Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Scan ports
2020-05-04 12:49:33
Comments on same subnet:
IP Type Details Datetime
162.243.141.19 attack
Malicious IP
2024-04-17 12:08:10
162.243.141.23 proxy
VPN
2023-01-31 13:52:10
162.243.141.131 attack
[Fri Jun 12 15:58:06 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986
2020-07-16 21:12:38
162.243.141.131 attackspam
[Fri Jun 12 15:58:08 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986
2020-07-13 03:26:33
162.243.141.36 attackbotsspam
[Sun Jun 21 23:01:54 2020] - DDoS Attack From IP: 162.243.141.36 Port: 49125
2020-07-13 02:40:21
162.243.141.131 attackbotsspam
[Fri Jun 12 15:58:11 2020] - DDoS Attack From IP: 162.243.141.131 Port: 36986
2020-07-08 23:11:43
162.243.141.36 attack
[Sun Jun 21 23:01:57 2020] - DDoS Attack From IP: 162.243.141.36 Port: 49125
2020-07-08 22:06:23
162.243.141.37 attack
Jun 21 23:55:38 Host-KEWR-E postfix/smtps/smtpd[2301]: lost connection after CONNECT from unknown[162.243.141.37]
...
2020-06-22 12:13:57
162.243.141.77 attackbots
scans once in preceeding hours on the ports (in chronological order) 1931 resulting in total of 51 scans from 162.243.0.0/16 block.
2020-06-21 20:48:03
162.243.141.142 attack
scans once in preceeding hours on the ports (in chronological order) 20547 resulting in total of 51 scans from 162.243.0.0/16 block.
2020-06-21 20:47:50
162.243.141.165 attackspam
9042/tcp 9200/tcp 139/tcp...
[2020-04-29/06-15]45pkt,35pt.(tcp),3pt.(udp)
2020-06-15 17:57:09
162.243.141.131 attackspambots
Unauthorized connection attempt from IP address 162.243.141.131 on Port 445(SMB)
2020-06-14 15:50:12
162.243.141.37 attackspambots
SSH login attempts.
2020-06-09 19:44:20
162.243.141.47 attack
2020-06-06 20:04:04 Unauthorized connection attempt to IMAP/POP
2020-06-07 17:25:23
162.243.141.232 attack
Misuse of DNS Server sending dot requests
2020-06-07 03:08:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.141.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.141.212.		IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050301 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 12:49:26 CST 2020
;; MSG SIZE  rcvd: 119
Host info
212.141.243.162.in-addr.arpa domain name pointer zg-0428c-485.stretchoid.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
212.141.243.162.in-addr.arpa	name = zg-0428c-485.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
91.209.157.22 attack
Automatic report - Port Scan Attack
2020-01-11 08:49:08
174.138.58.149 attackspambots
Jan 11 02:07:29 server sshd\[17480\]: Invalid user bub from 174.138.58.149
Jan 11 02:07:29 server sshd\[17480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.58.149 
Jan 11 02:07:31 server sshd\[17480\]: Failed password for invalid user bub from 174.138.58.149 port 53204 ssh2
Jan 11 02:20:55 server sshd\[20824\]: Invalid user bn from 174.138.58.149
Jan 11 02:20:55 server sshd\[20824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.58.149 
...
2020-01-11 08:47:34
181.229.108.89 attackspam
Jan 10 22:07:23 grey postfix/smtpd\[31086\]: NOQUEUE: reject: RCPT from unknown\[181.229.108.89\]: 554 5.7.1 Service unavailable\; Client host \[181.229.108.89\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=181.229.108.89\; from=\ to=\ proto=ESMTP helo=\<89-108-229-181.cab.prima.com.ar\>
...
2020-01-11 09:01:54
79.176.222.129 attack
Automatic report - Port Scan Attack
2020-01-11 08:24:46
222.186.42.136 attackspam
Jan 11 01:38:12 markkoudstaal sshd[31518]: Failed password for root from 222.186.42.136 port 48555 ssh2
Jan 11 01:38:14 markkoudstaal sshd[31518]: Failed password for root from 222.186.42.136 port 48555 ssh2
Jan 11 01:38:16 markkoudstaal sshd[31518]: Failed password for root from 222.186.42.136 port 48555 ssh2
2020-01-11 08:45:58
151.80.144.255 attackbotsspam
Triggered by Fail2Ban at Ares web server
2020-01-11 08:24:18
71.6.158.166 attackspam
Scanning random ports - tries to find possible vulnerable services
2020-01-11 08:39:09
2.218.44.73 attack
Jan 10 22:07:35 grey postfix/smtpd\[30286\]: NOQUEUE: reject: RCPT from unknown\[2.218.44.73\]: 554 5.7.1 Service unavailable\; Client host \[2.218.44.73\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[2.218.44.73\]\; from=\ to=\ proto=ESMTP helo=\<02da2c49.bb.sky.com\>
...
2020-01-11 08:55:55
185.176.27.42 attackspam
01/10/2020-19:48:57.205533 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-01-11 08:58:22
90.180.92.121 attack
$f2bV_matches
2020-01-11 08:52:35
139.28.218.34 attack
Portscan or hack attempt detected by psad/fwsnort
2020-01-11 08:28:43
222.186.30.76 attackbotsspam
Jan 11 01:47:57 amit sshd\[11196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Jan 11 01:47:59 amit sshd\[11196\]: Failed password for root from 222.186.30.76 port 46828 ssh2
Jan 11 01:48:01 amit sshd\[11196\]: Failed password for root from 222.186.30.76 port 46828 ssh2
...
2020-01-11 08:50:30
118.25.101.161 attackbots
Jan 10 18:36:50 askasleikir sshd[32854]: Failed password for root from 118.25.101.161 port 50190 ssh2
2020-01-11 09:01:22
196.52.43.115 attackspam
Unauthorized connection attempt detected from IP address 196.52.43.115 to port 9002
2020-01-11 09:03:50
78.134.99.105 attack
Jan 10 23:26:15 vps691689 sshd[22575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.134.99.105
Jan 10 23:26:17 vps691689 sshd[22575]: Failed password for invalid user fnb from 78.134.99.105 port 42540 ssh2
...
2020-01-11 08:32:16

Recently Reported IPs

187.205.247.155 117.246.88.248 167.114.12.244 195.79.103.211
198.151.57.252 146.176.239.84 115.18.14.46 185.116.112.83
0.245.42.244 197.132.39.87 27.72.56.152 83.184.107.43
42.198.29.139 213.4.87.147 183.242.61.234 165.84.219.70
46.24.52.29 17.242.241.203 21.194.31.23 149.38.71.141