Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
[Fri Jun 19 22:32:56 2020] - DDoS Attack From IP: 162.243.145.9 Port: 55083
2020-07-16 20:02:50
attackbots
[Fri Jun 19 22:32:58 2020] - DDoS Attack From IP: 162.243.145.9 Port: 55083
2020-07-13 02:44:34
attackbotsspam
1588872154 - 05/07/2020 19:22:34 Host: 162.243.145.9/162.243.145.9 Port: 138 TCP Blocked
2020-05-08 02:06:06
attackspam
8022/tcp 8087/tcp
[2020-04-29/30]2pkt
2020-05-01 23:34:36
Comments on same subnet:
IP Type Details Datetime
162.243.145.195 attack
162.243.145.195 - - [01/Oct/2020:17:05:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2596 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:17:05:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:17:05:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-02 00:44:39
162.243.145.195 attackbots
162.243.145.195 - - [01/Oct/2020:09:22:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2862 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:09:23:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2831 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [01/Oct/2020:09:23:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2866 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 16:50:20
162.243.145.195 attack
162.243.145.195 - - [21/Sep/2020:16:10:29 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [21/Sep/2020:16:10:31 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - [21/Sep/2020:16:10:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-22 00:20:13
162.243.145.195 attack
Automatic report generated by Wazuh
2020-09-21 16:01:43
162.243.145.195 attackspam
CMS (WordPress or Joomla) login attempt.
2020-09-21 07:55:55
162.243.145.195 attackspam
Sep 20 16:08:16 10.23.102.230 wordpress(www.ruhnke.cloud)[41055]: Blocked authentication attempt for admin from 162.243.145.195
...
2020-09-20 22:49:49
162.243.145.195 attackbotsspam
162.243.145.195 - - \[20/Sep/2020:08:30:11 +0200\] "POST /wp-login.php HTTP/1.0" 200 9641 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[20/Sep/2020:08:30:13 +0200\] "POST /wp-login.php HTTP/1.0" 200 9639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[20/Sep/2020:08:30:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 9487 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 14:40:56
162.243.145.195 attack
162.243.145.195 - - \[19/Sep/2020:22:59:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 8786 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:20 +0200\] "POST /wp-login.php HTTP/1.0" 200 8612 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
162.243.145.195 - - \[19/Sep/2020:22:59:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 8607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 06:39:46
162.243.145.36 attack
[Fri Jun 12 05:30:57 2020] - DDoS Attack From IP: 162.243.145.36 Port: 35586
2020-07-16 21:19:34
162.243.145.80 attackbotsspam
[Mon Jun 15 02:54:26 2020] - DDoS Attack From IP: 162.243.145.80 Port: 35122
2020-07-16 20:47:35
162.243.145.78 attackbots
[Sun Jun 21 02:59:49 2020] - DDoS Attack From IP: 162.243.145.78 Port: 38625
2020-07-16 19:59:34
162.243.145.36 attackbots
[Fri Jun 12 05:30:59 2020] - DDoS Attack From IP: 162.243.145.36 Port: 35586
2020-07-13 03:28:40
162.243.145.80 attack
[Mon Jun 15 02:54:28 2020] - DDoS Attack From IP: 162.243.145.80 Port: 35122
2020-07-13 03:13:20
162.243.145.78 attackbotsspam
[Sun Jun 21 02:59:51 2020] - DDoS Attack From IP: 162.243.145.78 Port: 38625
2020-07-13 02:44:04
162.243.145.66 attackspambots
scans 2 times in preceeding hours on the ports (in chronological order) 8140 3479 resulting in total of 51 scans from 162.243.0.0/16 block.
2020-06-21 20:41:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.243.145.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4157
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.243.145.9.			IN	A

;; AUTHORITY SECTION:
.			587	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 142 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 23:34:31 CST 2020
;; MSG SIZE  rcvd: 117
Host info
9.145.243.162.in-addr.arpa domain name pointer zg-0428c-708.stretchoid.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
9.145.243.162.in-addr.arpa	name = zg-0428c-708.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
104.210.63.107 attackspambots
B: Abusive ssh attack
2020-04-07 23:42:43
141.98.9.161 attack
Apr  7 15:06:44 host sshd[53150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161  user=root
Apr  7 15:06:46 host sshd[53150]: Failed password for root from 141.98.9.161 port 38451 ssh2
...
2020-04-07 23:26:04
159.89.84.181 attackspambots
DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks
UA removed
2020-04-07 23:16:30
210.16.113.99 attackbotsspam
(sshd) Failed SSH login from 210.16.113.99 (IN/India/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  7 14:49:34 ubnt-55d23 sshd[31768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.16.113.99  user=root
Apr  7 14:49:36 ubnt-55d23 sshd[31768]: Failed password for root from 210.16.113.99 port 44002 ssh2
2020-04-07 23:43:07
74.82.47.62 attackbots
firewall-block, port(s): 27017/tcp
2020-04-07 22:51:20
178.62.79.227 attack
Apr  7 20:51:03 webhost01 sshd[25025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.79.227
Apr  7 20:51:05 webhost01 sshd[25025]: Failed password for invalid user deploy from 178.62.79.227 port 47164 ssh2
...
2020-04-07 23:13:31
14.29.219.4 attackspambots
(sshd) Failed SSH login from 14.29.219.4 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  7 17:13:52 ubnt-55d23 sshd[29512]: Invalid user teamspeak3 from 14.29.219.4 port 49452
Apr  7 17:13:54 ubnt-55d23 sshd[29512]: Failed password for invalid user teamspeak3 from 14.29.219.4 port 49452 ssh2
2020-04-07 23:17:15
14.254.199.33 attack
Honeypot attack, port: 445, PTR: static.vnpt.vn.
2020-04-07 23:39:51
222.186.175.163 attackbots
Apr  7 18:27:52 ift sshd\[28894\]: Failed password for root from 222.186.175.163 port 29702 ssh2Apr  7 18:27:55 ift sshd\[28894\]: Failed password for root from 222.186.175.163 port 29702 ssh2Apr  7 18:27:59 ift sshd\[28894\]: Failed password for root from 222.186.175.163 port 29702 ssh2Apr  7 18:28:12 ift sshd\[28922\]: Failed password for root from 222.186.175.163 port 36354 ssh2Apr  7 18:28:15 ift sshd\[28922\]: Failed password for root from 222.186.175.163 port 36354 ssh2
...
2020-04-07 23:29:15
119.28.26.28 attackspambots
Brute-Force on magento admin
2020-04-07 23:03:26
104.140.188.34 attackbotsspam
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-04-07 22:56:36
209.222.101.27 attack
[2020-04-07 09:08:03] NOTICE[12114][C-0000279c] chan_sip.c: Call from '' (209.222.101.27:56683) to extension '9201146406820526' rejected because extension not found in context 'public'.
[2020-04-07 09:08:03] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-07T09:08:03.719-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9201146406820526",SessionID="0x7f020c0db748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/209.222.101.27/56683",ACLName="no_extension_match"
[2020-04-07 09:14:38] NOTICE[12114][C-000027a3] chan_sip.c: Call from '' (209.222.101.27:52861) to extension '0046192777635' rejected because extension not found in context 'public'.
...
2020-04-07 22:58:31
113.125.82.222 attackbots
Apr  7 12:45:52 game-panel sshd[4517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.82.222
Apr  7 12:45:54 game-panel sshd[4517]: Failed password for invalid user deploy from 113.125.82.222 port 34520 ssh2
Apr  7 12:49:41 game-panel sshd[4633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.82.222
2020-04-07 23:41:39
92.118.38.82 attackspambots
Apr  7 17:12:16 srv01 postfix/smtpd\[30849\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  7 17:12:18 srv01 postfix/smtpd\[24415\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  7 17:12:36 srv01 postfix/smtpd\[24415\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  7 17:12:46 srv01 postfix/smtpd\[5876\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr  7 17:12:54 srv01 postfix/smtpd\[30849\]: warning: unknown\[92.118.38.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-04-07 23:20:02
45.55.179.132 attackbots
firewall-block, port(s): 3487/tcp
2020-04-07 23:02:32

Recently Reported IPs

186.226.0.61 31.198.116.156 14.182.103.165 183.130.2.52
14.114.218.28 130.178.235.128 201.233.166.78 90.114.132.254
50.146.17.192 162.243.142.72 33.165.16.103 165.197.183.26
139.190.223.111 120.5.226.248 130.37.245.17 180.40.206.10
217.147.91.177 81.181.199.215 99.8.185.204 98.36.65.81