162.243.137.45

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	[Mon Jun 01 21:41:57 2020] - DDoS Attack From IP: 162.243.137.45 Port: 59944	2020-07-09 01:50:31
attackspam	ZGrab Application Layer Scanner Detection	2020-06-21 22:11:39

Comments on same subnet:

IP	Type	Details	Datetime
162.243.137.85	attackbots	[Fri Jun 12 02:55:04 2020] - DDoS Attack From IP: 162.243.137.85 Port: 52340	2020-07-16 21:25:07
162.243.137.172	attackspam	[Mon Jun 15 23:50:30 2020] - DDoS Attack From IP: 162.243.137.172 Port: 45621	2020-07-16 20:39:09
162.243.137.107	attackbots	[Thu Jun 18 16:06:16 2020] - DDoS Attack From IP: 162.243.137.107 Port: 38258	2020-07-16 20:17:31
162.243.137.85	attackspam	[Fri Jun 12 02:55:06 2020] - DDoS Attack From IP: 162.243.137.85 Port: 52340	2020-07-13 03:33:24
162.243.137.172	attack	[Mon Jun 15 23:50:32 2020] - DDoS Attack From IP: 162.243.137.172 Port: 45621	2020-07-13 03:04:32
162.243.137.107	attackspam	[Thu Jun 18 16:06:18 2020] - DDoS Attack From IP: 162.243.137.107 Port: 38258	2020-07-13 02:50:06
162.243.137.96	attack	[Sun Jun 21 03:40:09 2020] - DDoS Attack From IP: 162.243.137.96 Port: 34233	2020-07-13 02:42:44
162.243.137.169	attackbotsspam	[Thu May 28 02:00:39 2020] - DDoS Attack From IP: 162.243.137.169 Port: 57347	2020-07-09 03:21:08
162.243.137.118	attackspam	" "	2020-06-22 17:26:16
162.243.137.23	attackbotsspam	Unauthorized connection attempt detected from IP address 162.243.137.23 to port 587	2020-06-22 06:12:37
162.243.137.90	attackspambots	ZGrab Application Layer Scanner Detection	2020-06-21 22:10:29
162.243.137.18	attack	Fail2Ban Ban Triggered	2020-06-21 20:58:31
162.243.137.42	attackbots	scans once in preceeding hours on the ports (in chronological order) 7547 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:58:18
162.243.137.66	attackbots	scans once in preceeding hours on the ports (in chronological order) 63814 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:58:05
162.243.137.100	attackbots	scans once in preceeding hours on the ports (in chronological order) 1930 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:57:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.137.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2087
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.137.45.			IN	A

;; AUTHORITY SECTION:
.			518	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062100 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 22:11:34 CST 2020
;; MSG SIZE  rcvd: 118

Host info

45.137.243.162.in-addr.arpa domain name pointer zg-0428c-149.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
45.137.243.162.in-addr.arpa	name = zg-0428c-149.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.54.208.123	attackspambots	2020-02-04T15:00:13.6000351495-001 sshd[56912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.208.123 user=root 2020-02-04T15:00:15.3598121495-001 sshd[56912]: Failed password for root from 106.54.208.123 port 34458 ssh2 2020-02-04T15:02:41.9917011495-001 sshd[58928]: Invalid user speech-dispatcher from 106.54.208.123 port 57776 2020-02-04T15:02:42.0002891495-001 sshd[58928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.208.123 2020-02-04T15:02:41.9917011495-001 sshd[58928]: Invalid user speech-dispatcher from 106.54.208.123 port 57776 2020-02-04T15:02:44.0766701495-001 sshd[58928]: Failed password for invalid user speech-dispatcher from 106.54.208.123 port 57776 ssh2 2020-02-04T15:05:22.0531251495-001 sshd[61528]: Invalid user slide from 106.54.208.123 port 52872 2020-02-04T15:05:22.0620691495-001 sshd[61528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ...	2020-02-05 04:32:13
188.17.152.30	attack	Brute force attempt	2020-02-05 04:25:45
134.209.150.75	attackbots	Port scan detected on ports: 8080[TCP], 8080[TCP], 8080[TCP]	2020-02-05 04:54:53
140.143.238.108	attackbotsspam	Unauthorized connection attempt detected from IP address 140.143.238.108 to port 2220 [J]	2020-02-05 04:48:21
69.163.224.109	attackspambots	xmlrpc attack	2020-02-05 04:55:28
113.186.133.101	attackspambots	Port 1433 Scan	2020-02-05 04:59:22
177.87.32.23	attack	Feb 4 21:20:59 grey postfix/smtpd\[25106\]: NOQUEUE: reject: RCPT from unknown\[177.87.32.23\]: 554 5.7.1 Service unavailable\; Client host \[177.87.32.23\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=177.87.32.23\; from=\ to=\ proto=ESMTP helo=\<177-87-32-23.inbnet.com.br\> ...	2020-02-05 04:35:40
14.248.236.205	attackbots	Feb 4 21:01:58 xxxx sshd[31894]: Address 14.248.236.205 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 4 21:01:58 xxxx sshd[31894]: Invalid user admin from 14.248.236.205 Feb 4 21:01:58 xxxx sshd[31894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.236.205 Feb 4 21:02:00 xxxx sshd[31894]: Failed password for invalid user admin from 14.248.236.205 port 47092 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.248.236.205	2020-02-05 04:26:58
92.118.37.86	attack	Feb 4 21:46:32 debian-2gb-nbg1-2 kernel: \[3108441.327766\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.86 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=33576 PROTO=TCP SPT=41846 DPT=3874 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-05 04:49:52
201.138.51.140	attackspambots	Honeypot attack, port: 445, PTR: dsl-201-138-51-140-dyn.prod-infinitum.com.mx.	2020-02-05 04:50:41
180.76.167.9	attack	Feb 4 21:15:45 lnxmysql61 sshd[5534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.167.9 Feb 4 21:15:46 lnxmysql61 sshd[5534]: Failed password for invalid user ariel from 180.76.167.9 port 43858 ssh2 Feb 4 21:20:58 lnxmysql61 sshd[6118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.167.9	2020-02-05 04:37:28
192.176.48.174	attackspambots	Honeypot attack, port: 5555, PTR: a174.broadband8.quicknet.se.	2020-02-05 04:57:33
118.25.104.48	attackspambots	Feb 4 16:42:35 server sshd\[21321\]: Failed password for invalid user ire from 118.25.104.48 port 8885 ssh2 Feb 4 23:18:31 server sshd\[13993\]: Invalid user admin from 118.25.104.48 Feb 4 23:18:31 server sshd\[13993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.104.48 Feb 4 23:18:33 server sshd\[13993\]: Failed password for invalid user admin from 118.25.104.48 port 64613 ssh2 Feb 4 23:20:49 server sshd\[14581\]: Invalid user test from 118.25.104.48 Feb 4 23:20:49 server sshd\[14581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.104.48 ...	2020-02-05 04:44:05
202.51.111.225	attackbotsspam	Unauthorized connection attempt detected from IP address 202.51.111.225 to port 2220 [J]	2020-02-05 04:17:50
94.191.78.128	attack	Feb 4 10:19:04 hpm sshd\[17315\]: Invalid user qwerty123456 from 94.191.78.128 Feb 4 10:19:04 hpm sshd\[17315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.78.128 Feb 4 10:19:06 hpm sshd\[17315\]: Failed password for invalid user qwerty123456 from 94.191.78.128 port 39554 ssh2 Feb 4 10:21:02 hpm sshd\[17514\]: Invalid user @abc123 from 94.191.78.128 Feb 4 10:21:02 hpm sshd\[17514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.78.128	2020-02-05 04:30:32

Recently Reported IPs

36.65.76.135	110.138.126.97	113.175.200.32	180.249.100.219
118.70.117.132	159.192.250.129	118.68.44.186	82.81.87.60
115.75.10.79	94.99.109.205	187.155.24.211	79.127.108.211
5.188.210.9	5.117.90.253	111.254.181.140	85.106.65.132
156.212.109.227	208.113.192.71	117.7.152.11	93.160.184.115