Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 218.85.149.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14596
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;218.85.149.48.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022701 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 03:34:20 CST 2025
;; MSG SIZE  rcvd: 106
Host info
48.149.85.218.in-addr.arpa domain name pointer 48.149.85.218.broad.xm.fj.dynamic.163data.com.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.149.85.218.in-addr.arpa	name = 48.149.85.218.broad.xm.fj.dynamic.163data.com.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.209.229.54 attack
Detected by ModSecurity. Request URI: /xmlrpc.php
2020-10-07 18:15:55
206.71.159.163 attack
Port scan - 21 hits (greater than 5)
2020-10-07 18:22:23
142.44.147.28 attackbotsspam
Multiport scan 4 ports : 80(x3) 443(x4) 465(x2) 8080(x2)
2020-10-07 18:25:31
106.12.98.182 attackspam
prod8
...
2020-10-07 18:24:28
47.180.83.91 attack
Oct  6 23:39:18 server2 sshd\[16274\]: Invalid user admin from 47.180.83.91
Oct  6 23:39:19 server2 sshd\[16278\]: Invalid user admin from 47.180.83.91
Oct  6 23:39:20 server2 sshd\[16280\]: Invalid user admin from 47.180.83.91
Oct  6 23:39:22 server2 sshd\[16282\]: Invalid user admin from 47.180.83.91
Oct  6 23:39:23 server2 sshd\[16284\]: Invalid user admin from 47.180.83.91
Oct  6 23:39:25 server2 sshd\[16286\]: Invalid user admin from 47.180.83.91
2020-10-07 18:05:42
89.111.181.203 attackspambots
1602058542 - 10/07/2020 10:15:42 Host: 89.111.181.203/89.111.181.203 Port: 623 TCP Blocked
...
2020-10-07 18:05:22
190.111.151.197 attack
Lines containing failures of 190.111.151.197
Oct  6 19:22:58 kmh-sql-001-nbg01 sshd[3906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.151.197  user=r.r
Oct  6 19:23:00 kmh-sql-001-nbg01 sshd[3906]: Failed password for r.r from 190.111.151.197 port 40326 ssh2
Oct  6 19:23:02 kmh-sql-001-nbg01 sshd[3906]: Received disconnect from 190.111.151.197 port 40326:11: Bye Bye [preauth]
Oct  6 19:23:02 kmh-sql-001-nbg01 sshd[3906]: Disconnected from authenticating user r.r 190.111.151.197 port 40326 [preauth]
Oct  6 19:27:10 kmh-sql-001-nbg01 sshd[4828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.151.197  user=r.r
Oct  6 19:27:12 kmh-sql-001-nbg01 sshd[4828]: Failed password for r.r from 190.111.151.197 port 41505 ssh2
Oct  6 19:27:14 kmh-sql-001-nbg01 sshd[4828]: Received disconnect from 190.111.151.197 port 41505:11: Bye Bye [preauth]
Oct  6 19:27:14 kmh-sql-001-nbg01 sshd[48........
------------------------------
2020-10-07 18:05:57
160.153.252.9 attackspam
Oct  7 10:41:25 host1 sshd[1428117]: Failed password for root from 160.153.252.9 port 57630 ssh2
Oct  7 10:44:20 host1 sshd[1428385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.252.9  user=root
Oct  7 10:44:22 host1 sshd[1428385]: Failed password for root from 160.153.252.9 port 52282 ssh2
Oct  7 10:44:20 host1 sshd[1428385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.153.252.9  user=root
Oct  7 10:44:22 host1 sshd[1428385]: Failed password for root from 160.153.252.9 port 52282 ssh2
...
2020-10-07 18:10:05
218.92.0.176 attack
Oct  7 12:34:41 server sshd[7858]: Failed none for root from 218.92.0.176 port 4022 ssh2
Oct  7 12:34:43 server sshd[7858]: Failed password for root from 218.92.0.176 port 4022 ssh2
Oct  7 12:34:47 server sshd[7858]: Failed password for root from 218.92.0.176 port 4022 ssh2
2020-10-07 18:35:02
159.89.237.235 attackbots
159.89.237.235 - - [07/Oct/2020:05:52:13 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 18:31:37
163.172.24.135 attackspambots
ssh brute force
2020-10-07 18:30:47
112.85.42.112 attack
Oct  7 12:32:38 nopemail auth.info sshd[20416]: Unable to negotiate with 112.85.42.112 port 37368: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2020-10-07 18:39:40
102.165.30.29 attack
[portscan] tcp/81 [alter-web/web-proxy]
*(RWIN=65535)(10061547)
2020-10-07 18:12:04
209.45.63.254 attack
SSH login attempts.
2020-10-07 18:33:21
180.76.141.248 attack
Oct  6 19:25:41 web1 sshd[28481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.248  user=root
Oct  6 19:25:43 web1 sshd[28481]: Failed password for root from 180.76.141.248 port 50614 ssh2
Oct  7 10:20:44 web1 sshd[20311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.248  user=root
Oct  7 10:20:45 web1 sshd[20311]: Failed password for root from 180.76.141.248 port 42382 ssh2
Oct  7 10:22:35 web1 sshd[20932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.248  user=root
Oct  7 10:22:37 web1 sshd[20932]: Failed password for root from 180.76.141.248 port 33412 ssh2
Oct  7 10:23:25 web1 sshd[21195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.141.248  user=root
Oct  7 10:23:27 web1 sshd[21195]: Failed password for root from 180.76.141.248 port 43202 ssh2
Oct  7 10:24:12 web1 sshd[21
...
2020-10-07 18:28:52

Recently Reported IPs

222.152.134.0 198.247.183.119 205.227.81.63 164.13.223.201
98.58.78.223 75.180.57.10 12.11.49.227 135.251.163.176
149.70.55.41 61.150.158.66 81.129.148.98 140.161.212.201
100.121.77.162 156.39.24.66 188.147.13.106 161.5.153.148
92.49.78.238 251.198.101.250 7.253.229.109 73.199.157.160