JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.198.66.80

143.198.66.80 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1164868.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.198.66.80

Whois 143.198.66.80

IP Abuse Reports for 143.198.66.80:

This IP address has been reported a total of 11 times from 9 distinct sources. 143.198.66.80 was first reported on March 21st 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Ashley White	2023-10-30 01:59:46 (2 years ago)	port scanning	Port Scan
🇨🇳 ThreatBook.io	2022-12-08 16:45:07 (3 years ago)	2022-12-08 13:23:51 / 2022-12-08 13:23:59 /flu/403.html 2022-12-08 13:24:00 / 2022-12-08 13:23:53 /c ... show more 2022-12-08 13:23:51 / 2022-12-08 13:23:59 /flu/403.html 2022-12-08 13:24:00 / 2022-12-08 13:23:53 /c/version.js 2022-12-08 13:23:57 /stream/live.php 2022-12-08 13:23:56 /stalker_portal/c/version.js 2022-12-08 13:23:55 /streaming/clients_live.php 2022-12-08 13:23:52 /system_api.php show less	Web App Attack
🇳🇱 chriscasparo	2022-12-08 10:17:13 (3 years ago)	2022-12-08 10:19:12 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was ... show more 2022-12-08 10:19:12 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was "Accept-Encoding: gzip, deflate") 2022-12-08 10:19:14 no host name found for IP address 143.198.66.80 2022-12-08 10:19:14 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was "Accept-Encoding: gzip, deflate") 2022-12-08 10:19:16 no host name found for IP address 143.198.66.80 2022-12-08 10:19:16 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was "Accept-Encoding: gzip, deflate") 2022-12-08 10:19:17 no host name found for IP address 143.198.66.80 2022-12-08 10:19:17 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was "Accept-Encoding: gzip, deflate") 2022-12-08 10:19:19 no host name found for IP address 143.198.66.80 2022-12-08 10:19:19 SMTP call from [143.198.66.80] dropped: too many unrecognized commands (last was "Accept-Encoding: gzip, deflate") show less	Port Scan Hacking Brute-Force
🇩🇪 formality	2021-03-21 23:53:41 (5 years ago)	Invalid user admin from 143.198.66.80 port 47164	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-03-21 15:25:56 (5 years ago)	Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[1102 ... show more Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[11028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:45 foo sshd[11028]: Failed password for invalid user admin from 143.198.66.80 port 37522 ssh2 Mar 21 13:03:46 foo sshd[11028]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:46 foo sshd[11030]: Invalid user telnet from 143.198.66.80 Mar 21 13:03:46 foo sshd[11030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:48 foo sshd[11030]: Failed password for invalid user telnet from 143.198.66.80 port 38396 ssh2 Mar 21 13:03:50 foo sshd[11030]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:50 foo sshd[11032]: Invalid user login from 143.198.66.80 Mar 21 13:03:50 f........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2021-03-21 15:09:08 (5 years ago)	Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[1102 ... show more Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[11028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:45 foo sshd[11028]: Failed password for invalid user admin from 143.198.66.80 port 37522 ssh2 Mar 21 13:03:46 foo sshd[11028]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:46 foo sshd[11030]: Invalid user telnet from 143.198.66.80 Mar 21 13:03:46 foo sshd[11030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:48 foo sshd[11030]: Failed password for invalid user telnet from 143.198.66.80 port 38396 ssh2 Mar 21 13:03:50 foo sshd[11030]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:50 foo sshd[11032]: Invalid user login from 143.198.66.80 Mar 21 13:03:50 f........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 iNetWorker	2021-03-21 14:52:08 (5 years ago)	trying to access non-authorized port	Port Scan
🇫🇷 Johan	2021-03-21 14:00:57 (5 years ago)	2021-03-21T19:00:54.082422ks3355764 sshd[5089]: Invalid user admin from 143.198.66.80 port 54894 202 ... show more 2021-03-21T19:00:54.082422ks3355764 sshd[5089]: Invalid user admin from 143.198.66.80 port 54894 2021-03-21T19:00:56.801026ks3355764 sshd[5089]: error: PAM: User not known to the underlying authentication module for illegal user admin from 143.198.66.80 ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-03-21 13:22:59 (5 years ago)	Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[1102 ... show more Mar 21 13:03:43 foo sshd[11028]: Invalid user admin from 143.198.66.80 Mar 21 13:03:43 foo sshd[11028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:45 foo sshd[11028]: Failed password for invalid user admin from 143.198.66.80 port 37522 ssh2 Mar 21 13:03:46 foo sshd[11028]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:46 foo sshd[11030]: Invalid user telnet from 143.198.66.80 Mar 21 13:03:46 foo sshd[11030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 13:03:48 foo sshd[11030]: Failed password for invalid user telnet from 143.198.66.80 port 38396 ssh2 Mar 21 13:03:50 foo sshd[11030]: Received disconnect from 143.198.66.80: 11: PECL/ssh2 (hxxp://pecl.php.net/packages/ssh2) [preauth] Mar 21 13:03:50 foo sshd[11032]: Invalid user login from 143.198.66.80 Mar 21 13:03:50 f........ ------------------------------- show less	FTP Brute-Force Hacking
🇺🇸 AbuseIPDB AbuseIPDB Official	2021-03-21 13:10:08 (5 years ago)	Fail2Ban Ban Triggered	Brute-Force
🇵🇱 JesionZ	2021-03-21 02:02:23 (5 years ago)	Mar 21 07:02:22 vm0 sshd[3799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Mar 21 07:02:22 vm0 sshd[3799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.198.66.80 Mar 21 07:02:23 vm0 sshd[3799]: Failed password for invalid user admin from 143.198.66.80 port 53104 ssh2 ... show less	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.246.215.103

🇺🇸 147.185.132.101

🇩🇪 138.246.253.24

🇺🇸 137.184.130.35

🇷🇴 2.57.122.150

🇧🇷 200.50.146.201

🇺🇸 195.184.76.119

🇦🇷 190.172.122.143

🇧🇷 168.205.101.0

🇨🇳 153.3.126.200

🇦🇷 143.105.97.247

🇩🇪 141.22.28.227

🇨🇳 112.94.5.43

🇺🇸 104.152.52.142

🇮🇱 84.95.98.16

🇻🇳 27.79.6.189

🇨🇳 14.17.59.195

🇬🇧 2.103.68.218

🇮🇳 200.141.2.87

🇺🇸 147.185.132.198