162.243.141.142

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	scans once in preceeding hours on the ports (in chronological order) 20547 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:47:50
attack	162.243.141.142 - - [30/Apr/2020:13:37:32 +0000] "GET /ReportServer HTTP/1.1" 403 154 "-" "Mozilla/5.0 zgrab/0.x"	2020-05-01 00:41:01

Type

Details

Datetime

attack

scans once in preceeding hours on the ports (in chronological order) 20547 resulting in total of 51 scans from 162.243.0.0/16 block.

2020-06-21 20:47:50

attack

162.243.141.142 - - [30/Apr/2020:13:37:32 +0000] "GET /ReportServer HTTP/1.1" 403 154 "-" "Mozilla/5.0 zgrab/0.x"

2020-05-01 00:41:01

Comments on same subnet:

IP	Type	Details	Datetime
162.243.141.19	attack	Malicious IP	2024-04-17 12:08:10
162.243.141.23	proxy	VPN	2023-01-31 13:52:10
162.243.141.131	attack	[Fri Jun 12 15:58:06 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986	2020-07-16 21:12:38
162.243.141.131	attackspam	[Fri Jun 12 15:58:08 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986	2020-07-13 03:26:33
162.243.141.36	attackbotsspam	[Sun Jun 21 23:01:54 2020] - DDoS Attack From IP: 162.243.141.36 Port: 49125	2020-07-13 02:40:21
162.243.141.131	attackbotsspam	[Fri Jun 12 15:58:11 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986	2020-07-08 23:11:43
162.243.141.36	attack	[Sun Jun 21 23:01:57 2020] - DDoS Attack From IP: 162.243.141.36 Port: 49125	2020-07-08 22:06:23
162.243.141.37	attack	Jun 21 23:55:38 Host-KEWR-E postfix/smtps/smtpd[2301]: lost connection after CONNECT from unknown[162.243.141.37] ...	2020-06-22 12:13:57
162.243.141.77	attackbots	scans once in preceeding hours on the ports (in chronological order) 1931 resulting in total of 51 scans from 162.243.0.0/16 block.	2020-06-21 20:48:03
162.243.141.165	attackspam	9042/tcp 9200/tcp 139/tcp... [2020-04-29/06-15]45pkt,35pt.(tcp),3pt.(udp)	2020-06-15 17:57:09
162.243.141.131	attackspambots	Unauthorized connection attempt from IP address 162.243.141.131 on Port 445(SMB)	2020-06-14 15:50:12
162.243.141.37	attackspambots	SSH login attempts.	2020-06-09 19:44:20
162.243.141.47	attack	2020-06-06 20:04:04 Unauthorized connection attempt to IMAP/POP	2020-06-07 17:25:23
162.243.141.232	attack	Misuse of DNS Server sending dot requests	2020-06-07 03:08:41
162.243.141.140	attackbotsspam	Fail2Ban Ban Triggered	2020-06-05 16:56:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.141.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61489
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.141.142.		IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020043000 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 00:40:55 CST 2020
;; MSG SIZE  rcvd: 119

Host info

142.141.243.162.in-addr.arpa domain name pointer zg-0428c-476.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.141.243.162.in-addr.arpa	name = zg-0428c-476.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
66.79.173.11	attackspambots	Unauthorized connection attempt from IP address 66.79.173.11 on Port 3306(MYSQL)	2019-06-30 05:10:48
118.69.76.189	attack	Unauthorized connection attempt from IP address 118.69.76.189 on Port 445(SMB)	2019-06-30 05:15:05
209.97.161.46	attackbots	2019-06-29T23:13:40.219735centos sshd\[13618\]: Invalid user sorin from 209.97.161.46 port 59282 2019-06-29T23:13:40.224113centos sshd\[13618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 2019-06-29T23:13:42.642402centos sshd\[13618\]: Failed password for invalid user sorin from 209.97.161.46 port 59282 ssh2	2019-06-30 05:49:28
142.93.74.45	attack	Jun 29 22:29:10 ovpn sshd\[32609\]: Invalid user musicbot from 142.93.74.45 Jun 29 22:29:10 ovpn sshd\[32609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.74.45 Jun 29 22:29:11 ovpn sshd\[32609\]: Failed password for invalid user musicbot from 142.93.74.45 port 36072 ssh2 Jun 29 22:30:46 ovpn sshd\[463\]: Invalid user hue from 142.93.74.45 Jun 29 22:30:46 ovpn sshd\[463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.74.45	2019-06-30 05:22:36
94.23.223.165	attackbots	Jun 29 21:00:43 smtp postfix/smtpd[11141]: NOQUEUE: reject: RCPT from unknown[94.23.223.165]: 554 5.7.1 Service unavailable; Client host [94.23.223.165] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=94.23.223.165; from= to= proto=ESMTP helo= ...	2019-06-30 05:44:43
117.86.35.239	attackspam	2019-06-29T19:10:03.325077 X postfix/smtpd[19305]: warning: unknown[117.86.35.239]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-29T20:09:28.427703 X postfix/smtpd[18860]: warning: unknown[117.86.35.239]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-29T21:01:24.219007 X postfix/smtpd[33128]: warning: unknown[117.86.35.239]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-06-30 05:24:08
201.69.140.161	attackspambots	Jun 28 05:04:32 xxxxxxx7446550 sshd[4212]: Invalid user filter from 201.69.140.161 Jun 28 05:04:32 xxxxxxx7446550 sshd[4212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-69-140-161.dial-up.telesp.net.br Jun 28 05:04:35 xxxxxxx7446550 sshd[4212]: Failed password for invalid user filter from 201.69.140.161 port 47916 ssh2 Jun 28 05:04:35 xxxxxxx7446550 sshd[4213]: Received disconnect from 201.69.140.161: 11: Bye Bye Jun 28 05:08:43 xxxxxxx7446550 sshd[5586]: Invalid user teamspeak from 201.69.140.161 Jun 28 05:08:43 xxxxxxx7446550 sshd[5586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201-69-140-161.dial-up.telesp.net.br Jun 28 05:08:45 xxxxxxx7446550 sshd[5586]: Failed password for invalid user teamspeak from 201.69.140.161 port 56190 ssh2 Jun 28 05:08:45 xxxxxxx7446550 sshd[5587]: Received disconnect from 201.69.140.161: 11: Bye Bye Jun 28 05:10:36 xxxxxxx7446550 sshd[6069]: I........ -------------------------------	2019-06-30 05:16:02
106.12.78.161	attackbotsspam	Jun 29 20:59:23 vps691689 sshd[10799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.161 Jun 29 20:59:25 vps691689 sshd[10799]: Failed password for invalid user claudiaclaudia. from 106.12.78.161 port 50416 ssh2 Jun 29 21:01:08 vps691689 sshd[10810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.161 ...	2019-06-30 05:25:00
87.110.219.209	attackbotsspam	Wordpress XMLRPC attack	2019-06-30 05:37:34
45.67.14.164	attackspam	/var/log/messages:Jun 27 22:21:42 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561674102.166:42936): pid=12154 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=12155 suid=74 rport=40210 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.67.14.164 terminal=? res=success' /var/log/messages:Jun 27 22:21:42 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561674102.170:42937): pid=12154 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=12155 suid=74 rport=40210 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.67.14.164 terminal=? res=success' /var/log/messages:Jun 27 22:21:46 sanyalne........ -------------------------------	2019-06-30 05:29:18
45.55.131.104	attackbots	Jun 29 21:45:13 meumeu sshd[12897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.131.104 Jun 29 21:45:15 meumeu sshd[12897]: Failed password for invalid user guest from 45.55.131.104 port 44038 ssh2 Jun 29 21:46:43 meumeu sshd[13309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.131.104 ...	2019-06-30 05:08:09
79.125.192.222	attack	Jun 30 01:41:38 tanzim-HP-Z238-Microtower-Workstation sshd\[19775\]: Invalid user oracle from 79.125.192.222 Jun 30 01:41:38 tanzim-HP-Z238-Microtower-Workstation sshd\[19775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.125.192.222 Jun 30 01:41:40 tanzim-HP-Z238-Microtower-Workstation sshd\[19775\]: Failed password for invalid user oracle from 79.125.192.222 port 43126 ssh2 ...	2019-06-30 05:27:29
122.129.121.149	attackspam	Jun 29 20:55:34 MK-Soft-VM3 sshd\[19931\]: Invalid user gg from 122.129.121.149 port 38122 Jun 29 20:55:34 MK-Soft-VM3 sshd\[19931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.129.121.149 Jun 29 20:55:36 MK-Soft-VM3 sshd\[19931\]: Failed password for invalid user gg from 122.129.121.149 port 38122 ssh2 ...	2019-06-30 05:23:34
2a02:13f0:8100:1:58c4:ad8f:505b:9129	attackspam	Bad bot requested remote resources	2019-06-30 05:29:37
192.99.70.12	attack	Jun 29 22:34:09 server sshd[12429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.12 ...	2019-06-30 05:17:31

Recently Reported IPs

102.66.104.226	42.157.29.223	93.68.101.233	42.64.107.131
196.163.97.84	48.41.121.76	89.178.212.206	20.86.112.13
86.164.69.27	60.162.23.222	60.3.38.17	214.73.240.74
59.0.22.131	198.153.1.218	52.71.205.120	101.46.238.20
49.85.233.96	45.185.208.112	36.92.7.187	27.155.105.208