Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
[Sun Jun 21 02:59:49 2020] - DDoS Attack From IP: 162.243.145.78 Port: 38625
2020-07-16 19:59:34
attackbotsspam
[Sun Jun 21 02:59:51 2020] - DDoS Attack From IP: 162.243.145.78 Port: 38625
2020-07-13 02:44:04
Comments on same subnet:
IP Type Details Datetime
162.243.145.195 attack
162.243.145.195 - - [01/Oct/2020:17:05:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2596 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:17:05:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:17:05:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-02 00:44:39
162.243.145.195 attackbots
162.243.145.195 - - [01/Oct/2020:09:22:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2862 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:09:23:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2831 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:09:23:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2866 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 16:50:20
162.243.145.195 attack
162.243.145.195 - - [21/Sep/2020:16:10:29 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [21/Sep/2020:16:10:31 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [21/Sep/2020:16:10:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-22 00:20:13
162.243.145.195 attack
Automatic report generated by Wazuh
2020-09-21 16:01:43
162.243.145.195 attackspam
CMS (WordPress or Joomla) login attempt.
2020-09-21 07:55:55
162.243.145.195 attackspam
Sep 20 16:08:16 10.23.102.230 wordpress(www.ruhnke.cloud)[41055]: Blocked authentication attempt for admin from 162.243.145.195
...
2020-09-20 22:49:49
162.243.145.195 attackbotsspam
162.243.145.195 - - \[20/Sep/2020:08:30:11 +0200\] "POST /wp-login.php HTTP/1.0" 200 9641 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[20/Sep/2020:08:30:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 9639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[20/Sep/2020:08:30:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 9487 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 14:40:56
162.243.145.195 attack
162.243.145.195 - - \[19/Sep/2020:22:59:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 8786 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:20 +0200\] "POST /wp-login.php HTTP/1.0" 200 8612 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 8607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 06:39:46
162.243.145.36 attack
[Fri Jun 12 05:30:57 2020] - DDoS Attack From IP: 162.243.145.36 Port: 35586
2020-07-16 21:19:34
162.243.145.80 attackbotsspam
[Mon Jun 15 02:54:26 2020] - DDoS Attack From IP: 162.243.145.80 Port: 35122
2020-07-16 20:47:35
162.243.145.9 attack
[Fri Jun 19 22:32:56 2020] - DDoS Attack From IP: 162.243.145.9 Port: 55083
2020-07-16 20:02:50
162.243.145.36 attackbots
[Fri Jun 12 05:30:59 2020] - DDoS Attack From IP: 162.243.145.36 Port: 35586
2020-07-13 03:28:40
162.243.145.80 attack
[Mon Jun 15 02:54:28 2020] - DDoS Attack From IP: 162.243.145.80 Port: 35122
2020-07-13 03:13:20
162.243.145.9 attackbots
[Fri Jun 19 22:32:58 2020] - DDoS Attack From IP: 162.243.145.9 Port: 55083
2020-07-13 02:44:34
162.243.145.66 attackspambots
scans 2 times in preceeding hours on the ports (in chronological order) 8140 3479 resulting in total of 51 scans from 162.243.0.0/16 block.
2020-06-21 20:41:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.145.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.145.78.			IN	A

;; AUTHORITY SECTION:
.			500	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071201 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 13 02:44:00 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 78.145.243.162.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 78.145.243.162.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
171.107.4.92 attack
Email rejected due to spam filtering
2020-03-03 19:32:51
202.109.189.155 attackspam
CN_MAINT-IP-WWF_<177>1583211036 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 202.109.189.155:59663
2020-03-03 19:40:43
222.186.173.215 attackspambots
Mar  3 12:53:17 h2177944 sshd\[27618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
Mar  3 12:53:19 h2177944 sshd\[27618\]: Failed password for root from 222.186.173.215 port 42714 ssh2
Mar  3 12:53:22 h2177944 sshd\[27618\]: Failed password for root from 222.186.173.215 port 42714 ssh2
Mar  3 12:53:26 h2177944 sshd\[27618\]: Failed password for root from 222.186.173.215 port 42714 ssh2
Mar  3 12:53:29 h2177944 sshd\[27618\]: Failed password for root from 222.186.173.215 port 42714 ssh2
Mar  3 12:53:32 h2177944 sshd\[27618\]: Failed password for root from 222.186.173.215 port 42714 ssh2
Mar  3 12:53:32 h2177944 sshd\[27618\]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 42714 ssh2 \[preauth\]
...
2020-03-03 19:59:59
112.171.60.125 attack
Mar  3 05:50:22 debian-2gb-nbg1-2 kernel: \[5470202.529942\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=112.171.60.125 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=11623 PROTO=TCP SPT=39656 DPT=23 WINDOW=30677 RES=0x00 SYN URGP=0
2020-03-03 19:53:45
210.18.187.47 attackbotsspam
Email rejected due to spam filtering
2020-03-03 19:33:50
80.82.70.239 attackspambots
03/03/2020-06:38:45.459714 80.82.70.239 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-03-03 20:06:24
23.24.193.165 attack
(smtpauth) Failed SMTP AUTH login from 23.24.193.165 (US/United States/23-24-193-165-static.hfc.comcastbusiness.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-03 08:20:35 login authenticator failed for 23-24-193-165-static.hfc.comcastbusiness.net (ADMIN) [23.24.193.165]: 535 Incorrect authentication data (set_id=admin@sepasgroup.com)
2020-03-03 19:37:20
46.148.34.43 attack
(directadmin) Failed DirectAdmin login from 46.148.34.43 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020:03:03-08:20:30: '46.148.34.43' 1 failed login attempts. Account 'unknown'
2020-03-03 19:44:54
123.24.159.76 attack
failed_logins
2020-03-03 19:56:58
14.136.204.41 attack
2020-03-03T12:58:46.513783scmdmz1 sshd[707]: Invalid user test from 14.136.204.41 port 44610
2020-03-03T12:58:48.952835scmdmz1 sshd[707]: Failed password for invalid user test from 14.136.204.41 port 44610 ssh2
2020-03-03T13:02:32.874772scmdmz1 sshd[1055]: Invalid user user from 14.136.204.41 port 57889
...
2020-03-03 20:09:28
120.220.15.5 attack
Mar  3 08:48:53 localhost sshd[31230]: Invalid user oracle from 120.220.15.5 port 4306
Mar  3 08:48:53 localhost sshd[31230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.220.15.5
Mar  3 08:48:53 localhost sshd[31230]: Invalid user oracle from 120.220.15.5 port 4306
Mar  3 08:48:56 localhost sshd[31230]: Failed password for invalid user oracle from 120.220.15.5 port 4306 ssh2
Mar  3 08:54:49 localhost sshd[31838]: Invalid user oracle from 120.220.15.5 port 4307
...
2020-03-03 20:03:51
74.82.47.11 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-03-03 20:08:39
43.250.105.168 attackbots
Mar  3 08:33:29 MK-Soft-Root1 sshd[20085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.250.105.168 
Mar  3 08:33:31 MK-Soft-Root1 sshd[20085]: Failed password for invalid user web from 43.250.105.168 port 41055 ssh2
...
2020-03-03 20:04:09
180.232.9.55 attackspam
Mar  3 12:45:56 ewelt sshd[25166]: Invalid user oracle from 180.232.9.55 port 53286
Mar  3 12:45:56 ewelt sshd[25166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.232.9.55
Mar  3 12:45:56 ewelt sshd[25166]: Invalid user oracle from 180.232.9.55 port 53286
Mar  3 12:45:58 ewelt sshd[25166]: Failed password for invalid user oracle from 180.232.9.55 port 53286 ssh2
...
2020-03-03 20:05:31
185.176.27.190 attackspam
Mar  3 12:27:03 debian-2gb-nbg1-2 kernel: \[5494002.733712\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.190 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=4783 PROTO=TCP SPT=58206 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-03 19:56:29

Recently Reported IPs

116.108.1.159 211.75.163.89 13.72.119.20 77.95.103.42
152.252.141.69 15.164.112.9 164.21.17.142 52.154.162.27
45.148.9.32 185.24.124.50 88.249.124.121 142.147.104.252
79.116.32.178 150.109.58.69 5.62.43.161 35.228.27.87
101.69.128.218 37.49.224.73 202.78.227.108 117.29.240.145