162.243.130.66

Basic Info

City: San Francisco

Region: California

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	520/tcp 34530/tcp 10000/tcp... [2020-02-04/04-04]28pkt,22pt.(tcp),4pt.(udp)	2020-04-06 04:08:28
attackspambots	scan z	2020-04-05 17:08:05
attack	" "	2020-04-05 08:12:01
attack	ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: TCP cat: Potentially Bad Traffic	2020-03-20 22:03:46
attack	Unauthorized connection attempt detected from IP address 162.243.130.66 to port 2525	2020-02-16 05:09:10

Comments on same subnet:

IP	Type	Details	Datetime
162.243.130.93	attackspambots	Brute force attack stopped by firewall	2020-09-16 02:08:56
162.243.130.93	attack	Brute force attack stopped by firewall	2020-09-15 18:03:31
162.243.130.79	attackbotsspam	Port scan denied	2020-09-09 00:33:57
162.243.130.79	attackspam	Port scan denied	2020-09-08 16:03:19
162.243.130.79	attackspambots	1599497446 - 09/07/2020 23:50:46 Host: zg-0823b-344.stretchoid.com/162.243.130.79 Port: 26 TCP Blocked ...	2020-09-08 08:38:37
162.243.130.67	attackbots	9043/tcp 22/tcp 5632/udp... [2020-08-24/09-06]11pkt,10pt.(tcp),1pt.(udp)	2020-09-06 23:52:05
162.243.130.67	attackspambots	Port scan: Attack repeated for 24 hours	2020-09-06 15:14:17
162.243.130.67	attackspam	" "	2020-09-06 07:17:46
162.243.130.48	attackspam	Honeypot hit.	2020-09-06 00:10:19
162.243.130.48	attackbots	Port Scan ...	2020-09-05 15:41:09
162.243.130.48	attack	Brute force attack stopped by firewall	2020-09-05 08:18:44
162.243.130.35	attack	firewall-block, port(s): 3011/tcp	2020-09-05 02:17:00
162.243.130.35	attack	firewall-block, port(s): 3011/tcp	2020-09-04 17:41:17
162.243.130.97	attackbots	Port scan denied	2020-08-28 20:01:41
162.243.130.41	attackspambots	TCP port : 9300	2020-08-28 19:54:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.130.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.130.66.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021501 1800 900 604800 86400

;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 05:09:03 CST 2020
;; MSG SIZE  rcvd: 118

Host info

66.130.243.162.in-addr.arpa domain name pointer zg-0131a-337.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.130.243.162.in-addr.arpa	name = zg-0131a-337.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.23.21.52	attackspambots	94.23.21.52 - - [15/Dec/2019:06:29:53 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.23.21.52 - - [15/Dec/2019:06:29:54 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-12-15 15:35:02
23.97.53.81	attackbots	Dec 14 21:22:20 sachi sshd\[23820\]: Invalid user spygirl from 23.97.53.81 Dec 14 21:22:20 sachi sshd\[23820\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.53.81 Dec 14 21:22:23 sachi sshd\[23820\]: Failed password for invalid user spygirl from 23.97.53.81 port 38258 ssh2 Dec 14 21:28:40 sachi sshd\[24365\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.53.81 user=root Dec 14 21:28:42 sachi sshd\[24365\]: Failed password for root from 23.97.53.81 port 49070 ssh2	2019-12-15 15:34:03
88.147.142.103	attackspambots	Autoban 88.147.142.103 AUTH/CONNECT	2019-12-15 15:47:27
178.62.54.233	attackbots	Dec 15 07:25:41 hcbbdb sshd\[9949\]: Invalid user guest from 178.62.54.233 Dec 15 07:25:41 hcbbdb sshd\[9949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.54.233 Dec 15 07:25:42 hcbbdb sshd\[9949\]: Failed password for invalid user guest from 178.62.54.233 port 50009 ssh2 Dec 15 07:30:43 hcbbdb sshd\[10514\]: Invalid user greany from 178.62.54.233 Dec 15 07:30:43 hcbbdb sshd\[10514\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.54.233	2019-12-15 15:43:21
193.254.135.252	attackbotsspam	sshd jail - ssh hack attempt	2019-12-15 15:46:02
103.248.220.221	attackspambots	Dec 15 09:29:33 debian-2gb-vpn-nbg1-1 kernel: [769745.906332] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=103.248.220.221 DST=78.46.192.101 LEN=40 TOS=0x10 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0	2019-12-15 15:51:51
52.247.223.210	attackspambots	Dec 15 07:23:10 ns3042688 sshd\[18509\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.247.223.210 user=dovecot Dec 15 07:23:12 ns3042688 sshd\[18509\]: Failed password for dovecot from 52.247.223.210 port 56674 ssh2 Dec 15 07:29:37 ns3042688 sshd\[20784\]: Invalid user isleiv from 52.247.223.210 Dec 15 07:29:37 ns3042688 sshd\[20784\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.247.223.210 Dec 15 07:29:39 ns3042688 sshd\[20784\]: Failed password for invalid user isleiv from 52.247.223.210 port 38942 ssh2 ...	2019-12-15 15:45:08
167.99.202.143	attackbotsspam	$f2bV_matches	2019-12-15 15:33:45
136.36.12.55	attackbots	Dec 15 08:36:24 loxhost sshd\[15939\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.36.12.55 user=root Dec 15 08:36:26 loxhost sshd\[15939\]: Failed password for root from 136.36.12.55 port 57274 ssh2 Dec 15 08:42:40 loxhost sshd\[16101\]: Invalid user hung from 136.36.12.55 port 37962 Dec 15 08:42:40 loxhost sshd\[16101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.36.12.55 Dec 15 08:42:41 loxhost sshd\[16101\]: Failed password for invalid user hung from 136.36.12.55 port 37962 ssh2 ...	2019-12-15 15:59:30
94.21.139.39	attackspambots	Dec 15 06:29:23 localhost sshd\[95458\]: Invalid user pi from 94.21.139.39 port 48858 Dec 15 06:29:23 localhost sshd\[95458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.139.39 Dec 15 06:29:23 localhost sshd\[95460\]: Invalid user pi from 94.21.139.39 port 48864 Dec 15 06:29:23 localhost sshd\[95460\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.139.39 Dec 15 06:29:25 localhost sshd\[95458\]: Failed password for invalid user pi from 94.21.139.39 port 48858 ssh2 ...	2019-12-15 15:56:57
104.131.96.177	attack	Dec 15 13:21:54 areeb-Workstation sshd[30161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.96.177 Dec 15 13:21:56 areeb-Workstation sshd[30161]: Failed password for invalid user lichi from 104.131.96.177 port 49810 ssh2 ...	2019-12-15 16:03:10
49.235.42.243	attackspam	SSH Brute Force	2019-12-15 15:40:25
83.118.212.34	attackbotsspam	Dec 15 07:29:30 51-15-180-239 sshd[8179]: Invalid user alain from 83.118.212.34 port 8363 ...	2019-12-15 15:52:40
46.229.178.31	attackbots	Automatic report - Port Scan Attack	2019-12-15 16:05:07
81.28.100.94	attackbotsspam	2019-12-15T07:29:10.267610stark.klein-stark.info postfix/smtpd\[18235\]: NOQUEUE: reject: RCPT from jewel.shrewdmhealth.com\[81.28.100.94\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-15 16:04:04

Recently Reported IPs

32.44.67.217	128.70.64.206	123.252.147.20	212.160.45.91
146.160.237.169	86.215.116.254	173.14.98.144	12.59.94.61
118.37.91.137	121.9.106.198	89.34.26.144	71.199.75.216
76.177.8.110	188.206.101.138	67.224.151.23	143.198.55.81
61.88.54.70	193.106.240.94	197.96.158.218	109.180.201.32