Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: GoDaddy.com LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
 TCP (SYN) 166.62.45.158:56992 -> port 445, len 44
2020-08-14 00:54:59
Comments on same subnet:
IP Type Details Datetime
166.62.45.39 attackbotsspam
fail2ban honeypot
2019-11-10 18:30:06
166.62.45.39 attackbots
166.62.45.39 - - [09/Oct/2019:21:44:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - [09/Oct/2019:21:44:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - [09/Oct/2019:21:44:12 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - [09/Oct/2019:21:44:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - [09/Oct/2019:21:44:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - [09/Oct/2019:21:44:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-10-10 06:00:55
166.62.45.39 attack
Trying different user names to hack into WP site.
2019-08-22 07:28:58
166.62.45.39 attackspam
Automatic report - Banned IP Access
2019-08-07 13:55:50
166.62.45.39 attackspam
166.62.45.39 - - \[30/Jul/2019:12:07:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
166.62.45.39 - - \[30/Jul/2019:12:08:00 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-07-30 19:16:30
166.62.45.39 attack
xmlrpc attack
2019-07-29 09:18:53
166.62.45.39 attackbots
xmlrpc attack
2019-07-24 15:32:20
166.62.45.39 attackbotsspam
Auto reported by IDS
2019-07-20 15:24:52
166.62.45.39 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-07-04 22:10:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.62.45.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10627
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;166.62.45.158.			IN	A

;; AUTHORITY SECTION:
.			153	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081300 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 14 00:54:50 CST 2020
;; MSG SIZE  rcvd: 117
Host info
158.45.62.166.in-addr.arpa domain name pointer ip-166-62-45-158.ip.secureserver.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
158.45.62.166.in-addr.arpa	name = ip-166-62-45-158.ip.secureserver.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
59.126.58.152 attack
Port probing on unauthorized port 23
2020-06-01 19:01:54
114.42.101.155 attackspam
 TCP (SYN) 114.42.101.155:10694 -> port 23, len 44
2020-06-01 18:52:51
5.104.235.150 attack
Unauthorized connection attempt from IP address 5.104.235.150 on Port 445(SMB)
2020-06-01 18:34:08
218.69.19.150 attack
Jun  1 03:16:43 euve59663 sshd[6922]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.=
69.19.150  user=3Dr.r
Jun  1 03:16:46 euve59663 sshd[6922]: Failed password for r.r from 218=
.69.19.150 port 38230 ssh2
Jun  1 03:16:46 euve59663 sshd[6922]: Received disconnect from 218.69.1=
9.150: 11: Bye Bye [preauth]
Jun  1 03:20:12 euve59663 sshd[7022]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.=
69.19.150  user=3Dr.r
Jun  1 03:20:13 euve59663 sshd[7022]: Failed password for r.r from 218=
.69.19.150 port 57182 ssh2
Jun  1 03:20:13 euve59663 sshd[7022]: Received disconnect from 218.69.1=
9.150: 11: Bye Bye [preauth]
Jun  1 03:23:58 euve59663 sshd[7094]: pam_unix(sshd:auth): authenticati=
on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.=
69.19.150  user=3Dr.r
Jun  1 03:24:00 euve59663 sshd[7094]: Failed password for r.r from 218=
.69.19........
-------------------------------
2020-06-01 18:57:06
116.98.173.166 attackspam
Attempted connection to port 445.
2020-06-01 19:14:47
118.168.109.215 attackspambots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-06-01 18:36:25
141.212.125.103 attackspambots
Attempted connection to port 80.
2020-06-01 19:11:49
176.157.134.217 attack
ssh brute force
2020-06-01 18:37:19
111.229.76.117 attack
2020-06-01T10:02:28.961250sd-86998 sshd[25807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117  user=root
2020-06-01T10:02:30.699982sd-86998 sshd[25807]: Failed password for root from 111.229.76.117 port 38452 ssh2
2020-06-01T10:07:03.513349sd-86998 sshd[26411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117  user=root
2020-06-01T10:07:05.674836sd-86998 sshd[26411]: Failed password for root from 111.229.76.117 port 33240 ssh2
2020-06-01T10:11:43.846646sd-86998 sshd[27070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117  user=root
2020-06-01T10:11:46.113505sd-86998 sshd[27070]: Failed password for root from 111.229.76.117 port 56258 ssh2
...
2020-06-01 18:49:11
106.12.95.45 attack
SSH bruteforce
2020-06-01 18:53:45
187.214.235.128 attack
Unauthorized connection attempt detected from IP address 187.214.235.128 to port 8080
2020-06-01 19:07:42
14.240.157.101 attack
Unauthorized connection attempt from IP address 14.240.157.101 on Port 445(SMB)
2020-06-01 18:45:20
212.154.69.54 attackspam
Brute forcing RDP port 3389
2020-06-01 18:41:58
58.53.187.3 attackspambots
Multiport scan : 5 ports scanned 80 6380 7002 8088 9200
2020-06-01 18:55:04
222.186.15.62 attackbotsspam
Jun  1 12:40:23 plex sshd[31055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62  user=root
Jun  1 12:40:25 plex sshd[31055]: Failed password for root from 222.186.15.62 port 40519 ssh2
2020-06-01 18:41:34

Recently Reported IPs

79.61.135.168 61.238.19.227 59.149.174.229 46.239.61.103
45.243.231.95 45.136.108.62 41.216.172.34 37.235.221.211
36.72.26.53 36.37.225.50 220.88.220.86 218.253.34.97
194.28.37.72 185.26.168.37 107.171.218.210 218.130.200.230
183.179.28.55 181.143.246.2 107.155.186.248 178.90.38.253