45.117.157.104

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.117.157.19	attack	TCP Port: 25 invalid blocked Listed on zen-spamhaus also spam-sorbs and anonmails-de (122)	2020-09-02 03:51:48
45.117.157.13	attack	2020-08-31 07:18:58.060694-0500 localhost smtpd[76680]: NOQUEUE: reject: RCPT from iclp.geckowheel.com[45.117.157.13]: 554 5.7.1 Service unavailable; Client host [45.117.157.13] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00c6111c.demandest.buzz>	2020-09-01 01:02:50
45.117.157.6	attackspambots	IP: 45.117.157.6 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 18% Found in DNSBL('s) ASN Details AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP Vietnam (VN) CIDR 45.117.156.0/22 Log Date: 30/08/2020 12:41:26 PM UTC	2020-08-31 02:45:06

Type

Details

Datetime

45.117.157.19

attack

TCP Port: 25     invalid blocked  Listed on   zen-spamhaus also spam-sorbs and anonmails-de           (122)

2020-09-02 03:51:48

45.117.157.13

attack

2020-08-31 07:18:58.060694-0500  localhost smtpd[76680]: NOQUEUE: reject: RCPT from iclp.geckowheel.com[45.117.157.13]: 554 5.7.1 Service unavailable; Client host [45.117.157.13] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00c6111c.demandest.buzz>

2020-09-01 01:02:50

45.117.157.6

attackspambots

IP: 45.117.157.6
Ports affected
    Simple Mail Transfer (25) 
Abuse Confidence rating 18%
Found in DNSBL('s)
ASN Details
   AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
   Vietnam (VN)
   CIDR 45.117.156.0/22
Log Date: 30/08/2020 12:41:26 PM UTC

2020-08-31 02:45:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.117.157.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.117.157.104.			IN	A

;; AUTHORITY SECTION:
.			316	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 23:40:32 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 104.157.117.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.157.117.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
223.18.188.216	attackbots	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230)	2019-08-04 22:51:17
115.144.178.105	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:35:00
189.8.1.50	attackspam	Aug 4 06:53:35 plusreed sshd[11755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.1.50 user=root Aug 4 06:53:36 plusreed sshd[11755]: Failed password for root from 189.8.1.50 port 55264 ssh2 ...	2019-08-04 23:24:24
134.209.100.247	attackspam	Aug 4 14:52:49 mout sshd[29542]: Invalid user toor from 134.209.100.247 port 55590	2019-08-04 22:46:14
72.232.3.87	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:46:02
82.193.140.44	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:42:56
14.233.107.159	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 10:50:16,478 INFO [shellcode_manager] (14.233.107.159) no match, writing hexdump (06cb1cdc794ded1faa9f8ed0bf4f6df0 :10711) - SMB (Unknown)	2019-08-04 22:50:00
23.94.144.194	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:15:57
122.166.237.80	attackbots	[portscan] tcp/23 [TELNET] *(RWIN=65315)(08041230)	2019-08-04 23:31:49
222.186.174.96	attackbots	[portscan] tcp/22 [SSH] *(RWIN=16384)(08041230)	2019-08-04 23:17:08
124.251.60.84	attackspambots	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:01:37
185.176.27.162	attack	9993/tcp 54321/tcp 13000/tcp... [2019-06-04/08-04]1892pkt,1520pt.(tcp)	2019-08-04 22:56:45
188.0.190.22	attackbotsspam	[portscan] tcp/139 [NetBIOS Session Service] [SMB remote code execution attempt: port tcp/445] [scan/connect: 2 time(s)] *(RWIN=1024)(08041230)	2019-08-04 22:55:02
36.68.149.188	attackspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230)	2019-08-04 23:14:36
23.244.43.90	attackspambots	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:15:17

Recently Reported IPs

80.234.76.79	114.99.130.254	107.180.104.117	45.83.66.69
185.97.113.72	85.133.167.118	189.208.237.234	217.58.110.252
43.129.185.53	116.0.54.30	47.56.89.234	177.129.17.69
181.41.207.209	114.34.125.45	222.216.100.180	202.184.43.82
223.149.7.18	181.115.7.105	138.197.169.96	82.165.243.13