City: Los Angeles
Region: California
Country: United States
Internet Service Provider: TT1 Datacenter UG (haftungsbeschraenkt)
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
Type | Details | Datetime |
---|---|---|
attack | ET DROP Dshield Block Listed Source group 1 - port: 39557 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:45:18 |
attackbots | Aug 13 14:16:04 webctf kernel: [1698816.920782] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:1e:56:95:22:15:58:e0:52:53:08:00 SRC=45.129.33.145 DST=137.74.115.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=44884 PROTO=TCP SPT=40903 DPT=65141 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:18:33 webctf kernel: [1698965.448159] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:1e:56:95:22:15:58:e0:52:53:08:00 SRC=45.129.33.145 DST=137.74.115.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=46007 PROTO=TCP SPT=40903 DPT=65139 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:28:22 webctf kernel: [1699554.712438] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:1e:56:95:22:15:58:e0:52:53:08:00 SRC=45.129.33.145 DST=137.74.115.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=59186 PROTO=TCP SPT=40903 DPT=65126 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 13 14:30:20 webctf kernel: [1699672.275919] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:1e:56:95:22:15:58:e0:52:53:08:00 SRC=45.129.33.145 DST=137.74.115.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=35443 PROTO=TCP SPT=4 ... |
2020-08-13 23:19:26 |
attackbots | ET DROP Dshield Block Listed Source group 1 - port: 64771 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-11 07:53:22 |
IP | Type | Details | Datetime |
---|---|---|---|
45.129.33.168 | attack | Dec 13 21:22:00 router.asus.com kernel: DROP IN=eth0 OUT= MAC=b8:86:87:f3:ff:58:00:01:5c:98:9a:46:08:00 SRC=45.129.33.168 DST=AA.BB.CC.DD LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=22869 PROTO=TCP SPT=59221 DPT=21398 SEQ=3578506072 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Scans from the 45.129.33.0/24 range have been incessant. hostslick.de does not respond to email. |
2020-12-14 11:37:48 |
45.129.33.122 | attackbots | Port-scan: detected 150 distinct ports within a 24-hour window. |
2020-10-14 07:07:41 |
45.129.33.147 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 39601 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 06:03:33 |
45.129.33.9 | attackbotsspam |
|
2020-10-14 05:49:00 |
45.129.33.12 | attack |
|
2020-10-14 05:48:33 |
45.129.33.19 | attack | ET DROP Dshield Block Listed Source group 1 - port: 4578 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:48:01 |
45.129.33.22 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 6367 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:47:49 |
45.129.33.53 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 7394 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:47:33 |
45.129.33.56 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 13478 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:47:02 |
45.129.33.80 | attackspam |
|
2020-10-14 05:46:44 |
45.129.33.101 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 39596 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:46:12 |
45.129.33.142 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 39635 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:45:42 |
45.129.33.13 | attack | ET DROP Dshield Block Listed Source group 1 - port: 9853 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:30:31 |
45.129.33.18 | attack | ET DROP Dshield Block Listed Source group 1 - port: 4098 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:29:45 |
45.129.33.24 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 20211 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:29:13 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.129.33.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.129.33.145. IN A
;; AUTHORITY SECTION:
. 287 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020081001 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 11 07:53:19 CST 2020
;; MSG SIZE rcvd: 117
Host 145.33.129.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 145.33.129.45.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
151.80.37.18 | attackbotsspam | Invalid user netdump from 151.80.37.18 port 34600 |
2019-08-29 16:23:55 |
112.10.231.170 | attackbots | [Wed Aug 28 23:00:25 2019 GMT] 裘贤雯 |
2019-08-29 16:14:56 |
46.101.39.199 | attackspambots | [ssh] SSH attack |
2019-08-29 16:04:00 |
202.117.7.130 | attackspam | Invalid user postgres from 202.117.7.130 port 35214 |
2019-08-29 16:22:30 |
114.32.232.211 | attackspam | Aug 29 08:58:28 MK-Soft-Root2 sshd\[2422\]: Invalid user debian from 114.32.232.211 port 35277 Aug 29 08:58:28 MK-Soft-Root2 sshd\[2422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.232.211 Aug 29 08:58:31 MK-Soft-Root2 sshd\[2422\]: Failed password for invalid user debian from 114.32.232.211 port 35277 ssh2 ... |
2019-08-29 15:43:08 |
106.13.105.77 | attackspam | Aug 28 15:12:04 lcdev sshd\[6643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.105.77 user=root Aug 28 15:12:06 lcdev sshd\[6643\]: Failed password for root from 106.13.105.77 port 45792 ssh2 Aug 28 15:19:29 lcdev sshd\[7320\]: Invalid user kafka from 106.13.105.77 Aug 28 15:19:29 lcdev sshd\[7320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.105.77 Aug 28 15:19:31 lcdev sshd\[7320\]: Failed password for invalid user kafka from 106.13.105.77 port 54608 ssh2 |
2019-08-29 16:02:55 |
85.206.165.15 | attackspam | (From zubair_ffc@yahoo.com) Look at an astonishingoffering for you. http://zanmissmetear.tk/et06 |
2019-08-29 15:56:35 |
181.49.117.136 | attack | Aug 29 02:34:28 legacy sshd[21510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.117.136 Aug 29 02:34:30 legacy sshd[21510]: Failed password for invalid user shield from 181.49.117.136 port 40600 ssh2 Aug 29 02:38:59 legacy sshd[21588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.117.136 ... |
2019-08-29 16:30:29 |
176.31.191.61 | attackbotsspam | Aug 28 18:52:05 kapalua sshd\[30462\]: Invalid user postgres from 176.31.191.61 Aug 28 18:52:05 kapalua sshd\[30462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu Aug 28 18:52:06 kapalua sshd\[30462\]: Failed password for invalid user postgres from 176.31.191.61 port 38704 ssh2 Aug 28 18:56:17 kapalua sshd\[30852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu user=ftp Aug 28 18:56:18 kapalua sshd\[30852\]: Failed password for ftp from 176.31.191.61 port 56072 ssh2 |
2019-08-29 16:16:33 |
159.65.155.227 | attack | Aug 29 07:48:29 lnxded64 sshd[31890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 Aug 29 07:48:29 lnxded64 sshd[31890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 |
2019-08-29 16:01:44 |
46.174.71.83 | attackspam | GET /phpmyadmin/ 404 GET /phpmyadmin/index.php 404 |
2019-08-29 16:21:58 |
192.99.247.232 | attackspambots | Invalid user vi from 192.99.247.232 port 53350 |
2019-08-29 16:08:58 |
139.59.141.137 | attack | Aug 29 04:46:30 DAAP sshd[5484]: Invalid user claudio from 139.59.141.137 port 42158 ... |
2019-08-29 15:32:21 |
114.234.79.192 | attack | Unauthorised access (Aug 29) SRC=114.234.79.192 LEN=40 TTL=49 ID=63517 TCP DPT=8080 WINDOW=31906 SYN Unauthorised access (Aug 28) SRC=114.234.79.192 LEN=40 TTL=49 ID=20016 TCP DPT=8080 WINDOW=17543 SYN |
2019-08-29 15:50:35 |
222.188.75.154 | attack | Aug 29 09:19:27 vpn01 sshd\[7383\]: Invalid user admin from 222.188.75.154 Aug 29 09:19:27 vpn01 sshd\[7383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.188.75.154 Aug 29 09:19:29 vpn01 sshd\[7383\]: Failed password for invalid user admin from 222.188.75.154 port 17427 ssh2 |
2019-08-29 15:52:29 |