166.62.45.158 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: GoDaddy.com LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	TCP (SYN) 166.62.45.158:56992 -> port 445, len 44	2020-08-14 00:54:59

Comments on same subnet:

IP	Type	Details	Datetime
166.62.45.39	attackbotsspam	fail2ban honeypot	2019-11-10 18:30:06
166.62.45.39	attackbots	166.62.45.39 - - [09/Oct/2019:21:44:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - [09/Oct/2019:21:44:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - [09/Oct/2019:21:44:12 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - [09/Oct/2019:21:44:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - [09/Oct/2019:21:44:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - [09/Oct/2019:21:44:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-10 06:00:55
166.62.45.39	attack	Trying different user names to hack into WP site.	2019-08-22 07:28:58
166.62.45.39	attackspam	Automatic report - Banned IP Access	2019-08-07 13:55:50
166.62.45.39	attackspam	166.62.45.39 - - \[30/Jul/2019:12:07:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 166.62.45.39 - - \[30/Jul/2019:12:08:00 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ...	2019-07-30 19:16:30
166.62.45.39	attack	xmlrpc attack	2019-07-29 09:18:53
166.62.45.39	attackbots	xmlrpc attack	2019-07-24 15:32:20
166.62.45.39	attackbotsspam	Auto reported by IDS	2019-07-20 15:24:52
166.62.45.39	attackbots	WordPress login Brute force / Web App Attack on client site.	2019-07-04 22:10:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.62.45.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10627
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;166.62.45.158.			IN	A

;; AUTHORITY SECTION:
.			153	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081300 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 14 00:54:50 CST 2020
;; MSG SIZE  rcvd: 117

Host info

158.45.62.166.in-addr.arpa domain name pointer ip-166-62-45-158.ip.secureserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
158.45.62.166.in-addr.arpa	name = ip-166-62-45-158.ip.secureserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
59.126.58.152	attack	Port probing on unauthorized port 23	2020-06-01 19:01:54
114.42.101.155	attackspam	TCP (SYN) 114.42.101.155:10694 -> port 23, len 44	2020-06-01 18:52:51
5.104.235.150	attack	Unauthorized connection attempt from IP address 5.104.235.150 on Port 445(SMB)	2020-06-01 18:34:08
218.69.19.150	attack	Jun 1 03:16:43 euve59663 sshd[6922]: pam_unix(sshd:auth): authenticati= on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.= 69.19.150 user=3Dr.r Jun 1 03:16:46 euve59663 sshd[6922]: Failed password for r.r from 218= .69.19.150 port 38230 ssh2 Jun 1 03:16:46 euve59663 sshd[6922]: Received disconnect from 218.69.1= 9.150: 11: Bye Bye [preauth] Jun 1 03:20:12 euve59663 sshd[7022]: pam_unix(sshd:auth): authenticati= on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.= 69.19.150 user=3Dr.r Jun 1 03:20:13 euve59663 sshd[7022]: Failed password for r.r from 218= .69.19.150 port 57182 ssh2 Jun 1 03:20:13 euve59663 sshd[7022]: Received disconnect from 218.69.1= 9.150: 11: Bye Bye [preauth] Jun 1 03:23:58 euve59663 sshd[7094]: pam_unix(sshd:auth): authenticati= on failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218.= 69.19.150 user=3Dr.r Jun 1 03:24:00 euve59663 sshd[7094]: Failed password for r.r from 218= .69.19........ -------------------------------	2020-06-01 18:57:06
116.98.173.166	attackspam	Attempted connection to port 445.	2020-06-01 19:14:47
118.168.109.215	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-06-01 18:36:25
141.212.125.103	attackspambots	Attempted connection to port 80.	2020-06-01 19:11:49
176.157.134.217	attack	ssh brute force	2020-06-01 18:37:19
111.229.76.117	attack	2020-06-01T10:02:28.961250sd-86998 sshd[25807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117 user=root 2020-06-01T10:02:30.699982sd-86998 sshd[25807]: Failed password for root from 111.229.76.117 port 38452 ssh2 2020-06-01T10:07:03.513349sd-86998 sshd[26411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117 user=root 2020-06-01T10:07:05.674836sd-86998 sshd[26411]: Failed password for root from 111.229.76.117 port 33240 ssh2 2020-06-01T10:11:43.846646sd-86998 sshd[27070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.117 user=root 2020-06-01T10:11:46.113505sd-86998 sshd[27070]: Failed password for root from 111.229.76.117 port 56258 ssh2 ...	2020-06-01 18:49:11
106.12.95.45	attack	SSH bruteforce	2020-06-01 18:53:45
187.214.235.128	attack	Unauthorized connection attempt detected from IP address 187.214.235.128 to port 8080	2020-06-01 19:07:42
14.240.157.101	attack	Unauthorized connection attempt from IP address 14.240.157.101 on Port 445(SMB)	2020-06-01 18:45:20
212.154.69.54	attackspam	Brute forcing RDP port 3389	2020-06-01 18:41:58
58.53.187.3	attackspambots	Multiport scan : 5 ports scanned 80 6380 7002 8088 9200	2020-06-01 18:55:04
222.186.15.62	attackbotsspam	Jun 1 12:40:23 plex sshd[31055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root Jun 1 12:40:25 plex sshd[31055]: Failed password for root from 222.186.15.62 port 40519 ssh2	2020-06-01 18:41:34

Recently Reported IPs

79.61.135.168	61.238.19.227	59.149.174.229	46.239.61.103
45.243.231.95	45.136.108.62	41.216.172.34	37.235.221.211
36.72.26.53	36.37.225.50	220.88.220.86	218.253.34.97
194.28.37.72	185.26.168.37	107.171.218.210	218.130.200.230
183.179.28.55	181.143.246.2	107.155.186.248	178.90.38.253