Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.248.212.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62030
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;29.248.212.148.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 23:54:29 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 148.212.248.29.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.212.248.29.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
207.148.91.178 attackbots
207.148.91.178 - - \[23/Jun/2019:12:03:47 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.148.91.178 - - \[23/Jun/2019:12:03:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.148.91.178 - - \[23/Jun/2019:12:03:49 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.148.91.178 - - \[23/Jun/2019:12:03:50 +0200\] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.148.91.178 - - \[23/Jun/2019:12:03:50 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.148.91.178 - - \[23/Jun/2019:12:03:51 +0200\] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6
2019-06-23 18:51:35
84.236.119.66 attack
SSH/22 MH Probe, BF, Hack -
2019-06-23 19:06:33
177.87.253.108 attackspam
failed_logins
2019-06-23 19:23:28
126.241.50.223 attack
Excessive Port-Scanning
2019-06-23 18:56:05
189.254.33.157 attack
Jun 23 13:08:55 bouncer sshd\[3763\]: Invalid user hadoop from 189.254.33.157 port 42011
Jun 23 13:08:55 bouncer sshd\[3763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.254.33.157 
Jun 23 13:08:57 bouncer sshd\[3763\]: Failed password for invalid user hadoop from 189.254.33.157 port 42011 ssh2
...
2019-06-23 19:21:56
167.99.232.88 attackspambots
Jun 23 10:03:47 MK-Soft-VM4 sshd\[13244\]: Invalid user zhao from 167.99.232.88 port 39120
Jun 23 10:03:47 MK-Soft-VM4 sshd\[13244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.232.88
Jun 23 10:03:49 MK-Soft-VM4 sshd\[13244\]: Failed password for invalid user zhao from 167.99.232.88 port 39120 ssh2
...
2019-06-23 18:54:52
178.197.234.137 attack
Jun2312:06:48server4dovecot:imap-login:Disconnected:Inactivity\(authfailed\,1attemptsin179secs\):user=\\,method=PLAIN\,rip=178.197.234.137\,lip=148.251.104.70\,TLS\,session=\Jun2312:28:34server4dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=178.197.234.137\,lip=148.251.104.70\,TLS\,session=\Jun2312:28:40server4dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=178.197.234.137\,lip=148.251.104.70\,TLS\,session=\Jun2312:28:52server4dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=178.197.234.137\,lip=148.251.104.70\,TLS\,session=\<5pckKfuLlA6yxeqJ\>Jun2312:28:55server4dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=178.197.234.137\,lip=148.251.104.70\,TLS\,session=\
2019-06-23 18:54:18
211.38.244.205 attackspam
2019-06-23T07:04:15.119606mizuno.rwx.ovh sshd[30273]: Connection from 211.38.244.205 port 47322 on 78.46.61.178 port 22
2019-06-23T07:04:16.816852mizuno.rwx.ovh sshd[30273]: Invalid user jue from 211.38.244.205 port 47322
2019-06-23T07:04:16.825076mizuno.rwx.ovh sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.244.205
2019-06-23T07:04:15.119606mizuno.rwx.ovh sshd[30273]: Connection from 211.38.244.205 port 47322 on 78.46.61.178 port 22
2019-06-23T07:04:16.816852mizuno.rwx.ovh sshd[30273]: Invalid user jue from 211.38.244.205 port 47322
2019-06-23T07:04:18.799425mizuno.rwx.ovh sshd[30273]: Failed password for invalid user jue from 211.38.244.205 port 47322 ssh2
...
2019-06-23 18:45:12
148.70.108.156 attackbots
Jun 23 12:06:34 [munged] sshd[6078]: Invalid user victorien from 148.70.108.156 port 51222
Jun 23 12:06:34 [munged] sshd[6078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.108.156
2019-06-23 18:55:28
31.202.101.40 attackspambots
HACKER BASTARDE ! FICKT EUCH

2019-06-22 23:48:49	Access	31.202.101.40	301	GET /xmlrpc.php HTTP/1.1		Chrome 73.75 7|Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36	503 	Apache-Zugriff
2019-06-22 23:48:50	Error	31.202.101.40	404	GET /xmlrpc.php HTTP/1.1		Chrome 73.75 7|Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36	1.03 K	Apache-Zugriff
2019-06-22 23:48:50	Access	31.202.101.40	301	GET /wp-login.php HTTP/1.1		Chrome 73.75 7|Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36	507 	Apache-Zugriff
2019-06-22 23:48:50	Access	31.202.101.40	200	GET /wp-login.php HTTP/1.1		Chrome 73.75 7|Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36	541 	Apache-Zugriff
2019-06-23 19:11:51
92.118.37.84 attackspambots
Jun 23 12:35:37 h2177944 kernel: \[2630106.397687\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=46073 PROTO=TCP SPT=41610 DPT=62078 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 23 12:37:13 h2177944 kernel: \[2630202.897490\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54135 PROTO=TCP SPT=41610 DPT=24210 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 23 12:38:18 h2177944 kernel: \[2630267.573970\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=60468 PROTO=TCP SPT=41610 DPT=33818 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 23 12:38:26 h2177944 kernel: \[2630275.587520\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=46088 PROTO=TCP SPT=41610 DPT=30165 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 23 12:39:17 h2177944 kernel: \[2630327.107390\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.84 DST=85.214.117.9
2019-06-23 19:04:58
81.22.45.254 attack
23.06.2019 10:34:04 Connection to port 3300 blocked by firewall
2019-06-23 18:48:30
187.120.140.103 attackbots
$f2bV_matches
2019-06-23 19:14:44
87.116.7.52 attack
Jun 23 11:49:31 indra sshd[415022]: Invalid user notused from 87.116.7.52
Jun 23 11:49:32 indra sshd[415022]: Failed password for invalid user notused from 87.116.7.52 port 49968 ssh2
Jun 23 11:49:32 indra sshd[415022]: Received disconnect from 87.116.7.52: 11: Bye Bye [preauth]
Jun 23 12:03:52 indra sshd[417641]: Invalid user pramod from 87.116.7.52
Jun 23 12:03:54 indra sshd[417641]: Failed password for invalid user pramod from 87.116.7.52 port 47506 ssh2
Jun 23 12:03:54 indra sshd[417641]: Received disconnect from 87.116.7.52: 11: Bye Bye [preauth]
Jun 23 12:05:06 indra sshd[418157]: Invalid user alan from 87.116.7.52


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=87.116.7.52
2019-06-23 18:56:51
168.196.151.104 attackbotsspam
$f2bV_matches
2019-06-23 19:07:57

Recently Reported IPs

131.178.144.190 9.168.58.39 195.20.145.205 129.223.195.118
86.249.149.7 18.86.227.19 84.170.88.191 156.155.170.213
230.90.172.173 236.47.101.114 166.51.202.139 192.125.108.74
53.67.58.147 230.78.155.168 69.246.23.20 107.214.52.112
49.38.187.93 55.218.145.39 150.129.226.168 40.30.185.155