN : ASN4713 
 
 IP : 180.15.49.233 
 
 CIDR : 180.14.0.0/15 
 
 PREFIX COUNT : 301 
 
 UNIQUE IP COUNT : 28900096 
 
 
 WYKRYTE ATAKI Z ASN4713 :  
  1H - 2 
  3H - 4 
  6H - 7 
 12H - 8 
 24H - 12 
 
 DateTime : 2019-10-01 05:50:38 
 
 INFO : SERVER - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-10-01 16:14:42
189.115.92.79 attackspam
Oct  1 06:50:46 tuotantolaitos sshd[5829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.115.92.79
Oct  1 06:50:48 tuotantolaitos sshd[5829]: Failed password for invalid user csgoserver from 189.115.92.79 port 52970 ssh2
...
2019-10-01 16:02:54
24.139.207.79 attackbots
port scan and connect, tcp 23 (telnet)
2019-10-01 16:16:29

Recently Reported IPs

214.208.115.164 41.194.143.186 20.192.221.84 180.203.118.105
133.161.95.24 162.191.208.139 163.98.216.239 52.6.10.88
150.167.159.8 126.137.114.15 115.81.107.53 209.55.174.254
11.62.159.204 110.192.216.22 103.144.133.116 10.38.238.164
44.109.182.91 112.225.123.78 112.54.237.236 29.95.34.194