Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.85.147.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.85.147.7.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023052800 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 28 15:35:39 CST 2023
;; MSG SIZE  rcvd: 104
Host info
Host 7.147.85.48.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 7.147.85.48.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
193.112.207.65 attackspam
firewall-block, port(s): 23/tcp
2020-05-08 03:52:01
77.247.108.119 attackbotsspam
May  7 21:34:39 debian-2gb-nbg1-2 kernel: \[11138963.375040\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.108.119 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=45564 PROTO=TCP SPT=58302 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-08 03:43:16
37.49.226.249 attack
2020-05-07T21:51:31.844191struts4.enskede.local sshd\[18246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.249  user=root
2020-05-07T21:51:33.504008struts4.enskede.local sshd\[18246\]: Failed password for root from 37.49.226.249 port 56304 ssh2
2020-05-07T21:51:38.824462struts4.enskede.local sshd\[18250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.249  user=root
2020-05-07T21:51:40.928028struts4.enskede.local sshd\[18250\]: Failed password for root from 37.49.226.249 port 47522 ssh2
2020-05-07T21:51:46.091024struts4.enskede.local sshd\[18253\]: Invalid user admin from 37.49.226.249 port 38828
...
2020-05-08 04:08:30
162.243.142.16 attack
firewall-block, port(s): 137/udp
2020-05-08 03:59:14
222.186.15.62 attackspam
05/07/2020-15:32:54.782673 222.186.15.62 Protocol: 6 ET SCAN Potential SSH Scan
2020-05-08 03:38:08
178.128.108.100 attack
May  7 21:30:27 mail sshd[11471]: Failed password for root from 178.128.108.100 port 45000 ssh2
May  7 21:44:06 mail sshd[19746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.108.100 
...
2020-05-08 03:54:14
51.159.64.153 attackbots
scan z
2020-05-08 04:09:21
124.127.206.4 attack
May  7 18:58:39 scw-6657dc sshd[13337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.127.206.4
May  7 18:58:39 scw-6657dc sshd[13337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.127.206.4
May  7 18:58:41 scw-6657dc sshd[13337]: Failed password for invalid user demo from 124.127.206.4 port 38821 ssh2
...
2020-05-08 03:39:04
54.38.53.251 attackbotsspam
May  7 13:04:50 server1 sshd\[24784\]: Failed password for invalid user demo from 54.38.53.251 port 34556 ssh2
May  7 13:08:05 server1 sshd\[25711\]: Invalid user ajay from 54.38.53.251
May  7 13:08:05 server1 sshd\[25711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 
May  7 13:08:08 server1 sshd\[25711\]: Failed password for invalid user ajay from 54.38.53.251 port 34950 ssh2
May  7 13:11:19 server1 sshd\[26695\]: Invalid user admin from 54.38.53.251
...
2020-05-08 03:48:18
46.101.6.56 attack
May  7 21:50:57 debian-2gb-nbg1-2 kernel: \[11139941.237048\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=46.101.6.56 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16621 PROTO=TCP SPT=58104 DPT=30652 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-08 04:09:39
123.21.217.79 attack
Lines containing failures of 123.21.217.79
May  7 13:11:54 neweola sshd[31844]: Invalid user admin from 123.21.217.79 port 53772
May  7 13:11:54 neweola sshd[31844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.217.79 
May  7 13:11:56 neweola sshd[31844]: Failed password for invalid user admin from 123.21.217.79 port 53772 ssh2
May  7 13:11:57 neweola sshd[31844]: Connection closed by invalid user admin 123.21.217.79 port 53772 [preauth]
May  7 13:15:46 neweola sshd[31963]: Invalid user admin from 123.21.217.79 port 54142
May  7 13:15:46 neweola sshd[31963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.217.79 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.21.217.79
2020-05-08 03:42:45
51.158.22.213 attack
spam
2020-05-08 03:43:39
116.132.6.182 attack
Unauthorized connection attempt detected from IP address 116.132.6.182 to port 10011 [T]
2020-05-08 04:00:45
95.208.99.240 attack
Lines containing failures of 95.208.99.240
May  7 19:13:17 commu postfix/postscreen[22573]: CONNECT from [95.208.99.240]:65075 to [91.184.37.231]:25
May  7 19:13:17 commu postfix/postscreen[22573]: CONNECT from [95.208.99.240]:63773 to [91.184.37.231]:25
May  7 19:13:17 commu postfix/postscreen[22573]: CONNECT from [95.208.99.240]:65087 to [91.184.37.231]:25
May  7 19:13:17 commu postfix/postscreen[22573]: CONNECT from [95.208.99.240]:61431 to [91.184.37.231]:25
May x@x
May x@x
May  7 19:13:17 commu postfix/postscreen[22573]: PREGREET 27 after 0.02 from [95.208.99.240]:65075: EHLO we-guess.mozilla.org

May  7 19:13:17 commu postfix/postscreen[22573]: PREGREET 33 after 0.02 from [95.208.99.240]:63773: EHLO we-guess.mozilla.org
QUhostname

May  7 19:13:17 commu postfix/postscreen[22573]: PREGREET 33 after 0.03 from [95.208.99.240]:65087: EHLO we-guess.mozilla.org
QUhostname

May  7 19:13:17 commu postfix/postscreen[22573]: PREGREET 33 after 0.03 from [95.208........
------------------------------
2020-05-08 03:39:36
85.10.21.212 attack
DATE:2020-05-07 19:20:34, IP:85.10.21.212, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-05-08 03:38:42

Recently Reported IPs

9.212.107.134 87.36.35.168 221.163.191.86 174.253.82.251
145.23.214.179 89.107.156.202 125.98.114.175 94.83.146.243
67.195.161.167 40.146.223.242 252.105.182.31 255.44.229.180
213.90.201.217 38.1.15.105 73.151.163.17 107.148.132.46
8.199.46.39 114.226.236.118 222.193.72.132 69.49.112.64