Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: IANA Special-Purpose Address

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.199.1.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;252.199.1.2.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024052501 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 26 04:02:01 CST 2024
;; MSG SIZE  rcvd: 104
Host info
Host 2.1.199.252.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.1.199.252.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
58.18.136.56 attackspam
2019-11-01T22:48:02Z - RDP login failed multiple times. (58.18.136.56)
2019-11-02 07:19:08
104.238.141.84 attackspambots
11/01/2019-16:12:52.244433 104.238.141.84 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-02 07:14:16
217.182.197.8 attackbots
\[2019-11-01 17:47:00\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T17:47:00.656-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="18105078510408",SessionID="0x7fdf2c3e6778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/217.182.197.8/65281",ACLName="no_extension_match"
\[2019-11-01 17:50:15\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T17:50:15.633-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="18205078510408",SessionID="0x7fdf2c62c4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/217.182.197.8/56943",ACLName="no_extension_match"
\[2019-11-01 17:53:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-01T17:53:22.218-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="18305078510408",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/217.182.197.8/50695",ACLName="no_extens
2019-11-02 06:44:19
14.198.6.164 attackspam
Nov  1 13:00:22 eddieflores sshd\[12524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=014198006164.ctinets.com  user=root
Nov  1 13:00:24 eddieflores sshd\[12524\]: Failed password for root from 14.198.6.164 port 57410 ssh2
Nov  1 13:04:09 eddieflores sshd\[12858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=014198006164.ctinets.com  user=root
Nov  1 13:04:10 eddieflores sshd\[12858\]: Failed password for root from 14.198.6.164 port 39316 ssh2
Nov  1 13:07:49 eddieflores sshd\[13338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=014198006164.ctinets.com  user=root
2019-11-02 07:16:47
213.219.38.251 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/213.219.38.251/ 
 
 US - 1H : (208)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN63949 
 
 IP : 213.219.38.251 
 
 CIDR : 213.219.36.0/22 
 
 PREFIX COUNT : 361 
 
 UNIQUE IP COUNT : 488192 
 
 
 ATTACKS DETECTED ASN63949 :  
  1H - 3 
  3H - 5 
  6H - 9 
 12H - 15 
 24H - 17 
 
 DateTime : 2019-11-01 21:13:06 
 
 INFO : DNS DENIED Scan Detected and Blocked by ADMIN  - data recovery
2019-11-02 07:01:28
196.52.43.58 attack
Port scan: Attack repeated for 24 hours
2019-11-02 07:06:52
82.50.153.197 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/82.50.153.197/ 
 
 IT - 1H : (96)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN3269 
 
 IP : 82.50.153.197 
 
 CIDR : 82.50.0.0/16 
 
 PREFIX COUNT : 550 
 
 UNIQUE IP COUNT : 19507712 
 
 
 ATTACKS DETECTED ASN3269 :  
  1H - 7 
  3H - 10 
  6H - 16 
 12H - 29 
 24H - 66 
 
 DateTime : 2019-11-01 21:12:53 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-02 07:11:51
188.166.87.238 attackspambots
$f2bV_matches
2019-11-02 07:15:39
103.253.2.174 attackbots
proto=tcp  .  spt=48236  .  dpt=25  .     (Found on   Dark List de Nov 01)     (657)
2019-11-02 06:51:01
212.64.12.110 attack
Nov  1 12:48:58 php1 sshd\[312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.110  user=root
Nov  1 12:49:01 php1 sshd\[312\]: Failed password for root from 212.64.12.110 port 38570 ssh2
Nov  1 12:53:32 php1 sshd\[933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.110  user=root
Nov  1 12:53:34 php1 sshd\[933\]: Failed password for root from 212.64.12.110 port 50288 ssh2
Nov  1 12:58:15 php1 sshd\[1849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.12.110  user=root
2019-11-02 07:00:29
77.235.21.147 attack
Nov  1 20:58:35 keyhelp sshd[15254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.235.21.147  user=r.r
Nov  1 20:58:38 keyhelp sshd[15254]: Failed password for r.r from 77.235.21.147 port 49102 ssh2
Nov  1 20:58:38 keyhelp sshd[15254]: Received disconnect from 77.235.21.147 port 49102:11: Bye Bye [preauth]
Nov  1 20:58:38 keyhelp sshd[15254]: Disconnected from 77.235.21.147 port 49102 [preauth]
Nov  1 21:03:29 keyhelp sshd[15829]: Invalid user admin from 77.235.21.147
Nov  1 21:03:29 keyhelp sshd[15829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.235.21.147
Nov  1 21:03:32 keyhelp sshd[15829]: Failed password for invalid user admin from 77.235.21.147 port 38054 ssh2
Nov  1 21:03:32 keyhelp sshd[15829]: Received disconnect from 77.235.21.147 port 38054:11: Bye Bye [preauth]
Nov  1 21:03:32 keyhelp sshd[15829]: Disconnected from 77.235.21.147 port 38054 [preauth]


........
---------------------------------------------
2019-11-02 07:16:30
111.252.59.38 attackbots
23/tcp
[2019-11-01]1pkt
2019-11-02 07:13:09
185.73.113.103 attack
Nov  1 20:13:18 work-partkepr sshd\[23684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.73.113.103  user=root
Nov  1 20:13:19 work-partkepr sshd\[23684\]: Failed password for root from 185.73.113.103 port 34162 ssh2
...
2019-11-02 06:56:29
201.76.162.254 attackbotsspam
Fail2Ban Ban Triggered
2019-11-02 07:13:49
5.135.192.61 attackspam
Nov  1 18:55:20 ny01 sshd[15289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.192.61
Nov  1 18:55:22 ny01 sshd[15289]: Failed password for invalid user wasd from 5.135.192.61 port 48574 ssh2
Nov  1 18:59:11 ny01 sshd[15825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.192.61
2019-11-02 07:08:16

Recently Reported IPs

95.26.40.216 44.122.163.90 95.81.134.68 154.96.229.57
169.121.212.9 186.61.97.191 71.1.61.145 199.135.40.211
228.34.75.155 223.143.161.127 70.48.16.249 47.128.36.17
215.242.223.182 199.67.217.85 248.99.184.127 63.161.34.217
131.190.83.11 24.191.251.46 235.108.62.145 242.148.24.220