Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Apr 29 14:47:42 askasleikir sshd[21983]: Connection closed by 162.243.139.144 port 50820 [preauth]
2020-04-30 05:34:27
Comments on same subnet:
IP Type Details Datetime
162.243.139.21 proxy
VPN fraud
2023-02-24 13:44:38
162.243.139.19 proxy
VPN
2023-01-23 14:02:03
162.243.139.98 attack
[Fri Jun 12 03:31:39 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724
2020-07-16 21:22:30
162.243.139.167 attack
[Sun Jun 14 03:12:01 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412
2020-07-16 20:56:22
162.243.139.150 attack
[Wed Jun 17 15:34:21 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028
2020-07-16 20:29:09
162.243.139.246 attack
[Wed Jun 17 21:52:27 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139
2020-07-16 20:26:41
162.243.139.98 attackspam
[Fri Jun 12 03:31:41 2020] - DDoS Attack From IP: 162.243.139.98 Port: 51724
2020-07-13 03:31:45
162.243.139.167 attackspambots
[Sun Jun 14 03:12:03 2020] - DDoS Attack From IP: 162.243.139.167 Port: 58412
2020-07-13 03:17:58
162.243.139.150 attackbotsspam
[Wed Jun 17 15:34:23 2020] - DDoS Attack From IP: 162.243.139.150 Port: 57028
2020-07-13 03:02:20
162.243.139.246 attackspam
[Wed Jun 17 21:52:29 2020] - DDoS Attack From IP: 162.243.139.246 Port: 58139
2020-07-13 03:00:05
162.243.139.196 attack
[Fri May 22 02:56:34 2020] - DDoS Attack From IP: 162.243.139.196 Port: 39583
2020-07-09 03:49:00
162.243.139.226 attackspam
[Mon May 25 12:06:40 2020] - DDoS Attack From IP: 162.243.139.226 Port: 59688
2020-07-09 03:24:42
162.243.139.40 attackspam
[Thu May 28 02:37:02 2020] - DDoS Attack From IP: 162.243.139.40 Port: 48945
2020-07-09 03:18:45
162.243.139.241 attackbotsspam
[Thu May 28 12:09:43 2020] - DDoS Attack From IP: 162.243.139.241 Port: 46028
2020-07-09 03:12:30
162.243.139.141 attackbots
[Fri May 29 12:54:48 2020] - DDoS Attack From IP: 162.243.139.141 Port: 55461
2020-07-09 02:53:20
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.139.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.139.144.		IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042902 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 05:34:19 CST 2020
;; MSG SIZE  rcvd: 119
Host info
144.139.243.162.in-addr.arpa domain name pointer zg-0428c-361.stretchoid.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
144.139.243.162.in-addr.arpa	name = zg-0428c-361.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
202.129.29.135 attackbots
Triggered by Fail2Ban at Ares web server
2020-04-06 07:01:33
106.12.174.227 attackbots
5x Failed Password
2020-04-06 06:38:58
52.224.180.67 attack
2020-04-05T18:58:53.394227sorsha.thespaminator.com sshd[19710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.224.180.67  user=root
2020-04-05T18:58:55.279773sorsha.thespaminator.com sshd[19710]: Failed password for root from 52.224.180.67 port 24549 ssh2
...
2020-04-06 07:02:10
123.207.167.185 attack
2020-04-06T00:37:50.693576librenms sshd[8134]: Failed password for root from 123.207.167.185 port 36972 ssh2
2020-04-06T00:43:09.183516librenms sshd[8789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.167.185  user=root
2020-04-06T00:43:11.474575librenms sshd[8789]: Failed password for root from 123.207.167.185 port 37306 ssh2
...
2020-04-06 06:53:47
195.214.223.84 attack
$f2bV_matches
2020-04-06 06:52:30
80.82.65.90 attackspambots
Apr  5 23:31:15 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session=
Apr  5 23:32:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session=
Apr  5 23:33:51 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session=
Apr  5 23:35:20 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session=
Apr  5 23:35:33 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=
2020-04-06 06:40:43
14.204.145.125 attackbots
$f2bV_matches
2020-04-06 06:55:53
5.154.243.204 attack
Automatic report - Port Scan Attack
2020-04-06 07:05:04
51.77.108.92 attackbotsspam
04/05/2020-18:57:59.327791 51.77.108.92 Protocol: 6 ET SCAN Potential SSH Scan
2020-04-06 06:58:39
51.38.225.124 attackspam
Apr  5 23:45:48 santamaria sshd\[20868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.225.124  user=root
Apr  5 23:45:50 santamaria sshd\[20868\]: Failed password for root from 51.38.225.124 port 47130 ssh2
Apr  5 23:50:20 santamaria sshd\[20942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.225.124  user=root
...
2020-04-06 06:49:16
111.3.103.78 attack
Apr  5 15:15:02 mockhub sshd[21096]: Failed password for root from 111.3.103.78 port 34057 ssh2
...
2020-04-06 06:45:12
106.13.9.7 attack
Apr  6 00:33:20 pkdns2 sshd\[40638\]: Failed password for root from 106.13.9.7 port 54250 ssh2Apr  6 00:36:39 pkdns2 sshd\[40835\]: Failed password for root from 106.13.9.7 port 53050 ssh2Apr  6 00:37:06 pkdns2 sshd\[40863\]: Failed password for root from 106.13.9.7 port 58450 ssh2Apr  6 00:37:33 pkdns2 sshd\[40880\]: Failed password for root from 106.13.9.7 port 35618 ssh2Apr  6 00:37:59 pkdns2 sshd\[40891\]: Failed password for root from 106.13.9.7 port 41018 ssh2Apr  6 00:38:26 pkdns2 sshd\[40924\]: Failed password for root from 106.13.9.7 port 46414 ssh2
...
2020-04-06 07:04:50
222.186.30.167 attack
sshd brute force attempt
2020-04-06 06:41:26
159.65.233.205 attackspam
Apr  4 23:25:12 XXX sshd[18512]: Did not receive identification string from 159.65.233.205
Apr  4 23:25:28 XXX sshd[18519]: User r.r from 159.65.233.205 not allowed because none of user's groups are listed in AllowGroups
Apr  4 23:25:28 XXX sshd[18519]: Received disconnect from 159.65.233.205: 11: Normal Shutdown, Thank you for playing [preauth]
Apr  5 02:18:43 XXX sshd[17712]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17711]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17710]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17709]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17708]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17707]: Did not receive identification string from 159.65.233.205
Apr  5 02:18:43 XXX sshd[17713]: Did not receive identification string from 159.65.233.205........
-------------------------------
2020-04-06 06:56:35
117.27.88.61 attackbots
SSH Authentication Attempts Exceeded
2020-04-06 06:34:59

Recently Reported IPs

106.75.152.95 165.213.246.126 4.250.2.170 171.0.58.120
178.53.162.138 45.15.161.133 36.69.185.173 184.88.48.217
16.232.83.128 172.57.45.43 22.73.0.127 159.123.234.22
204.227.1.170 208.147.130.98 42.81.51.213 238.194.35.39
92.223.89.5 93.7.220.249 252.126.124.232 129.47.144.30