159.65.80.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	" "	2020-05-08 21:55:34

Comments on same subnet:

IP	Type	Details	Datetime
159.65.80.114	attackbots	Unauthorized connection attempt detected from IP address 159.65.80.114 to port 23 [J]	2020-02-05 21:32:26
159.65.80.114	attack	Unauthorized connection attempt detected from IP address 159.65.80.114 to port 23 [J]	2020-01-25 08:21:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.65.80.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11429
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.65.80.142.			IN	A

;; AUTHORITY SECTION:
.			347	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050800 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 08 21:55:29 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 142.80.65.159.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.80.65.159.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.160.131.115	attackbots	Unauthorized connection attempt from IP address 113.160.131.115 on Port 445(SMB)	2020-02-13 21:31:44
151.45.248.76	attackbotsspam	Feb 13 06:28:54 vlre-nyc-1 sshd\[16104\]: Invalid user ronal from 151.45.248.76 Feb 13 06:28:54 vlre-nyc-1 sshd\[16104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.45.248.76 Feb 13 06:28:56 vlre-nyc-1 sshd\[16104\]: Failed password for invalid user ronal from 151.45.248.76 port 41060 ssh2 Feb 13 06:35:53 vlre-nyc-1 sshd\[16244\]: Invalid user joisber from 151.45.248.76 Feb 13 06:35:53 vlre-nyc-1 sshd\[16244\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.45.248.76 ...	2020-02-13 21:27:41
122.227.39.50	attack	Unauthorized connection attempt from IP address 122.227.39.50 on Port 445(SMB)	2020-02-13 21:24:15
185.176.33.131	attack	1581580916 - 02/13/2020 09:01:56 Host: 185.176.33.131/185.176.33.131 Port: 445 TCP Blocked	2020-02-13 21:27:12
189.182.80.66	attack	Port probing on unauthorized port 9530	2020-02-13 21:59:58
45.40.217.136	attackspam	ICMP MH Probe, Scan /Distributed -	2020-02-13 21:59:28
191.54.97.118	attackbots	2020-02-13T13:50:24.166248abusebot-8.cloudsearch.cf sshd[2298]: Invalid user admin from 191.54.97.118 port 45325 2020-02-13T13:50:24.176980abusebot-8.cloudsearch.cf sshd[2298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.97.118 2020-02-13T13:50:24.166248abusebot-8.cloudsearch.cf sshd[2298]: Invalid user admin from 191.54.97.118 port 45325 2020-02-13T13:50:26.040262abusebot-8.cloudsearch.cf sshd[2298]: Failed password for invalid user admin from 191.54.97.118 port 45325 ssh2 2020-02-13T13:50:32.169609abusebot-8.cloudsearch.cf sshd[2307]: Invalid user admin from 191.54.97.118 port 45353 2020-02-13T13:50:32.178967abusebot-8.cloudsearch.cf sshd[2307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.97.118 2020-02-13T13:50:32.169609abusebot-8.cloudsearch.cf sshd[2307]: Invalid user admin from 191.54.97.118 port 45353 2020-02-13T13:50:34.473607abusebot-8.cloudsearch.cf sshd[2307]: Failed passwor ...	2020-02-13 21:58:22
86.206.124.132	attack	Feb 12 18:11:59 Invalid user livia from 86.206.124.132 port 48173	2020-02-13 21:32:48
43.243.72.138	attackbotsspam	Invalid user vince from 43.243.72.138 port 57966	2020-02-13 21:29:39
59.36.142.180	attackbots	Feb 13 04:04:37 server sshd[68482]: Failed password for invalid user nagios from 59.36.142.180 port 34040 ssh2 Feb 13 05:36:52 server sshd[72079]: Failed password for invalid user godzilla from 59.36.142.180 port 48549 ssh2 Feb 13 05:45:05 server sshd[72411]: Failed password for invalid user fsc from 59.36.142.180 port 42335 ssh2	2020-02-13 21:49:00
62.210.151.21	attack	[2020-02-13 08:50:29] NOTICE[1148][C-00008c67] chan_sip.c: Call from '' (62.210.151.21:63120) to extension '00441665529305' rejected because extension not found in context 'public'. [2020-02-13 08:50:29] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-13T08:50:29.258-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441665529305",SessionID="0x7fd82c57aa58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/63120",ACLName="no_extension_match" [2020-02-13 08:50:36] NOTICE[1148][C-00008c68] chan_sip.c: Call from '' (62.210.151.21:50282) to extension '011441665529305' rejected because extension not found in context 'public'. [2020-02-13 08:50:36] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-13T08:50:36.359-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441665529305",SessionID="0x7fd82c53a2e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62 ...	2020-02-13 21:56:27
62.138.137.114	attackbotsspam	Bad bot/spoofed identity	2020-02-13 21:26:10
110.39.167.82	attack	unauthorized connection attempt	2020-02-13 21:37:05
147.135.71.43	attackbots	$f2bV_matches	2020-02-13 21:38:11
115.137.95.131	attackspam	Feb 13 05:45:08 grey postfix/smtpd\[18961\]: NOQUEUE: reject: RCPT from unknown\[115.137.95.131\]: 554 5.7.1 Service unavailable\; Client host \[115.137.95.131\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[115.137.95.131\]\; from=\ to=\ proto=ESMTP helo=\<\[115.137.95.131\]\> ...	2020-02-13 21:46:46

Recently Reported IPs

63.124.220.91	238.135.242.249	81.76.99.255	193.70.0.173
183.81.169.113	54.244.188.5	222.187.226.21	195.3.146.118
44.148.101.57	169.98.76.31	42.36.234.205	156.15.48.12
135.144.188.102	91.251.148.70	14.184.105.177	213.233.179.200
74.106.9.175	189.146.143.135	129.211.135.107	180.200.108.183