Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Marzabotto

Region: Emilia-Romagna

Country: Italy

Internet Service Provider: Telecom Italia S.p.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Nov  9 04:23:01 ms-srv sshd[4742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.216.126.148
Nov  9 04:23:03 ms-srv sshd[4741]: Failed password for invalid user pi from 212.216.126.148 port 56148 ssh2
Nov  9 04:23:03 ms-srv sshd[4742]: Failed password for invalid user pi from 212.216.126.148 port 56152 ssh2
2020-03-09 03:27:10
attackspambots
Nov  9 04:23:01 ms-srv sshd[4742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.216.126.148
Nov  9 04:23:03 ms-srv sshd[4741]: Failed password for invalid user pi from 212.216.126.148 port 56148 ssh2
Nov  9 04:23:03 ms-srv sshd[4742]: Failed password for invalid user pi from 212.216.126.148 port 56152 ssh2
2020-02-15 23:12:37
attackspambots
SSH-bruteforce attempts
2019-11-10 06:08:43
attackbots
Nov  6 05:28:35 cumulus sshd[27277]: Invalid user pi from 212.216.126.148 port 46440
Nov  6 05:28:35 cumulus sshd[27278]: Invalid user pi from 212.216.126.148 port 46446
Nov  6 05:28:35 cumulus sshd[27277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.216.126.148
Nov  6 05:28:35 cumulus sshd[27278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.216.126.148
Nov  6 05:28:37 cumulus sshd[27277]: Failed password for invalid user pi from 212.216.126.148 port 46440 ssh2
Nov  6 05:28:37 cumulus sshd[27278]: Failed password for invalid user pi from 212.216.126.148 port 46446 ssh2
Nov  6 05:28:37 cumulus sshd[27277]: Connection closed by 212.216.126.148 port 46440 [preauth]
Nov  6 05:28:38 cumulus sshd[27278]: Connection closed by 212.216.126.148 port 46446 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=212.216.126.148
2019-11-08 00:18:31
Comments on same subnet:
IP Type Details Datetime
212.216.126.76 attack
../../mnt/custom/ProductDefinition
2019-09-30 08:49:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.216.126.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62345
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.216.126.148.		IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 00:18:27 CST 2019
;; MSG SIZE  rcvd: 119
Host info
148.126.216.212.in-addr.arpa domain name pointer a-sk1-85.tin.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.126.216.212.in-addr.arpa	name = a-sk1-85.tin.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
209.126.230.71 attackspam
3389BruteforceFW21
2019-07-17 06:03:40
157.119.71.213 attack
SPLUNK port scan detected
2019-07-17 06:20:22
177.130.189.2 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-16 20:42:39,339 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.130.189.2)
2019-07-17 05:56:26
122.114.79.77 attackbotsspam
Apr 23 22:19:07 server sshd\[95270\]: Invalid user core from 122.114.79.77
Apr 23 22:19:07 server sshd\[95270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.79.77
Apr 23 22:19:10 server sshd\[95270\]: Failed password for invalid user core from 122.114.79.77 port 56449 ssh2
...
2019-07-17 06:20:38
201.238.247.234 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-16 20:41:50,069 INFO [amun_request_handler] PortScan Detected on Port: 445 (201.238.247.234)
2019-07-17 06:08:09
206.189.220.99 attackbotsspam
Jul 16 21:10:51 MK-Soft-VM3 sshd\[32067\]: Invalid user konstantin from 206.189.220.99 port 58066
Jul 16 21:10:51 MK-Soft-VM3 sshd\[32067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.220.99
Jul 16 21:10:52 MK-Soft-VM3 sshd\[32067\]: Failed password for invalid user konstantin from 206.189.220.99 port 58066 ssh2
...
2019-07-17 05:57:51
40.124.4.131 attackbotsspam
May  2 02:56:52 server sshd\[217337\]: Invalid user ubuntu from 40.124.4.131
May  2 02:56:52 server sshd\[217337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.124.4.131
May  2 02:56:55 server sshd\[217337\]: Failed password for invalid user ubuntu from 40.124.4.131 port 42974 ssh2
...
2019-07-17 06:28:01
119.29.11.214 attackspambots
Jul 16 23:58:52 localhost sshd\[14156\]: Invalid user admin from 119.29.11.214 port 43018
Jul 16 23:58:52 localhost sshd\[14156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.11.214
Jul 16 23:58:54 localhost sshd\[14156\]: Failed password for invalid user admin from 119.29.11.214 port 43018 ssh2
2019-07-17 06:00:50
122.114.155.237 attack
May  3 14:08:04 server sshd\[36773\]: Invalid user wildfly from 122.114.155.237
May  3 14:08:04 server sshd\[36773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.155.237
May  3 14:08:06 server sshd\[36773\]: Failed password for invalid user wildfly from 122.114.155.237 port 55200 ssh2
...
2019-07-17 06:21:28
115.133.43.176 attackbotsspam
Jul 16 23:22:45 cvbmail sshd\[26709\]: Invalid user theobold from 115.133.43.176
Jul 16 23:22:45 cvbmail sshd\[26709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.133.43.176
Jul 16 23:22:48 cvbmail sshd\[26709\]: Failed password for invalid user theobold from 115.133.43.176 port 47203 ssh2
2019-07-17 05:54:38
79.17.32.183 attackspambots
Jul 16 22:11:00 mail sshd\[2519\]: Invalid user pi from 79.17.32.183 port 42420
Jul 16 22:11:00 mail sshd\[2519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.17.32.183
...
2019-07-17 05:52:27
139.59.84.55 attackbots
Jul 16 23:10:32 fr01 sshd[4594]: Invalid user rebecca from 139.59.84.55
...
2019-07-17 06:16:46
66.70.130.155 attackspam
Jul 16 17:43:48 TORMINT sshd\[2267\]: Invalid user redis from 66.70.130.155
Jul 16 17:43:48 TORMINT sshd\[2267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.130.155
Jul 16 17:43:49 TORMINT sshd\[2267\]: Failed password for invalid user redis from 66.70.130.155 port 40414 ssh2
...
2019-07-17 05:47:22
201.148.247.158 attackbots
Brute force attempt
2019-07-17 05:50:08
122.161.198.205 attack
Apr 13 08:54:54 server sshd\[192062\]: Invalid user support from 122.161.198.205
Apr 13 08:54:54 server sshd\[192062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.198.205
Apr 13 08:54:56 server sshd\[192062\]: Failed password for invalid user support from 122.161.198.205 port 48498 ssh2
...
2019-07-17 06:05:31

Recently Reported IPs

76.169.59.230 188.153.191.25 178.47.217.58 103.76.248.105
179.92.18.241 107.161.91.53 69.158.207.141 152.252.127.41
5.100.152.36 160.119.240.211 153.182.159.244 218.59.129.110
209.97.161.135 131.108.164.19 139.213.119.129 144.217.85.84
112.251.208.28 145.239.253.73 146.185.142.70 146.196.55.181