Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.166.18.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15964
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.166.18.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 19:32:14 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 42.18.166.48.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.18.166.48.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
223.95.102.143 attack
Unauthorized connection attempt detected from IP address 223.95.102.143 to port 23 [J]
2020-01-24 08:04:02
104.248.1.47 attackbotsspam
Unauthorized connection attempt detected from IP address 104.248.1.47 to port 2220 [J]
2020-01-24 08:11:23
5.190.202.245 attack
Telnet/23 MH Probe, BF, Hack -
2020-01-24 08:24:16
94.102.49.102 attack
Scanning random ports - tries to find possible vulnerable services
2020-01-24 08:06:09
218.104.231.2 attack
Unauthorized connection attempt detected from IP address 218.104.231.2 to port 2220 [J]
2020-01-24 08:09:48
112.50.194.155 attack
Jan 23 20:20:30 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=112.50.194.155, lip=212.111.212.230, session=\
Jan 23 20:20:39 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=112.50.194.155, lip=212.111.212.230, session=\
Jan 23 20:20:51 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 11 secs\): user=\, method=PLAIN, rip=112.50.194.155, lip=212.111.212.230, session=\
Jan 23 20:22:00 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=112.50.194.155, lip=212.111.212.230, session=\
Jan 23 20:22:09 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=112.50.
...
2020-01-24 08:14:49
203.66.168.81 attackbotsspam
Unauthorized connection attempt detected from IP address 203.66.168.81 to port 2220 [J]
2020-01-24 07:59:49
195.84.49.20 attackbots
Jan 24 02:12:35 pkdns2 sshd\[5156\]: Invalid user ubuntu from 195.84.49.20Jan 24 02:12:36 pkdns2 sshd\[5156\]: Failed password for invalid user ubuntu from 195.84.49.20 port 59498 ssh2Jan 24 02:15:29 pkdns2 sshd\[5356\]: Invalid user car from 195.84.49.20Jan 24 02:15:31 pkdns2 sshd\[5356\]: Failed password for invalid user car from 195.84.49.20 port 59278 ssh2Jan 24 02:18:15 pkdns2 sshd\[5514\]: Invalid user teo from 195.84.49.20Jan 24 02:18:18 pkdns2 sshd\[5514\]: Failed password for invalid user teo from 195.84.49.20 port 59056 ssh2
...
2020-01-24 08:26:13
167.114.251.122 attackbotsspam
Automatic report - SSH Brute-Force Attack
2020-01-24 08:28:04
139.59.82.105 attackbots
Jan 22 06:05:57 euve59663 sshd[31037]: reveeclipse mapping checking getaddr=
info for vip.india [139.59.82.105] failed - POSSIBLE BREAK-IN ATTEMPT!
Jan 22 06:05:57 euve59663 sshd[31037]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D139=
.59.82.105  user=3Dr.r
Jan 22 06:05:59 euve59663 sshd[31037]: Failed password for r.r from 13=
9.59.82.105 port 50396 ssh2
Jan 22 06:05:59 euve59663 sshd[31037]: Received disconnect from 139.59.=
82.105: 11: Bye Bye [preauth]
Jan 22 06:17:56 euve59663 sshd[31192]: reveeclipse mapping checking getaddr=
info for vip.india [139.59.82.105] failed - POSSIBLE BREAK-IN ATTEMPT!
Jan 22 06:17:56 euve59663 sshd[31192]: Invalid user ll from 139.59.82.1=
05
Jan 22 06:17:56 euve59663 sshd[31192]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D139=
.59.82.105=20
Jan 22 06:17:58 euve59663 sshd[31192]: Failed password for invalid user=
 ll fro........
-------------------------------
2020-01-24 08:06:57
128.199.52.45 attack
Jan 23 23:34:43 hcbbdb sshd\[28603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45  user=root
Jan 23 23:34:45 hcbbdb sshd\[28603\]: Failed password for root from 128.199.52.45 port 40092 ssh2
Jan 23 23:37:49 hcbbdb sshd\[29007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45  user=root
Jan 23 23:37:51 hcbbdb sshd\[29007\]: Failed password for root from 128.199.52.45 port 36094 ssh2
Jan 23 23:40:54 hcbbdb sshd\[29413\]: Invalid user youcef from 128.199.52.45
Jan 23 23:40:54 hcbbdb sshd\[29413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.52.45
2020-01-24 07:55:49
93.160.29.57 attack
RDP Brute-Force (honeypot 3)
2020-01-24 07:56:36
222.186.42.75 attack
Unauthorized connection attempt detected from IP address 222.186.42.75 to port 22 [T]
2020-01-24 08:27:06
185.156.73.52 attack
01/23/2020-19:18:25.055595 185.156.73.52 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-01-24 08:22:49
1.203.115.141 attackbotsspam
Invalid user henry from 1.203.115.141 port 45828
2020-01-24 08:02:44

Recently Reported IPs

115.195.43.140 62.53.42.20 204.75.33.194 48.93.122.63
54.68.4.105 180.97.103.160 65.224.239.252 156.21.85.40
167.113.239.46 58.86.183.35 178.181.43.36 220.7.73.77
146.94.89.235 59.145.125.244 183.54.82.93 83.119.100.44
216.247.140.27 33.42.227.108 74.172.146.148 68.191.190.160