162.218.48.131

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
162.218.48.74	attack	suspicious action Tue, 03 Mar 2020 10:21:50 -0300	2020-03-04 04:00:57
162.218.48.74	attackspambots	162.218.48.74 - - [20/Jul/2019:03:27:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.218.48.74 - - [20/Jul/2019:03:27:09 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.218.48.74 - - [20/Jul/2019:03:27:10 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.218.48.74 - - [20/Jul/2019:03:27:11 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.218.48.74 - - [20/Jul/2019:03:27:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.218.48.74 - - [20/Jul/2019:03:27:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-20 15:41:40

Type

Details

Datetime

162.218.48.74

attack

suspicious action Tue, 03 Mar 2020 10:21:50 -0300

2020-03-04 04:00:57

162.218.48.74

attackspambots

162.218.48.74 - - [20/Jul/2019:03:27:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.218.48.74 - - [20/Jul/2019:03:27:09 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.218.48.74 - - [20/Jul/2019:03:27:10 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.218.48.74 - - [20/Jul/2019:03:27:11 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.218.48.74 - - [20/Jul/2019:03:27:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.218.48.74 - - [20/Jul/2019:03:27:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

2019-07-20 15:41:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.218.48.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;162.218.48.131.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 198 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 14:03:47 CST 2022
;; MSG SIZE  rcvd: 107

Host info

131.48.218.162.in-addr.arpa domain name pointer server1.trentahost.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
131.48.218.162.in-addr.arpa	name = server1.trentahost.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.203.83.37	attack	Jan 4 16:07:42 plex sshd[14512]: Invalid user sentry from 159.203.83.37 port 55041	2020-01-05 00:14:11
142.93.235.47	attackbots	Unauthorized connection attempt detected from IP address 142.93.235.47 to port 2220 [J]	2020-01-05 00:03:33
201.41.148.228	attackbotsspam	SSH Login Bruteforce	2020-01-05 00:22:19
167.71.83.165	attack	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-01-05 00:24:00
89.216.47.154	attack	Unauthorized connection attempt detected from IP address 89.216.47.154 to port 2220 [J]	2020-01-05 00:27:07
45.55.142.207	attack	Unauthorized connection attempt detected from IP address 45.55.142.207 to port 2220 [J]	2020-01-05 00:38:25
51.254.140.235	attackspambots	Jan 4 11:12:06 firewall sshd[23009]: Invalid user demon from 51.254.140.235 Jan 4 11:12:08 firewall sshd[23009]: Failed password for invalid user demon from 51.254.140.235 port 42860 ssh2 Jan 4 11:14:55 firewall sshd[23058]: Invalid user ooq from 51.254.140.235 ...	2020-01-05 00:42:55
61.0.236.129	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-05 00:30:22
72.249.235.194	attackspambots	2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) 2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) 2020-01-04 07:11:54 H=(thurlowpa.com) [72.249.235.194]:58593 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/72.249.235.194) ...	2020-01-05 00:41:37
142.93.47.125	attackbotsspam	Unauthorized connection attempt detected from IP address 142.93.47.125 to port 2220 [J]	2020-01-05 00:29:24
93.80.10.11	attackbots	20/1/4@08:12:39: FAIL: Alarm-Network address from=93.80.10.11 ...	2020-01-05 00:06:16
164.177.42.33	attackspambots	Unauthorized connection attempt detected from IP address 164.177.42.33 to port 2220 [J]	2020-01-05 00:30:47
178.128.68.121	attack	178.128.68.121 - - [04/Jan/2020:14:12:37 +0100] "POST /wp-login.php HTTP/1.1" 200 3121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.68.121 - - [04/Jan/2020:14:12:38 +0100] "POST /wp-login.php HTTP/1.1" 200 3100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-01-05 00:07:19
41.237.130.11	attackspam	Jan 4 14:12:01 jane sshd[24009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.237.130.11 Jan 4 14:12:02 jane sshd[24009]: Failed password for invalid user user from 41.237.130.11 port 58665 ssh2 ...	2020-01-05 00:33:48
84.15.209.197	attackspambots	proto=tcp . spt=49133 . dpt=25 . (Found on Dark List de Jan 04) (249)	2020-01-05 00:32:01

Recently Reported IPs

162.217.114.67	162.217.170.82	162.219.29.68	162.219.163.220
162.219.29.183	162.219.29.71	162.217.169.50	162.219.251.21
162.219.45.10	162.220.163.247	162.220.14.208	162.220.162.242
162.218.137.39	162.220.165.235	162.220.167.62	162.220.220.146
162.220.165.167	162.220.4.114	162.220.215.46	162.220.52.192