162.243.128.145

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	03/16/2020-01:36:50.989493 162.243.128.145 Protocol: 6 ET SCAN Suspicious inbound to PostgreSQL port 5432	2020-03-16 18:51:06

Comments on same subnet:

IP	Type	Details	Datetime
162.243.128.132	attackbotsspam	SP-Scan 43646:9042 detected 2020.10.13 21:22:22 blocked until 2020.12.02 13:25:09	2020-10-14 07:02:01
162.243.128.189	attack	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-13 02:32:26
162.243.128.189	attackspambots	Port scanning [3 denied]	2020-10-12 17:58:27
162.243.128.12	attackbotsspam	TCP port : 631	2020-10-12 03:55:08
162.243.128.133	attackspambots	7210/tcp 1521/tcp 8090/tcp... [2020-08-21/10-10]28pkt,26pt.(tcp),1pt.(udp)	2020-10-12 02:41:08
162.243.128.71	attackspam	50000/tcp 1527/tcp 4567/tcp... [2020-08-21/10-11]23pkt,21pt.(tcp),1pt.(udp)	2020-10-12 01:26:02
162.243.128.12	attack	TCP port : 631	2020-10-11 19:51:16
162.243.128.133	attack	HTTP_USER_AGENT Mozilla/5.0 zgrab/0.x	2020-10-11 18:32:12
162.243.128.71	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-11 17:16:50
162.243.128.127	attackbots	scans once in preceeding hours on the ports (in chronological order) 1434 resulting in total of 6 scans from 162.243.0.0/16 block.	2020-10-10 22:07:07
162.243.128.127	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-10 13:59:54
162.243.128.94	attack	TCP port : 631	2020-10-09 06:31:46
162.243.128.176	attack	firewall-block, port(s): 26/tcp	2020-10-09 05:24:23
162.243.128.251	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-09 03:19:05
162.243.128.94	attackspam	TCP port : 631	2020-10-08 22:52:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.128.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8453
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.128.145.		IN	A

;; AUTHORITY SECTION:
.			293	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031600 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 16 18:50:58 CST 2020
;; MSG SIZE  rcvd: 119

Host info

145.128.243.162.in-addr.arpa domain name pointer zg-0312c-9.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.128.243.162.in-addr.arpa	name = zg-0312c-9.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.209.214.156	attackbotsspam	Honeypot attack, port: 445, PTR: 210-209-214-156.veetime.com.	2019-11-18 00:10:21
117.185.62.146	attack	Nov 17 16:47:52 tux-35-217 sshd\[15408\]: Invalid user heuverswyn from 117.185.62.146 port 39171 Nov 17 16:47:52 tux-35-217 sshd\[15408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.185.62.146 Nov 17 16:47:54 tux-35-217 sshd\[15408\]: Failed password for invalid user heuverswyn from 117.185.62.146 port 39171 ssh2 Nov 17 16:53:02 tux-35-217 sshd\[15415\]: Invalid user papakyriakou from 117.185.62.146 port 52051 Nov 17 16:53:02 tux-35-217 sshd\[15415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.185.62.146 ...	2019-11-18 00:24:39
185.153.197.161	attackbots	185.153.197.161 was recorded 21 times by 18 hosts attempting to connect to the following ports: 33996,33902. Incident counter (4h, 24h, all-time): 21, 85, 102	2019-11-18 00:31:22
83.67.171.81	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/83.67.171.81/ GB - 1H : (81) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN9105 IP : 83.67.171.81 CIDR : 83.67.0.0/16 PREFIX COUNT : 42 UNIQUE IP COUNT : 3022848 ATTACKS DETECTED ASN9105 : 1H - 1 3H - 3 6H - 3 12H - 11 24H - 19 DateTime : 2019-11-17 15:44:43 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-18 00:10:48
129.213.96.241	attack	Nov 17 17:38:35 vtv3 sshd\[18902\]: Invalid user www-upload from 129.213.96.241 port 50466 Nov 17 17:38:35 vtv3 sshd\[18902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.96.241 Nov 17 17:38:37 vtv3 sshd\[18902\]: Failed password for invalid user www-upload from 129.213.96.241 port 50466 ssh2 Nov 17 17:44:34 vtv3 sshd\[20328\]: Invalid user nyholm from 129.213.96.241 port 13706 Nov 17 17:44:34 vtv3 sshd\[20328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.96.241 Nov 17 17:55:20 vtv3 sshd\[23369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.96.241 user=root Nov 17 17:55:22 vtv3 sshd\[23369\]: Failed password for root from 129.213.96.241 port 14683 ssh2 Nov 17 17:59:11 vtv3 sshd\[24010\]: Invalid user jova from 129.213.96.241 port 33906 Nov 17 17:59:11 vtv3 sshd\[24010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=s	2019-11-18 00:17:46
179.108.129.110	attack	Automatic report - Port Scan Attack	2019-11-18 00:20:55
218.149.106.172	attackspambots	Nov 17 16:21:26 mout sshd[19691]: Invalid user ginzburg from 218.149.106.172 port 35985	2019-11-17 23:55:59
159.203.13.141	attack	Nov 17 15:56:37 sd-53420 sshd\[2027\]: User root from 159.203.13.141 not allowed because none of user's groups are listed in AllowGroups Nov 17 15:56:37 sd-53420 sshd\[2027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.13.141 user=root Nov 17 15:56:39 sd-53420 sshd\[2027\]: Failed password for invalid user root from 159.203.13.141 port 40090 ssh2 Nov 17 16:00:23 sd-53420 sshd\[3098\]: Invalid user office from 159.203.13.141 Nov 17 16:00:23 sd-53420 sshd\[3098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.13.141 ...	2019-11-17 23:56:39
170.84.57.191	attackspam	Honeypot attack, port: 23, PTR: dynamic-user.170.84.57.191.mhnet.com.br.	2019-11-17 23:52:15
78.187.15.104	attack	Automatic report - Port Scan Attack	2019-11-18 00:22:40
185.117.118.187	attackbots	\[2019-11-17 10:45:11\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '185.117.118.187:49262' - Wrong password \[2019-11-17 10:45:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-17T10:45:11.547-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="31743",SessionID="0x7fdf2c126718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.117.118.187/49262",Challenge="4635c0c6",ReceivedChallenge="4635c0c6",ReceivedHash="67ebc8137506fee5279b0d2cf106a410" \[2019-11-17 10:49:18\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '185.117.118.187:55443' - Wrong password \[2019-11-17 10:49:18\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-17T10:49:18.091-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="38690",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP	2019-11-18 00:01:50
128.199.133.250	attack	128.199.133.250 - - [17/Nov/2019:15:44:30 +0100] "POST /wp-login.php HTTP/1.1" 200 3123 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.133.250 - - [17/Nov/2019:15:44:40 +0100] "POST /wp-login.php HTTP/1.1" 200 3102 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-11-18 00:13:50
5.188.210.245	attackspam	Port scan on 3 port(s): 1080 8081 8082	2019-11-18 00:12:55
180.76.160.147	attack	Nov 17 11:15:56 TORMINT sshd\[23419\]: Invalid user alvie from 180.76.160.147 Nov 17 11:15:56 TORMINT sshd\[23419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.160.147 Nov 17 11:15:58 TORMINT sshd\[23419\]: Failed password for invalid user alvie from 180.76.160.147 port 56778 ssh2 ...	2019-11-18 00:21:24
79.20.186.124	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.20.186.124/ IT - 1H : (130) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN3269 IP : 79.20.186.124 CIDR : 79.20.0.0/15 PREFIX COUNT : 550 UNIQUE IP COUNT : 19507712 ATTACKS DETECTED ASN3269 : 1H - 3 3H - 10 6H - 17 12H - 33 24H - 67 DateTime : 2019-11-17 15:44:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-18 00:05:56

Recently Reported IPs

116.44.56.202	248.173.231.244	197.191.27.98	131.153.16.195
165.154.34.65	158.46.182.166	107.23.159.162	14.226.41.210
110.137.33.19	62.151.182.246	117.1.245.16	46.159.102.157
27.5.177.36	173.211.80.116	27.2.71.148	95.59.115.230
182.187.60.192	37.120.153.82	219.78.11.175	130.34.209.12