130.255.245.164

Basic Info

City: unknown

Region: unknown

Country: Iran, Islamic Republic of

Internet Service Provider: Mobile Communication Company of Iran PLC

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 130.255.245.164 on Port 445(SMB)	2019-08-28 02:55:31

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.255.245.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37241
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;130.255.245.164.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 28 02:55:25 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 164.245.255.130.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 164.245.255.130.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.168.235.224	attack	Port scan on 1 port(s): 5730	2020-09-01 23:38:35
118.99.65.252	attackspambots	Unauthorized connection attempt from IP address 118.99.65.252 on Port 445(SMB)	2020-09-01 23:43:20
65.151.160.38	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-01T12:25:34Z and 2020-09-01T12:32:23Z	2020-09-01 23:21:01
186.183.50.119	attack	186.183.50.119 - - \[01/Sep/2020:05:31:14 -0700\] "GET /xmlrpc.php HTTP/1.1" 404 20427186.183.50.119 - - \[01/Sep/2020:05:31:47 -0700\] "GET /phpMyAdmin/index.php HTTP/1.1" 404 20467186.183.50.119 - - \[01/Sep/2020:05:31:58 -0700\] "GET /pma/index.php HTTP/1.1" 404 20439 ...	2020-09-01 23:49:54
50.205.119.150	attack	Dovecot Invalid User Login Attempt.	2020-09-01 23:42:37
103.145.12.217	attack	[2020-09-01 11:07:35] NOTICE[1185] chan_sip.c: Registration from '"5008" ' failed for '103.145.12.217:5896' - Wrong password [2020-09-01 11:07:35] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-01T11:07:35.568-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5008",SessionID="0x7f10c4539a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.217/5896",Challenge="03120b35",ReceivedChallenge="03120b35",ReceivedHash="fefd51c3b6eef128ead8146a094d3a71" [2020-09-01 11:07:35] NOTICE[1185] chan_sip.c: Registration from '"5008" ' failed for '103.145.12.217:5896' - Wrong password [2020-09-01 11:07:35] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-01T11:07:35.783-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5008",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-01 23:20:42
202.51.178.126	attack	Dovecot Invalid User Login Attempt.	2020-09-01 23:42:55
50.63.161.42	attackspam	50.63.161.42 - - \[01/Sep/2020:16:53:17 +0200\] "POST /wp-login.php HTTP/1.1" 200 12822 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 50.63.161.42 - - \[01/Sep/2020:16:53:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 12657 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ...	2020-09-01 23:53:26
123.27.216.160	attackspam	1598963522 - 09/01/2020 14:32:02 Host: 123.27.216.160/123.27.216.160 Port: 445 TCP Blocked ...	2020-09-01 23:46:48
85.174.201.64	attackbotsspam	Unauthorized connection attempt from IP address 85.174.201.64 on Port 445(SMB)	2020-09-01 23:26:46
140.148.248.8	attackspam	Unauthorized connection attempt from IP address 140.148.248.8 on Port 445(SMB)	2020-09-01 23:42:10
49.235.97.29	attackbotsspam	Sep 1 14:43:38 ncomp sshd[19454]: Invalid user zihang from 49.235.97.29 port 48581 Sep 1 14:43:38 ncomp sshd[19454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.97.29 Sep 1 14:43:38 ncomp sshd[19454]: Invalid user zihang from 49.235.97.29 port 48581 Sep 1 14:43:40 ncomp sshd[19454]: Failed password for invalid user zihang from 49.235.97.29 port 48581 ssh2	2020-09-02 00:00:19
222.186.169.194	attackbotsspam	Sep 1 17:28:37 router sshd[20215]: Failed password for root from 222.186.169.194 port 59668 ssh2 Sep 1 17:28:41 router sshd[20215]: Failed password for root from 222.186.169.194 port 59668 ssh2 Sep 1 17:28:46 router sshd[20215]: Failed password for root from 222.186.169.194 port 59668 ssh2 Sep 1 17:28:50 router sshd[20215]: Failed password for root from 222.186.169.194 port 59668 ssh2 ...	2020-09-01 23:40:37
179.171.85.26	attackbotsspam	SSH Bruteforce Attempt on Honeypot	2020-09-01 23:32:54
159.203.60.236	attackspambots	TCP (SYN) 159.203.60.236:51873 -> port 30925, len 44	2020-09-01 23:25:39

Recently Reported IPs

14.247.172.54	138.121.206.122	123.235.71.135	118.165.228.109
93.185.27.179	1.1.230.122	213.131.47.178	200.35.214.184
213.178.54.226	178.172.224.19	193.138.50.7	144.217.93.130
82.112.34.47	1.198.30.108	103.74.111.32	189.40.184.23
121.46.93.161	201.69.117.126	186.89.237.137	191.54.165.130