45.82.254.130 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: DediPath

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	TCP port 445 (SMB) attempt blocked by firewall. [2019-07-06 15:30:13]	2019-07-07 00:39:38

Comments on same subnet:

IP	Type	Details	Datetime
45.82.254.178	attackbotsspam	firewall-block, port(s): 5060/udp	2020-05-31 05:14:23
45.82.254.106	attack	Unauthorized connection attempt from IP address 45.82.254.106 on Port 445(SMB)	2019-07-14 07:21:49
45.82.254.122	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:25:50,115 INFO [shellcode_manager] (45.82.254.122) no match, writing hexdump (73711ad37faf2c2b4f79b6b9a8c72b7c :2362339) - MS17010 (EternalBlue)	2019-07-08 20:47:29
45.82.254.122	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:25:23,648 INFO [amun_request_handler] PortScan Detected on Port: 445 (45.82.254.122)	2019-07-08 12:36:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.254.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3831
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.82.254.130.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 07 00:39:28 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 130.254.82.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 130.254.82.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
221.203.6.138	attack	Auto Detect Rule! proto TCP (SYN), 221.203.6.138:42746->gjan.info:1433, len 40	2020-09-16 05:50:53
114.112.72.130	attack	TCP (SYN) 114.112.72.130:42573 -> port 23, len 44	2020-09-16 05:53:53
184.105.247.196	attack	firewall-block, port(s): 1883/tcp	2020-09-16 06:07:24
157.245.108.109	attack	2020-09-15T17:14:26.120797shield sshd\[21497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.109 user=root 2020-09-15T17:14:28.198875shield sshd\[21497\]: Failed password for root from 157.245.108.109 port 60158 ssh2 2020-09-15T17:19:06.989533shield sshd\[22993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.109 user=root 2020-09-15T17:19:09.174021shield sshd\[22993\]: Failed password for root from 157.245.108.109 port 43934 ssh2 2020-09-15T17:23:49.582368shield sshd\[24792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.109 user=root	2020-09-16 05:43:21
121.241.244.92	attackspambots	SSH Invalid Login	2020-09-16 05:46:03
106.13.47.6	attackspam	2020-09-15 17:07:03.744505-0500 localhost sshd[40293]: Failed password for root from 106.13.47.6 port 47854 ssh2	2020-09-16 06:24:04
190.0.54.218	attack	Unauthorized connection attempt from IP address 190.0.54.218 on Port 445(SMB)	2020-09-16 05:57:53
82.148.31.110	attackbotsspam	1,06-00/00 [bc00/m01] PostRequest-Spammer scoring: stockholm	2020-09-16 06:06:06
217.23.2.182	attackspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-15T15:59:47Z and 2020-09-15T17:00:21Z	2020-09-16 06:12:53
200.108.143.6	attackbots	Sep 16 00:03:29 buvik sshd[7270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 user=root Sep 16 00:03:30 buvik sshd[7270]: Failed password for root from 200.108.143.6 port 42760 ssh2 Sep 16 00:04:53 buvik sshd[629]: Invalid user doug from 200.108.143.6 ...	2020-09-16 06:15:34
31.7.62.32	attackbots	Fail2Ban Ban Triggered	2020-09-16 06:09:56
94.102.51.28	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 79 - port: 20129 proto: tcp cat: Misc Attackbytes: 60	2020-09-16 06:09:30
165.227.203.162	attackbots	2020-09-15T18:05:12.548650shield sshd\[7539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.203.162 user=root 2020-09-15T18:05:14.791997shield sshd\[7539\]: Failed password for root from 165.227.203.162 port 59102 ssh2 2020-09-15T18:09:03.206620shield sshd\[9297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.203.162 user=root 2020-09-15T18:09:04.828427shield sshd\[9297\]: Failed password for root from 165.227.203.162 port 43386 ssh2 2020-09-15T18:12:51.715607shield sshd\[10836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.203.162 user=root	2020-09-16 06:13:58
164.68.106.33	attackspambots	SP-Scan 44785:5038 detected 2020.09.15 19:30:21 blocked until 2020.11.04 11:33:08	2020-09-16 06:17:38
99.185.76.161	attackspambots	2020-09-15 14:35:18.162658-0500 localhost sshd[29338]: Failed password for root from 99.185.76.161 port 39382 ssh2	2020-09-16 06:05:45

Recently Reported IPs

131.70.10.135	95.66.148.205	175.12.37.118	32.90.188.142
92.245.131.180	175.147.179.1	209.186.204.112	133.90.163.176
40.251.146.134	149.64.245.97	49.83.211.171	1.54.192.12
156.33.12.77	234.111.199.226	182.30.171.237	90.12.43.144
76.250.77.211	173.248.241.106	69.101.234.140	29.228.240.91