Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.12.158.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;29.12.158.138.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 10:04:10 CST 2025
;; MSG SIZE  rcvd: 106
Host info
Host 138.158.12.29.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.158.12.29.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
95.46.140.49 attackspam
Automatic report - WordPress Brute Force
2020-09-10 20:09:05
177.107.35.26 attackbotsspam
2020-09-10 08:11:02,544 fail2ban.actions: WARNING [ssh] Ban 177.107.35.26
2020-09-10 20:34:31
122.247.10.24 attackbotsspam
Sep 10 10:59:09 root sshd[10199]: Failed password for invalid user elastic from 122.247.10.24 port 55964 ssh2
...
2020-09-10 19:57:11
218.161.60.227 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-10 20:27:56
86.247.118.135 attack
Sep 10 12:45:05 ovpn sshd[12580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.247.118.135  user=r.r
Sep 10 12:45:07 ovpn sshd[12580]: Failed password for r.r from 86.247.118.135 port 58148 ssh2
Sep 10 12:45:07 ovpn sshd[12580]: Received disconnect from 86.247.118.135 port 58148:11: Bye Bye [preauth]
Sep 10 12:45:07 ovpn sshd[12580]: Disconnected from 86.247.118.135 port 58148 [preauth]
Sep 10 12:55:05 ovpn sshd[15160]: Invalid user admin from 86.247.118.135
Sep 10 12:55:05 ovpn sshd[15160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.247.118.135
Sep 10 12:55:07 ovpn sshd[15160]: Failed password for invalid user admin from 86.247.118.135 port 35324 ssh2
Sep 10 12:55:07 ovpn sshd[15160]: Received disconnect from 86.247.118.135 port 35324:11: Bye Bye [preauth]
Sep 10 12:55:07 ovpn sshd[15160]: Disconnected from 86.247.118.135 port 35324 [preauth]

........
-----------------------------------------------
https://www.bloc
2020-09-10 20:40:38
190.86.109.147 attackbots
Unauthorized connection attempt from IP address 190.86.109.147 on Port 445(SMB)
2020-09-10 20:00:52
49.233.135.26 attack
(sshd) Failed SSH login from 49.233.135.26 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  9 19:19:51 srv sshd[15181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26  user=root
Sep  9 19:19:52 srv sshd[15181]: Failed password for root from 49.233.135.26 port 60804 ssh2
Sep  9 19:40:54 srv sshd[15616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26  user=root
Sep  9 19:40:57 srv sshd[15616]: Failed password for root from 49.233.135.26 port 49372 ssh2
Sep  9 19:45:36 srv sshd[15709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26  user=root
2020-09-10 20:07:51
2.39.120.180 attack
Brute-force attempt banned
2020-09-10 20:36:41
37.59.229.31 attack
Failed password for invalid user leonidas from 37.59.229.31 port 57734 ssh2
2020-09-10 20:26:25
124.104.181.222 attackbots
124.104.181.222 - - [09/Sep/2020:17:31:29 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
124.104.181.222 - - [09/Sep/2020:17:32:30 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
124.104.181.222 - - [09/Sep/2020:17:33:31 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
124.104.181.222 - - [09/Sep/2020:17:34:34 +0000] "POST /xmlrpc.php HTTP/1.1" 503 19382 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
124.104.181.222 - - [09/Sep/2020:17:34:35 +0000] "POST /wp-login.php HTTP/1.1" 503 19240 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"
2020-09-10 20:05:31
157.230.153.75 attack
Sep 10 14:10:47 haigwepa sshd[9592]: Failed password for root from 157.230.153.75 port 50481 ssh2
...
2020-09-10 20:18:47
106.52.130.172 attack
prod8
...
2020-09-10 20:34:52
5.152.159.31 attackspambots
Sep 10 12:41:26 journals sshd\[121304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31  user=root
Sep 10 12:41:29 journals sshd\[121304\]: Failed password for root from 5.152.159.31 port 60643 ssh2
Sep 10 12:45:03 journals sshd\[121652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31  user=root
Sep 10 12:45:05 journals sshd\[121652\]: Failed password for root from 5.152.159.31 port 35243 ssh2
Sep 10 12:48:52 journals sshd\[122082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31  user=root
...
2020-09-10 20:14:39
136.49.210.126 attack
136.49.210.126 (US/United States/-), 3 distributed sshd attacks on account [pi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 06:31:33 internal2 sshd[25588]: Invalid user pi from 91.96.28.254 port 54428
Sep 10 06:31:34 internal2 sshd[25591]: Invalid user pi from 91.96.28.254 port 54434
Sep 10 06:53:56 internal2 sshd[10150]: Invalid user pi from 136.49.210.126 port 52514

IP Addresses Blocked:

91.96.28.254 (DE/Germany/dyndsl-091-096-028-254.ewe-ip-backbone.de)
2020-09-10 20:10:34
104.236.33.155 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-10T10:15:19Z and 2020-09-10T10:20:35Z
2020-09-10 20:19:15

Recently Reported IPs

114.255.168.50 255.118.84.214 2.18.122.99 218.78.65.120
20.186.23.100 217.94.33.122 145.213.58.147 30.106.63.243
239.158.248.19 119.62.48.150 38.172.252.17 207.91.75.10
109.17.230.113 170.226.222.83 93.200.90.91 231.89.216.182
198.161.246.123 126.81.160.94 242.250.205.37 211.94.184.74