Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Unauthorized connection attempt from IP address 162.243.134.64
2020-02-24 19:46:57
attackspam
ssh brute force
2020-02-23 04:21:53
attack
suspicious action Thu, 20 Feb 2020 08:15:32 -0300
2020-02-20 20:41:44
Comments on same subnet:
IP Type Details Datetime
162.243.134.57 attack
Malicious IP
2024-04-30 13:38:55
162.243.134.31 attack
Apr 28 07:00:37 askasleikir sshd[20315]: Connection closed by 162.243.134.31 port 41312 [preauth]
2020-04-28 20:46:56
162.243.134.4 attackspam
scans once in preceeding hours on the ports (in chronological order) 5800 resulting in total of 50 scans from 162.243.0.0/16 block.
2020-04-25 23:28:29
162.243.134.59 attackspambots
scans once in preceeding hours on the ports (in chronological order) 2049 resulting in total of 50 scans from 162.243.0.0/16 block.
2020-04-25 23:28:12
162.243.134.25 attackbots
Port scan(s) denied
2020-04-22 17:32:16
162.243.134.59 attack
20/4/18@16:43:59: FAIL: Alarm-SSH address from=162.243.134.59
...
2020-04-19 06:11:22
162.243.134.17 attackbotsspam
Port Scan: Events[1] countPorts[1]: 7210 ..
2020-04-15 21:43:05
162.243.134.25 attackspambots
Unauthorized connection attempt detected from IP address 162.243.134.25 to port 7574
2020-04-15 01:13:56
162.243.134.31 attackbots
Unauthorized connection attempt detected from IP address 162.243.134.31 to port 22
2020-04-14 17:40:01
162.243.134.36 attackspambots
firewall-block, port(s): 1583/tcp
2020-04-09 00:39:08
162.243.134.30 attackbots
firewall-block, port(s): 65197/tcp
2020-04-06 09:26:48
162.243.134.56 attackbotsspam
9160/tcp 3001/tcp 6379/tcp...
[2020-03-14/04-04]28pkt,25pt.(tcp),1pt.(udp)
2020-04-06 04:10:33
162.243.134.15 attackspam
Unauthorized connection attempt detected from IP address 162.243.134.15 to port 5007
2020-04-06 04:04:33
162.243.134.15 attackbotsspam
[SMTP/25/465/587 Probe]
TLS/SSL handshake failed:[ wrong version number]

*(03281322)
2020-03-28 18:32:08
162.243.134.30 attack
firewall-block, port(s): 8889/tcp
2020-03-27 16:07:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.134.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.134.64.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022001 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 20:41:40 CST 2020
;; MSG SIZE  rcvd: 118
Host info
64.134.243.162.in-addr.arpa domain name pointer zg0213a-398.stretchoid.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.134.243.162.in-addr.arpa	name = zg0213a-398.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
198.199.122.234 attack
Aug 16 18:42:18 plex sshd[3036]: Invalid user jace from 198.199.122.234 port 44652
2019-08-17 01:02:29
142.93.203.108 attackbotsspam
Aug 16 16:47:46 web8 sshd\[26499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108  user=root
Aug 16 16:47:48 web8 sshd\[26499\]: Failed password for root from 142.93.203.108 port 47294 ssh2
Aug 16 16:52:12 web8 sshd\[28613\]: Invalid user test from 142.93.203.108
Aug 16 16:52:12 web8 sshd\[28613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108
Aug 16 16:52:15 web8 sshd\[28613\]: Failed password for invalid user test from 142.93.203.108 port 39268 ssh2
2019-08-17 01:08:40
86.159.95.221 attackbots
Aug 16 18:17:57 vserver sshd\[26410\]: Invalid user pi from 86.159.95.221Aug 16 18:17:58 vserver sshd\[26412\]: Invalid user pi from 86.159.95.221Aug 16 18:17:59 vserver sshd\[26410\]: Failed password for invalid user pi from 86.159.95.221 port 47546 ssh2Aug 16 18:18:00 vserver sshd\[26412\]: Failed password for invalid user pi from 86.159.95.221 port 47548 ssh2
...
2019-08-17 00:22:10
58.87.120.53 attack
Aug 16 06:46:40 lcprod sshd\[25084\]: Invalid user rmsasi from 58.87.120.53
Aug 16 06:46:40 lcprod sshd\[25084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.120.53
Aug 16 06:46:42 lcprod sshd\[25084\]: Failed password for invalid user rmsasi from 58.87.120.53 port 44816 ssh2
Aug 16 06:52:29 lcprod sshd\[25512\]: Invalid user server from 58.87.120.53
Aug 16 06:52:29 lcprod sshd\[25512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.120.53
2019-08-17 01:05:01
81.177.98.52 attack
Aug 16 16:49:53 MK-Soft-VM4 sshd\[11186\]: Invalid user cs from 81.177.98.52 port 33148
Aug 16 16:49:53 MK-Soft-VM4 sshd\[11186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.177.98.52
Aug 16 16:49:55 MK-Soft-VM4 sshd\[11186\]: Failed password for invalid user cs from 81.177.98.52 port 33148 ssh2
...
2019-08-17 01:10:29
80.211.12.23 attackbotsspam
Aug 16 18:35:31 SilenceServices sshd[3419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.12.23
Aug 16 18:35:33 SilenceServices sshd[3419]: Failed password for invalid user mike from 80.211.12.23 port 50530 ssh2
Aug 16 18:39:52 SilenceServices sshd[7275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.12.23
2019-08-17 00:45:19
111.67.205.230 attackspam
Aug 15 21:48:08 xxxxxxx8434580 sshd[30130]: Invalid user ftpuser from 111.67.205.230
Aug 15 21:48:08 xxxxxxx8434580 sshd[30130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.205.230 
Aug 15 21:48:10 xxxxxxx8434580 sshd[30130]: Failed password for invalid user ftpuser from 111.67.205.230 port 38402 ssh2
Aug 15 21:48:10 xxxxxxx8434580 sshd[30130]: Received disconnect from 111.67.205.230: 11: Bye Bye [preauth]
Aug 15 22:19:15 xxxxxxx8434580 sshd[30301]: Invalid user tweety from 111.67.205.230
Aug 15 22:19:15 xxxxxxx8434580 sshd[30301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.205.230 
Aug 15 22:19:17 xxxxxxx8434580 sshd[30301]: Failed password for invalid user tweety from 111.67.205.230 port 45622 ssh2
Aug 15 22:19:17 xxxxxxx8434580 sshd[30301]: Received disconnect from 111.67.205.230: 11: Bye Bye [preauth]
Aug 15 22:21:55 xxxxxxx8434580 sshd[30323]: Invalid user lt from........
-------------------------------
2019-08-17 00:36:11
134.209.110.62 attackbotsspam
Aug 16 19:17:30 srv-4 sshd\[11524\]: Invalid user bartie from 134.209.110.62
Aug 16 19:17:30 srv-4 sshd\[11524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.110.62
Aug 16 19:17:32 srv-4 sshd\[11524\]: Failed password for invalid user bartie from 134.209.110.62 port 50916 ssh2
...
2019-08-17 00:45:50
45.36.105.206 attack
SSH/22 MH Probe, BF, Hack -
2019-08-17 00:38:47
118.25.208.97 attackbots
Aug 16 12:42:34 TORMINT sshd\[4129\]: Invalid user test from 118.25.208.97
Aug 16 12:42:34 TORMINT sshd\[4129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.208.97
Aug 16 12:42:36 TORMINT sshd\[4129\]: Failed password for invalid user test from 118.25.208.97 port 42034 ssh2
...
2019-08-17 00:52:21
116.26.126.88 attack
Port Scan: TCP/23
2019-08-17 00:13:14
118.126.111.108 attackspam
Aug 16 18:11:28 localhost sshd\[30152\]: Invalid user purple from 118.126.111.108
Aug 16 18:11:28 localhost sshd\[30152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.111.108
Aug 16 18:11:30 localhost sshd\[30152\]: Failed password for invalid user purple from 118.126.111.108 port 40474 ssh2
Aug 16 18:17:47 localhost sshd\[30600\]: Invalid user arthur from 118.126.111.108
Aug 16 18:17:47 localhost sshd\[30600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.111.108
...
2019-08-17 00:34:31
91.202.76.141 attack
[portscan] Port scan
2019-08-17 00:23:59
103.219.112.251 attack
Aug 16 11:32:48 aat-srv002 sshd[19840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.251
Aug 16 11:32:51 aat-srv002 sshd[19840]: Failed password for invalid user testuser from 103.219.112.251 port 56844 ssh2
Aug 16 11:37:43 aat-srv002 sshd[19929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.251
Aug 16 11:37:45 aat-srv002 sshd[19929]: Failed password for invalid user bryan from 103.219.112.251 port 49170 ssh2
...
2019-08-17 01:00:49
42.118.6.125 attackbotsspam
Unauthorised access (Aug 16) SRC=42.118.6.125 LEN=48 TTL=108 ID=27047 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-17 00:26:34

Recently Reported IPs

213.112.125.174 86.110.21.103 85.109.134.4 77.46.153.67
66.23.205.43 1.171.167.30 119.202.151.41 190.62.27.42
14.232.152.245 171.14.145.10 211.46.4.196 103.81.211.23
35.243.79.69 190.140.190.84 177.43.129.220 192.241.227.186
109.243.117.148 45.187.164.1 193.145.134.108 134.93.157.229