Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Clients Elita

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackbots
2020-09-14T14:49:38.400032morrigan.ad5gb.com sshd[2031209]: Disconnected from authenticating user root 217.148.212.142 port 58632 [preauth]
2020-09-16 02:42:35
attack
Sep 15 10:28:36 email sshd\[1400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142  user=root
Sep 15 10:28:38 email sshd\[1400\]: Failed password for root from 217.148.212.142 port 33114 ssh2
Sep 15 10:33:29 email sshd\[2313\]: Invalid user brazil from 217.148.212.142
Sep 15 10:33:29 email sshd\[2313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
Sep 15 10:33:31 email sshd\[2313\]: Failed password for invalid user brazil from 217.148.212.142 port 44916 ssh2
...
2020-09-15 18:40:24
attack
Jul 27 20:15:32 django-0 sshd[28595]: Invalid user ta from 217.148.212.142
Jul 27 20:15:34 django-0 sshd[28595]: Failed password for invalid user ta from 217.148.212.142 port 46506 ssh2
Jul 27 20:20:47 django-0 sshd[28884]: Invalid user tmpu01 from 217.148.212.142
...
2020-07-28 04:41:23
attack
Jul 26 22:14:26 vm1 sshd[2334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
Jul 26 22:14:27 vm1 sshd[2334]: Failed password for invalid user download from 217.148.212.142 port 35184 ssh2
...
2020-07-27 06:14:48
attackbotsspam
Jul 25 22:29:04 ip-172-31-61-156 sshd[27942]: Failed password for invalid user user from 217.148.212.142 port 54498 ssh2
Jul 25 22:29:01 ip-172-31-61-156 sshd[27942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
Jul 25 22:29:01 ip-172-31-61-156 sshd[27942]: Invalid user user from 217.148.212.142
Jul 25 22:29:04 ip-172-31-61-156 sshd[27942]: Failed password for invalid user user from 217.148.212.142 port 54498 ssh2
Jul 25 22:32:28 ip-172-31-61-156 sshd[28181]: Invalid user hlw from 217.148.212.142
...
2020-07-26 06:42:31
attackbotsspam
Jun 30 15:26:09 sip sshd[800928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142  user=root
Jun 30 15:26:11 sip sshd[800928]: Failed password for root from 217.148.212.142 port 34042 ssh2
Jun 30 15:31:52 sip sshd[800956]: Invalid user grey from 217.148.212.142 port 33930
...
2020-07-01 00:53:59
attackbotsspam
Invalid user radware from 217.148.212.142 port 53330
2020-06-30 02:54:44
attack
2020-06-25T17:28:12.541188n23.at sshd[325187]: Invalid user wxl from 217.148.212.142 port 58944
2020-06-25T17:28:14.609094n23.at sshd[325187]: Failed password for invalid user wxl from 217.148.212.142 port 58944 ssh2
2020-06-25T17:33:22.379986n23.at sshd[329054]: Invalid user user01 from 217.148.212.142 port 59410
...
2020-06-25 23:57:38
attackspam
Jun 17 08:36:05 roki sshd[15355]: Invalid user ts3server from 217.148.212.142
Jun 17 08:36:05 roki sshd[15355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
Jun 17 08:36:07 roki sshd[15355]: Failed password for invalid user ts3server from 217.148.212.142 port 59388 ssh2
Jun 17 08:49:11 roki sshd[16385]: Invalid user minecraft from 217.148.212.142
Jun 17 08:49:11 roki sshd[16385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
...
2020-06-17 15:29:52
attackbots
2020-06-15T10:18:47.546691ionos.janbro.de sshd[116508]: Invalid user web from 217.148.212.142 port 41298
2020-06-15T10:18:49.268601ionos.janbro.de sshd[116508]: Failed password for invalid user web from 217.148.212.142 port 41298 ssh2
2020-06-15T10:22:04.131648ionos.janbro.de sshd[116521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142  user=root
2020-06-15T10:22:06.098892ionos.janbro.de sshd[116521]: Failed password for root from 217.148.212.142 port 54491 ssh2
2020-06-15T10:25:20.377876ionos.janbro.de sshd[116531]: Invalid user qiang from 217.148.212.142 port 51408
2020-06-15T10:25:20.519675ionos.janbro.de sshd[116531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
2020-06-15T10:25:20.377876ionos.janbro.de sshd[116531]: Invalid user qiang from 217.148.212.142 port 51408
2020-06-15T10:25:22.060988ionos.janbro.de sshd[116531]: Failed password for invalid user qiang from 21
...
2020-06-15 18:45:44
attackspambots
Jun  8 06:55:01 * sshd[30355]: Failed password for root from 217.148.212.142 port 45730 ssh2
2020-06-08 14:29:34
attackspam
May 24 09:21:59 server sshd[11337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
May 24 09:22:01 server sshd[11337]: Failed password for invalid user tot from 217.148.212.142 port 48210 ssh2
May 24 09:26:00 server sshd[11631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.148.212.142
...
2020-05-24 15:37:17
attackbotsspam
Invalid user hiq from 217.148.212.142 port 43630
2020-05-23 12:37:57
attackbotsspam
May 19 15:39:52 firewall sshd[10757]: Invalid user qqb from 217.148.212.142
May 19 15:39:54 firewall sshd[10757]: Failed password for invalid user qqb from 217.148.212.142 port 51192 ssh2
May 19 15:47:24 firewall sshd[11000]: Invalid user cns from 217.148.212.142
...
2020-05-20 03:45:08
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 217.148.212.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;217.148.212.142.		IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051901 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 03:45:04 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 142.212.148.217.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.212.148.217.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
47.40.252.186 attackbots
RDP Bruteforce
2019-11-03 19:49:43
198.50.197.217 attack
Nov  3 07:47:45 vps647732 sshd[26609]: Failed password for root from 198.50.197.217 port 59330 ssh2
...
2019-11-03 19:32:45
222.186.175.202 attackspam
2019-11-03T12:41:36.173746scmdmz1 sshd\[29063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202  user=root
2019-11-03T12:41:38.499164scmdmz1 sshd\[29063\]: Failed password for root from 222.186.175.202 port 11656 ssh2
2019-11-03T12:41:42.619309scmdmz1 sshd\[29063\]: Failed password for root from 222.186.175.202 port 11656 ssh2
...
2019-11-03 19:46:50
106.12.60.185 attack
Nov  3 08:15:38 thevastnessof sshd[32636]: Failed password for root from 106.12.60.185 port 50766 ssh2
...
2019-11-03 19:32:23
51.38.51.108 attack
Nov  3 01:40:51 eddieflores sshd\[2688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-51-38-51.eu  user=root
Nov  3 01:40:53 eddieflores sshd\[2688\]: Failed password for root from 51.38.51.108 port 40468 ssh2
Nov  3 01:45:01 eddieflores sshd\[3030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-51-38-51.eu  user=root
Nov  3 01:45:03 eddieflores sshd\[3030\]: Failed password for root from 51.38.51.108 port 50526 ssh2
Nov  3 01:49:04 eddieflores sshd\[3354\]: Invalid user betteti from 51.38.51.108
Nov  3 01:49:04 eddieflores sshd\[3354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.ip-51-38-51.eu
2019-11-03 19:52:02
176.119.63.75 attackspam
2019-11-03T10:06:44.899498abusebot-2.cloudsearch.cf sshd\[16826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68794-1-4baba3-01.services.oktawave.com  user=root
2019-11-03 19:18:30
85.241.48.10 attackbotsspam
Nov  3 **REMOVED** sshd\[6511\]: Invalid user admin from 85.241.48.10
Nov  3 **REMOVED** sshd\[6576\]: Invalid user ubuntu from 85.241.48.10
Nov  3 **REMOVED** sshd\[6607\]: Invalid user pi from 85.241.48.10
2019-11-03 19:43:40
45.249.111.40 attackbots
$f2bV_matches
2019-11-03 19:22:55
182.180.130.40 attackbots
Automatic report - Banned IP Access
2019-11-03 19:52:20
51.158.126.207 attackspambots
Nov  3 02:51:01 ny01 sshd[8183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.126.207
Nov  3 02:51:03 ny01 sshd[8183]: Failed password for invalid user abc!QAZXSW from 51.158.126.207 port 38566 ssh2
Nov  3 02:54:48 ny01 sshd[8549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.126.207
2019-11-03 19:26:11
222.186.52.78 attackspambots
Nov  3 05:57:02 ny01 sshd[30047]: Failed password for root from 222.186.52.78 port 54940 ssh2
Nov  3 05:58:59 ny01 sshd[30380]: Failed password for root from 222.186.52.78 port 55650 ssh2
2019-11-03 19:22:01
218.188.210.214 attack
Nov  3 08:58:01 bouncer sshd\[24269\]: Invalid user 123Low from 218.188.210.214 port 59856
Nov  3 08:58:01 bouncer sshd\[24269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.188.210.214 
Nov  3 08:58:03 bouncer sshd\[24269\]: Failed password for invalid user 123Low from 218.188.210.214 port 59856 ssh2
...
2019-11-03 19:39:46
159.89.1.19 attackbotsspam
Wordpress bruteforce
2019-11-03 19:37:03
59.72.112.47 attackbots
2019-11-03T11:39:14.727861abusebot-3.cloudsearch.cf sshd\[18114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.72.112.47  user=ntp
2019-11-03 19:50:01
49.233.79.48 attackbots
Nov  3 10:42:44 mout sshd[31815]: Invalid user zxin20 from 49.233.79.48 port 52312
2019-11-03 19:52:47

Recently Reported IPs

49.145.233.141 137.74.246.160 35.223.136.224 113.88.97.249
183.83.90.103 139.59.20.246 36.154.240.26 103.127.57.202
51.75.253.9 1.54.84.106 120.92.212.238 54.76.247.239
201.219.247.6 113.162.49.95 180.249.41.34 115.134.81.191
129.146.96.33 31.146.84.142 103.36.103.48 88.230.239.210