Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: IP Services SP. Z.O.O.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 22:19:30
attackspambots
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 14:38:20
attackspam
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 06:29:10
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.131.216.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23943
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.131.216.48.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092202 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 06:29:05 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 48.216.131.94.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.216.131.94.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
94.179.128.205 attack
Unauthorized connection attempt detected from IP address 94.179.128.205 to port 2220 [J]
2020-01-29 06:23:43
111.205.178.39 attackspam
Unauthorized connection attempt detected from IP address 111.205.178.39 to port 1433 [J]
2020-01-29 06:09:16
78.131.11.10 attackbotsspam
Unauthorized connection attempt detected from IP address 78.131.11.10 to port 22 [J]
2020-01-29 05:59:21
139.199.164.21 attack
Unauthorized connection attempt detected from IP address 139.199.164.21 to port 2220 [J]
2020-01-29 06:19:30
197.39.137.166 attackbots
Unauthorized connection attempt detected from IP address 197.39.137.166 to port 23 [J]
2020-01-29 06:32:25
88.225.215.221 attackspam
Unauthorized connection attempt detected from IP address 88.225.215.221 to port 23 [J]
2020-01-29 05:57:59
196.0.110.250 attackspam
Unauthorized connection attempt detected from IP address 196.0.110.250 to port 23 [J]
2020-01-29 06:32:51
42.113.229.41 attack
Unauthorized connection attempt detected from IP address 42.113.229.41 to port 23 [J]
2020-01-29 06:28:39
1.202.112.211 attackbots
Unauthorized connection attempt detected from IP address 1.202.112.211 to port 808 [J]
2020-01-29 06:30:09
156.203.62.49 attackspam
Unauthorized connection attempt detected from IP address 156.203.62.49 to port 23 [J]
2020-01-29 06:06:35
51.254.137.179 attack
Jan 28 22:26:34 work-partkepr sshd\[16725\]: Invalid user shuvandu from 51.254.137.179 port 60994
Jan 28 22:26:34 work-partkepr sshd\[16725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.137.179
...
2020-01-29 06:27:23
94.41.157.193 attackbotsspam
Unauthorized connection attempt detected from IP address 94.41.157.193 to port 2323 [J]
2020-01-29 05:57:47
89.169.1.58 attackspam
Unauthorized connection attempt detected from IP address 89.169.1.58 to port 8080 [J]
2020-01-29 06:24:25
217.182.70.150 attack
Unauthorized connection attempt detected from IP address 217.182.70.150 to port 2220 [J]
2020-01-29 06:15:52
200.232.203.56 attack
Unauthorized connection attempt detected from IP address 200.232.203.56 to port 8080 [J]
2020-01-29 06:31:30

Recently Reported IPs

192.241.235.231 141.138.35.18 188.193.32.62 111.85.90.122
45.55.157.158 113.169.114.119 21.6.6.177 157.245.196.164
3.114.76.91 116.111.85.99 109.9.238.215 47.245.29.255
71.58.231.210 42.119.62.4 174.235.10.247 95.216.203.42
85.138.133.12 93.109.34.189 27.6.159.171 179.33.96.18