45.117.157.111

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.117.157.19	attack	TCP Port: 25 invalid blocked Listed on zen-spamhaus also spam-sorbs and anonmails-de (122)	2020-09-02 03:51:48
45.117.157.13	attack	2020-08-31 07:18:58.060694-0500 localhost smtpd[76680]: NOQUEUE: reject: RCPT from iclp.geckowheel.com[45.117.157.13]: 554 5.7.1 Service unavailable; Client host [45.117.157.13] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00c6111c.demandest.buzz>	2020-09-01 01:02:50
45.117.157.6	attackspambots	IP: 45.117.157.6 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 18% Found in DNSBL('s) ASN Details AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP Vietnam (VN) CIDR 45.117.156.0/22 Log Date: 30/08/2020 12:41:26 PM UTC	2020-08-31 02:45:06

Type

Details

Datetime

45.117.157.19

attack

TCP Port: 25     invalid blocked  Listed on   zen-spamhaus also spam-sorbs and anonmails-de           (122)

2020-09-02 03:51:48

45.117.157.13

attack

2020-08-31 07:18:58.060694-0500  localhost smtpd[76680]: NOQUEUE: reject: RCPT from iclp.geckowheel.com[45.117.157.13]: 554 5.7.1 Service unavailable; Client host [45.117.157.13] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00c6111c.demandest.buzz>

2020-09-01 01:02:50

45.117.157.6

attackspambots

IP: 45.117.157.6
Ports affected
    Simple Mail Transfer (25) 
Abuse Confidence rating 18%
Found in DNSBL('s)
ASN Details
   AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
   Vietnam (VN)
   CIDR 45.117.156.0/22
Log Date: 30/08/2020 12:41:26 PM UTC

2020-08-31 02:45:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.117.157.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.117.157.111.			IN	A

;; AUTHORITY SECTION:
.			462	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 22:51:39 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 111.157.117.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.157.117.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
109.61.36.216	attackspambots	23/tcp [2019-08-11]1pkt	2019-08-12 10:36:47
96.114.71.146	attackbotsspam	Automatic report - Banned IP Access	2019-08-12 10:38:49
103.207.2.204	attack	Aug 12 03:10:13 srv206 sshd[22842]: Invalid user jedi from 103.207.2.204 Aug 12 03:10:13 srv206 sshd[22842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.2.204 Aug 12 03:10:13 srv206 sshd[22842]: Invalid user jedi from 103.207.2.204 Aug 12 03:10:15 srv206 sshd[22842]: Failed password for invalid user jedi from 103.207.2.204 port 45520 ssh2 ...	2019-08-12 10:19:54
152.250.230.129	attackbots	[UnAuth Telnet (port 23) login attempt	2019-08-12 10:34:07
118.243.117.67	attack	Aug 12 04:42:32 legacy sshd[15467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.243.117.67 Aug 12 04:42:34 legacy sshd[15467]: Failed password for invalid user steam from 118.243.117.67 port 41768 ssh2 Aug 12 04:47:59 legacy sshd[15550]: Failed password for sshd from 118.243.117.67 port 50782 ssh2 ...	2019-08-12 10:53:03
78.186.16.189	attackspam	Automatic report - Port Scan Attack	2019-08-12 10:54:50
62.48.150.175	attack	Aug 12 04:31:08 vps647732 sshd[12226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.48.150.175 Aug 12 04:31:10 vps647732 sshd[12226]: Failed password for invalid user www from 62.48.150.175 port 38906 ssh2 ...	2019-08-12 10:50:37
23.129.64.153	attack	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.153 user=root Failed password for root from 23.129.64.153 port 12989 ssh2 Failed password for root from 23.129.64.153 port 12989 ssh2 Failed password for root from 23.129.64.153 port 12989 ssh2 Failed password for root from 23.129.64.153 port 12989 ssh2	2019-08-12 10:17:11
177.156.131.68	attack	Automatic report - Port Scan Attack	2019-08-12 10:37:53
92.55.29.165	attackbotsspam	Mail sent to address hacked/leaked from Last.fm	2019-08-12 10:24:34
183.89.70.147	attackbots	445/tcp [2019-08-11]1pkt	2019-08-12 10:44:21
220.132.213.2	attackspam	[UnAuth Telnet (port 23) login attempt	2019-08-12 10:34:31
212.80.216.129	attackbotsspam	CloudCIX Reconnaissance Scan Detected, PTR: xorowo.example.com.	2019-08-12 10:52:28
27.254.86.20	attackspam	HTTP SQL Injection Attempt, PTR: cs64.hostneverdie.com.	2019-08-12 10:17:59
50.62.176.94	attackbots	fail2ban honeypot	2019-08-12 10:20:25

Recently Reported IPs

187.114.177.229	187.147.185.96	27.112.121.49	109.233.21.86
51.253.36.151	193.163.125.156	194.27.72.122	154.79.254.236
187.169.204.16	213.230.100.67	107.149.163.89	103.225.196.162
202.152.12.202	107.201.167.103	49.89.217.17	197.14.140.3
62.16.62.124	151.244.84.147	156.221.48.30	117.212.119.177