IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
Important Note: 162.159.99.48 is an IP address from within
our whitelist belonging to the subnet
162.158.0.0/15,
which we identify as: "Cloudflare Reverse Proxy".
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
This IP address has been reported a total of
9
times from
4 distinct
sources.
162.159.99.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-04-10T06:55:10.991671+02:00 nimbus sshd[239040]: Invalid user app from 162.159.99.48 port 40482 ...
show more2026-04-10T06:55:10.991671+02:00 nimbus sshd[239040]: Invalid user app from 162.159.99.48 port 40482
...
show less
Brute-Force
SSH
Anonymous
2026-04-10T06:24:43.796113+02:00 nimbus sshd[237413]: Invalid user web from 162.159.99.48 port 27514 ...
show more2026-04-10T06:24:43.796113+02:00 nimbus sshd[237413]: Invalid user web from 162.159.99.48 port 27514
...
show less
Brute-Force
SSH
Anonymous
2026-04-10T04:42:52.692206+02:00 nimbus sshd[233472]: Invalid user bot from 162.159.99.48 port 45790 ...
show more2026-04-10T04:42:52.692206+02:00 nimbus sshd[233472]: Invalid user bot from 162.159.99.48 port 45790
...
show less
Brute-Force
SSH
Anonymous
2026-04-10T03:57:48.384359+02:00 nimbus sshd[231589]: Invalid user tactical from 162.159.99.48 port ...
show more2026-04-10T03:57:48.384359+02:00 nimbus sshd[231589]: Invalid user tactical from 162.159.99.48 port 37852
...
show less
Brute-Force
SSH
Anonymous
2026-04-09T05:50:09.493718+02:00 nimbus sshd[196601]: Invalid user debian from 162.159.99.48 port 48 ...
show more2026-04-09T05:50:09.493718+02:00 nimbus sshd[196601]: Invalid user debian from 162.159.99.48 port 48614
2026-04-09T05:50:09.763310+02:00 nimbus sshd[196601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.99.48
2026-04-09T05:50:12.279639+02:00 nimbus sshd[196601]: Failed password for invalid user debian from 162.159.99.48 port 48614 ssh2
...
show less
[Tue Mar 17 18:51:06.530255 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var ...
show more[Tue Mar 17 18:51:06.530255 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var/www/html/revealability.php' not found or unable to stat
[Tue Mar 17 18:51:06.851771 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var/www/html/t.php' not found or unable to stat
[Tue Mar 17 18:51:07.073533 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var/www/html/333.php' not found or unable to stat
[Tue Mar 17 18:51:07.288858 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var/www/html/ms.php' not found or unable to stat
[Tue Mar 17 18:51:07.503958 2026] [php:error] [pid 963641] [client 162.159.99.48:12333] script '/var/www/html/wp-access.php' not found or unable to stat
...
show less
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩