145.14.133.252

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Hosixy LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jan 23 06:17:27 pi sshd[29649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 Jan 23 06:17:28 pi sshd[29649]: Failed password for invalid user usertest from 145.14.133.252 port 49616 ssh2	2020-03-14 01:39:37
attackspambots	Jan 30 01:46:27 v22018076590370373 sshd[25380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 ...	2020-02-02 01:53:43
attackbots	Jan 30 02:11:30 OPSO sshd\[18842\]: Invalid user tamanna from 145.14.133.252 port 34546 Jan 30 02:11:30 OPSO sshd\[18842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 Jan 30 02:11:32 OPSO sshd\[18842\]: Failed password for invalid user tamanna from 145.14.133.252 port 34546 ssh2 Jan 30 02:15:32 OPSO sshd\[20759\]: Invalid user indradhwaja from 145.14.133.252 port 50888 Jan 30 02:15:32 OPSO sshd\[20759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252	2020-01-30 09:42:27

类型

评论内容

时间

attackspambots

Jan 23 06:17:27 pi sshd[29649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 
Jan 23 06:17:28 pi sshd[29649]: Failed password for invalid user usertest from 145.14.133.252 port 49616 ssh2

2020-03-14 01:39:37

attackspambots

Jan 30 01:46:27 v22018076590370373 sshd[25380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252 
...

2020-02-02 01:53:43

attackbots

Jan 30 02:11:30 OPSO sshd\[18842\]: Invalid user tamanna from 145.14.133.252 port 34546
Jan 30 02:11:30 OPSO sshd\[18842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252
Jan 30 02:11:32 OPSO sshd\[18842\]: Failed password for invalid user tamanna from 145.14.133.252 port 34546 ssh2
Jan 30 02:15:32 OPSO sshd\[20759\]: Invalid user indradhwaja from 145.14.133.252 port 50888
Jan 30 02:15:32 OPSO sshd\[20759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.252

2020-01-30 09:42:27

相同子网IP讨论:

IP	类型	评论内容	时间
145.14.133.55	attack	Port probing on unauthorized port 623	2020-09-07 02:51:38
145.14.133.55	attackspam	Port Scan detected! ...	2020-09-06 18:16:33
145.14.133.53	attack	Jan 2 20:27:41 areeb-Workstation sshd[16260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.14.133.53 Jan 2 20:27:44 areeb-Workstation sshd[16260]: Failed password for invalid user zabbix from 145.14.133.53 port 52251 ssh2 ...	2020-01-02 23:31:32
145.14.133.225	attackspam	IP: 145.14.133.225 ASN: AS19693 Centrilogic Inc. Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 3/09/2019 8:07:17 AM UTC	2019-09-03 20:12:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.14.133.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44454
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.14.133.252.			IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013000 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 09:42:24 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

252.133.14.145.in-addr.arpa domain name pointer nihatr.vemanguoas.info.
252.133.14.145.in-addr.arpa domain name pointer houstodies.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
252.133.14.145.in-addr.arpa	name = nihatr.vemanguoas.info.
252.133.14.145.in-addr.arpa	name = houstodies.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
79.84.88.56	attackspambots	$f2bV_matches	2019-12-30 08:33:10
144.91.95.229	attack	Attempts to probe for or exploit a Drupal 7.69 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.	2019-12-30 08:11:06
106.12.36.122	attackbots	Dec 30 01:07:42 lnxweb61 sshd[21171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.36.122	2019-12-30 08:16:48
191.101.251.113	attackbots	Dec 30 00:00:00 zeus sshd[5774]: Failed password for root from 191.101.251.113 port 37586 ssh2 Dec 30 00:02:41 zeus sshd[5885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.101.251.113 Dec 30 00:02:43 zeus sshd[5885]: Failed password for invalid user server from 191.101.251.113 port 38868 ssh2	2019-12-30 08:19:05
190.149.59.82	attackbots	12/29/2019-18:02:53.968962 190.149.59.82 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-12-30 08:27:58
89.248.169.95	attack	Portscan or hack attempt detected by psad/fwsnort	2019-12-30 08:12:47
114.237.109.55	attackspam	Dec 30 00:03:37 grey postfix/smtpd\[1140\]: NOQUEUE: reject: RCPT from unknown\[114.237.109.55\]: 554 5.7.1 Service unavailable\; Client host \[114.237.109.55\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.109.55\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-30 07:59:17
200.105.183.118	attack	Repeated brute force against a port	2019-12-30 08:07:23
14.207.42.89	attackspambots	2019-12-29 23:48:56 plain_virtual_exim authenticator failed for mx-ll-14.207.42-89.dynamic.3bb.co.th ([127.0.0.1]) [14.207.42.89]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.42.89	2019-12-30 08:21:41
222.186.180.8	attackbots	--- report --- Dec 29 20:49:29 -0300 sshd: Connection from 222.186.180.8 port 29796 Dec 29 20:49:32 -0300 sshd: Failed password for root from 222.186.180.8 port 29796 ssh2 Dec 29 20:49:33 -0300 sshd: Received disconnect from 222.186.180.8: 11: [preauth]	2019-12-30 08:07:08
78.190.155.244	attack	Dec 29 23:50:54 mailserver sshd[4675]: Invalid user support from 78.190.155.244 Dec 29 23:50:54 mailserver sshd[4675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.190.155.244 Dec 29 23:50:56 mailserver sshd[4675]: Failed password for invalid user support from 78.190.155.244 port 55814 ssh2 Dec 29 23:50:56 mailserver sshd[4675]: Connection closed by 78.190.155.244 port 55814 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=78.190.155.244	2019-12-30 08:24:32
222.186.175.151	attackspambots	2019-12-30T00:12:13.655044+00:00 suse sshd[24936]: User root from 222.186.175.151 not allowed because not listed in AllowUsers 2019-12-30T00:12:16.369111+00:00 suse sshd[24936]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 2019-12-30T00:12:13.655044+00:00 suse sshd[24936]: User root from 222.186.175.151 not allowed because not listed in AllowUsers 2019-12-30T00:12:16.369111+00:00 suse sshd[24936]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 2019-12-30T00:12:13.655044+00:00 suse sshd[24936]: User root from 222.186.175.151 not allowed because not listed in AllowUsers 2019-12-30T00:12:16.369111+00:00 suse sshd[24936]: error: PAM: Authentication failure for illegal user root from 222.186.175.151 2019-12-30T00:12:16.370575+00:00 suse sshd[24936]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.151 port 22228 ssh2 ...	2019-12-30 08:14:12
178.32.173.77	attackspambots	SIPVicious Scanner Detection	2019-12-30 08:03:10
114.113.126.163	attackspambots	Dec 30 00:06:22 srv-ubuntu-dev3 sshd[74151]: Invalid user satkamp from 114.113.126.163 Dec 30 00:06:22 srv-ubuntu-dev3 sshd[74151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.163 Dec 30 00:06:22 srv-ubuntu-dev3 sshd[74151]: Invalid user satkamp from 114.113.126.163 Dec 30 00:06:23 srv-ubuntu-dev3 sshd[74151]: Failed password for invalid user satkamp from 114.113.126.163 port 58009 ssh2 Dec 30 00:08:44 srv-ubuntu-dev3 sshd[74329]: Invalid user dara from 114.113.126.163 Dec 30 00:08:44 srv-ubuntu-dev3 sshd[74329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.163 Dec 30 00:08:44 srv-ubuntu-dev3 sshd[74329]: Invalid user dara from 114.113.126.163 Dec 30 00:08:46 srv-ubuntu-dev3 sshd[74329]: Failed password for invalid user dara from 114.113.126.163 port 38671 ssh2 Dec 30 00:11:03 srv-ubuntu-dev3 sshd[74685]: Invalid user marshall from 114.113.126.163 ...	2019-12-30 08:11:26
148.72.206.225	attackspambots	SSH-BruteForce	2019-12-30 08:32:46

最近上报的IP列表

183.88.21.127	180.254.109.214	125.161.107.11	110.232.71.249
73.167.231.232	104.209.236.233	108.114.132.58	94.112.5.35
193.60.55.214	201.26.21.167	116.11.158.230	5.237.29.180
201.210.9.235	51.79.84.92	41.148.30.2	180.150.7.159
121.199.37.87	113.180.7.255	220.181.108.94	73.32.140.239