Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.31.48.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;158.31.48.149.			IN	A

;; AUTHORITY SECTION:
.			306	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 08:52:04 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 149.48.31.158.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.48.31.158.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.53.108.16 attackspambots
Aug  9 07:36:02 abendstille sshd\[10984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.108.16  user=root
Aug  9 07:36:03 abendstille sshd\[10984\]: Failed password for root from 106.53.108.16 port 35262 ssh2
Aug  9 07:39:37 abendstille sshd\[14410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.108.16  user=root
Aug  9 07:39:39 abendstille sshd\[14410\]: Failed password for root from 106.53.108.16 port 46756 ssh2
Aug  9 07:43:11 abendstille sshd\[17749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.108.16  user=root
...
2020-08-09 18:34:06
218.92.0.148 attackbotsspam
Aug  9 06:17:49 NPSTNNYC01T sshd[31973]: Failed password for root from 218.92.0.148 port 22326 ssh2
Aug  9 06:18:02 NPSTNNYC01T sshd[31981]: Failed password for root from 218.92.0.148 port 12010 ssh2
...
2020-08-09 18:22:23
201.116.194.210 attackbotsspam
2020-08-09T11:46:29.865101vps773228.ovh.net sshd[9615]: Failed password for root from 201.116.194.210 port 55966 ssh2
2020-08-09T11:49:39.043471vps773228.ovh.net sshd[9635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.194.210  user=root
2020-08-09T11:49:41.166175vps773228.ovh.net sshd[9635]: Failed password for root from 201.116.194.210 port 32835 ssh2
2020-08-09T11:52:57.959114vps773228.ovh.net sshd[9679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.194.210  user=root
2020-08-09T11:53:00.262822vps773228.ovh.net sshd[9679]: Failed password for root from 201.116.194.210 port 7140 ssh2
...
2020-08-09 18:02:01
199.192.20.159 attack
199.192.20.159 - - [09/Aug/2020:08:53:06 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
199.192.20.159 - - [09/Aug/2020:08:53:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
199.192.20.159 - - [09/Aug/2020:08:53:09 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-09 18:16:03
104.144.231.222 attack
Registration form abuse
2020-08-09 18:23:20
104.223.143.101 attack
Aug  8 20:20:11 sachi sshd\[6301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
Aug  8 20:20:13 sachi sshd\[6301\]: Failed password for root from 104.223.143.101 port 44058 ssh2
Aug  8 20:23:24 sachi sshd\[6517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
Aug  8 20:23:27 sachi sshd\[6517\]: Failed password for root from 104.223.143.101 port 47402 ssh2
Aug  8 20:26:27 sachi sshd\[6754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
2020-08-09 18:11:15
94.23.33.22 attackspambots
fail2ban -- 94.23.33.22
...
2020-08-09 18:07:08
221.249.140.17 attackspambots
Aug  9 09:52:46 gw1 sshd[26104]: Failed password for root from 221.249.140.17 port 40138 ssh2
...
2020-08-09 18:34:38
189.127.35.218 attackbots
Attempted Brute Force (dovecot)
2020-08-09 18:03:07
117.51.159.1 attack
reported through recidive - multiple failed attempts(SSH)
2020-08-09 18:21:23
51.91.136.28 attackbots
51.91.136.28 - - \[09/Aug/2020:10:16:25 +0200\] "POST /wp-login.php HTTP/1.0" 200 5615 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.91.136.28 - - \[09/Aug/2020:10:16:26 +0200\] "POST /wp-login.php HTTP/1.0" 200 5435 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.91.136.28 - - \[09/Aug/2020:10:16:28 +0200\] "POST /wp-login.php HTTP/1.0" 200 5428 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-08-09 18:13:36
125.227.153.232 attackspambots
Aug  9 06:12:38 OPSO sshd\[23587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.153.232  user=root
Aug  9 06:12:39 OPSO sshd\[23587\]: Failed password for root from 125.227.153.232 port 48013 ssh2
Aug  9 06:14:43 OPSO sshd\[23941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.153.232  user=root
Aug  9 06:14:46 OPSO sshd\[23941\]: Failed password for root from 125.227.153.232 port 35707 ssh2
Aug  9 06:16:52 OPSO sshd\[24510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.153.232  user=root
2020-08-09 18:39:51
202.70.34.82 attackspambots
Dovecot Invalid User Login Attempt.
2020-08-09 18:27:13
134.249.214.5 attackspam
Last visit 2020-08-08 05:21:47
2020-08-09 18:34:24
125.227.6.89 attackbotsspam
 TCP (SYN) 125.227.6.89:47319 -> port 23, len 44
2020-08-09 18:41:12

Recently Reported IPs

158.3.168.97 158.31.222.239 158.32.219.167 158.30.37.202
158.3.204.3 158.30.253.33 158.30.49.234 158.3.60.22
158.3.191.142 158.34.196.93 158.30.28.204 158.30.164.124
158.3.218.159 158.3.98.147 158.3.224.242 158.32.115.101
158.32.216.171 158.31.9.214 158.3.65.55 158.30.155.23