Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.37.85.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33830
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.37.85.85.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 07:08:17 CST 2025
;; MSG SIZE  rcvd: 104
Host info
Host 85.85.37.48.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.85.37.48.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
5.189.16.37 attackspam
Oct 18 16:59:33 mc1 kernel: \[2697136.698230\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=27012 PROTO=TCP SPT=56208 DPT=14712 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 18 17:04:07 mc1 kernel: \[2697410.603549\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=38567 PROTO=TCP SPT=56208 DPT=1076 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 18 17:07:52 mc1 kernel: \[2697635.991938\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=10776 PROTO=TCP SPT=56208 DPT=1416 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-18 23:27:56
5.64.19.208 attackbotsspam
firewall-block, port(s): 9090/tcp
2019-10-18 23:12:28
178.176.175.215 attackspam
failed_logins
2019-10-18 23:45:09
157.230.156.51 attackspambots
Oct 18 16:28:20 ns381471 sshd[18518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.156.51
Oct 18 16:28:22 ns381471 sshd[18518]: Failed password for invalid user waski from 157.230.156.51 port 38068 ssh2
Oct 18 16:32:52 ns381471 sshd[18650]: Failed password for root from 157.230.156.51 port 50020 ssh2
2019-10-18 23:25:33
84.42.47.124 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-10-18 23:28:27
158.69.210.117 attack
$f2bV_matches
2019-10-18 23:08:25
142.93.47.125 attackspam
Oct 18 13:54:20 ovpn sshd\[32222\]: Invalid user rq from 142.93.47.125
Oct 18 13:54:20 ovpn sshd\[32222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.125
Oct 18 13:54:22 ovpn sshd\[32222\]: Failed password for invalid user rq from 142.93.47.125 port 37606 ssh2
Oct 18 13:59:06 ovpn sshd\[682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.125  user=root
Oct 18 13:59:08 ovpn sshd\[682\]: Failed password for root from 142.93.47.125 port 55988 ssh2
2019-10-18 23:14:29
185.153.208.26 attack
Automatic report - Banned IP Access
2019-10-18 23:20:38
60.172.53.138 attackbotsspam
Unauthorised access (Oct 18) SRC=60.172.53.138 LEN=52 TOS=0x10 PREC=0x40 TTL=48 ID=13781 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-18 23:11:06
106.201.238.226 attackbots
firewall-block, port(s): 1433/tcp
2019-10-18 23:07:40
197.254.44.130 attackbotsspam
port scan and connect, tcp 23 (telnet)
2019-10-18 23:33:46
175.176.24.118 attackbots
175.176.24.118 - - [18/Oct/2019:07:39:09 -0400] "GET /tel:5083942300999999.1%20union%20select%20unhex(hex(version()))%20--%20and%201%3D1 HTTP/1.1" 404 266 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
175.176.24.118 - - [18/Oct/2019:07:39:09 -0400] "GET /999999.1%20union%20select%20unhex(hex(version()))%20--%20and%201%3D1 HTTP/1.1" 404 252 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
...
2019-10-18 23:38:35
201.66.230.67 attackbotsspam
Oct 18 05:03:41 tdfoods sshd\[3844\]: Invalid user operador from 201.66.230.67
Oct 18 05:03:41 tdfoods sshd\[3844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.stv.com.br
Oct 18 05:03:43 tdfoods sshd\[3844\]: Failed password for invalid user operador from 201.66.230.67 port 56502 ssh2
Oct 18 05:08:58 tdfoods sshd\[4371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.stv.com.br  user=root
Oct 18 05:09:01 tdfoods sshd\[4371\]: Failed password for root from 201.66.230.67 port 46941 ssh2
2019-10-18 23:46:10
213.32.21.139 attack
2019-10-18T14:53:00.965782abusebot-2.cloudsearch.cf sshd\[20621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.ip-213-32-21.eu  user=root
2019-10-18 23:22:44
49.88.112.111 attack
Oct 18 16:56:03 vps647732 sshd[23676]: Failed password for root from 49.88.112.111 port 25618 ssh2
...
2019-10-18 23:15:45

Recently Reported IPs

214.245.128.107 246.140.210.136 22.189.82.47 56.66.128.199
81.177.85.241 32.31.245.23 240.245.147.234 206.165.7.230
9.211.148.17 204.93.180.0 29.88.117.74 26.40.26.230
51.19.174.110 162.41.133.133 63.132.216.90 69.167.108.234
67.193.31.167 67.3.49.51 185.132.166.26 231.216.19.57