45.122.220.220

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viet Solutions Services Trading Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2019-08-25 22:20:18 H=share17.vhost.vn [45.122.220.220]:41956 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBL392514) 2019-08-25 22:21:22 H=share17.vhost.vn [45.122.220.220]:49328 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.2) (https://www.spamhaus.org/query/ip/45.122.220.220) 2019-08-25 22:25:23 H=share17.vhost.vn [45.122.220.220]:49322 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBL392514) ...	2019-08-26 16:02:06

Type

Details

Datetime

attackspam

2019-08-25 22:20:18 H=share17.vhost.vn [45.122.220.220]:41956 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBL392514)
2019-08-25 22:21:22 H=share17.vhost.vn [45.122.220.220]:49328 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.2) (https://www.spamhaus.org/query/ip/45.122.220.220)
2019-08-25 22:25:23 H=share17.vhost.vn [45.122.220.220]:49322 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBL392514)
...

2019-08-26 16:02:06

Comments on same subnet:

IP	Type	Details	Datetime
45.122.220.157	attack	45.122.220.157 - - [31/Jul/2020:04:47:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [31/Jul/2020:04:48:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2000 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [31/Jul/2020:04:48:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-31 18:35:54
45.122.220.157	attackspambots	xmlrpc attack	2020-07-19 05:08:13
45.122.220.157	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2020-07-12 16:54:37
45.122.220.157	attack	45.122.220.157 - - [07/Jul/2020:04:48:05 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [07/Jul/2020:04:48:08 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [07/Jul/2020:04:48:10 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-07 18:49:25
45.122.220.157	attackspambots	45.122.220.157 - - [05/Jul/2020:20:36:27 +0200] "GET /wp-login.php HTTP/1.1" 200 5738 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [05/Jul/2020:20:36:31 +0200] "POST /wp-login.php HTTP/1.1" 200 5989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [05/Jul/2020:20:36:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-06 02:52:31
45.122.220.157	attackbots	45.122.220.157 - - [30/Jun/2020:08:07:57 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [30/Jun/2020:08:07:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [30/Jun/2020:08:08:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-30 19:55:15
45.122.220.157	attack	GET /wp-login.php HTTP/1.1	2020-06-16 15:05:26
45.122.220.252	attackbots	$f2bV_matches	2020-06-15 20:49:26
45.122.220.252	attack	May 31 15:18:53 localhost sshd\[28642\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.252 user=root May 31 15:18:55 localhost sshd\[28642\]: Failed password for root from 45.122.220.252 port 44194 ssh2 May 31 15:27:08 localhost sshd\[28798\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.252 user=root ...	2020-06-01 01:41:18
45.122.220.170	attack	May 26 19:40:25 lukav-desktop sshd\[887\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 user=root May 26 19:40:28 lukav-desktop sshd\[887\]: Failed password for root from 45.122.220.170 port 47162 ssh2 May 26 19:41:27 lukav-desktop sshd\[891\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 user=root May 26 19:41:29 lukav-desktop sshd\[891\]: Failed password for root from 45.122.220.170 port 54688 ssh2 May 26 19:42:14 lukav-desktop sshd\[896\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 user=root	2020-05-27 01:12:52
45.122.220.170	attackbotsspam	May 12 07:01:51 localhost sshd\[4221\]: Invalid user jiu from 45.122.220.170 May 12 07:01:51 localhost sshd\[4221\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 May 12 07:01:53 localhost sshd\[4221\]: Failed password for invalid user jiu from 45.122.220.170 port 47868 ssh2 May 12 07:06:21 localhost sshd\[4516\]: Invalid user dbuser from 45.122.220.170 May 12 07:06:21 localhost sshd\[4516\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 ...	2020-05-12 14:00:43
45.122.220.252	attackspambots	2020-05-08T16:51:28.590857linuxbox-skyline sshd[34786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.252 user=mysql 2020-05-08T16:51:31.155679linuxbox-skyline sshd[34786]: Failed password for mysql from 45.122.220.252 port 38978 ssh2 ...	2020-05-09 07:22:55
45.122.220.170	attack	Apr 8 05:12:10 XXX sshd[26385]: Invalid user demo from 45.122.220.170 port 49226	2020-04-08 12:51:03
45.122.220.170	attackbots	2020-03-26T12:32:18.723971ionos.janbro.de sshd[123742]: Invalid user nen from 45.122.220.170 port 54284 2020-03-26T12:32:20.169742ionos.janbro.de sshd[123742]: Failed password for invalid user nen from 45.122.220.170 port 54284 ssh2 2020-03-26T12:35:30.837156ionos.janbro.de sshd[123766]: Invalid user atendimento from 45.122.220.170 port 45722 2020-03-26T12:35:31.202273ionos.janbro.de sshd[123766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.220.170 2020-03-26T12:35:30.837156ionos.janbro.de sshd[123766]: Invalid user atendimento from 45.122.220.170 port 45722 2020-03-26T12:35:33.303185ionos.janbro.de sshd[123766]: Failed password for invalid user atendimento from 45.122.220.170 port 45722 ssh2 2020-03-26T12:38:44.889910ionos.janbro.de sshd[123790]: Invalid user xtra from 45.122.220.170 port 37160 2020-03-26T12:38:45.072675ionos.janbro.de sshd[123790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ...	2020-03-26 21:46:34
45.122.220.87	attackspambots	email spam	2020-03-20 17:20:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.122.220.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19910
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.122.220.220.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 16:01:57 CST 2019
;; MSG SIZE  rcvd: 118

Host info

220.220.122.45.in-addr.arpa domain name pointer share17.vhost.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
220.220.122.45.in-addr.arpa	name = share17.vhost.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.77.58.79	attackbots	invalid user appuser from 51.77.58.79 port 51466 ssh2	2020-09-28 07:41:13
90.127.136.228	attackbotsspam	Sep 28 00:47:42 h2646465 sshd[18345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.127.136.228 user=root Sep 28 00:47:44 h2646465 sshd[18345]: Failed password for root from 90.127.136.228 port 34532 ssh2 Sep 28 00:52:00 h2646465 sshd[18974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.127.136.228 user=root Sep 28 00:52:02 h2646465 sshd[18974]: Failed password for root from 90.127.136.228 port 51470 ssh2 Sep 28 00:55:23 h2646465 sshd[19585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.127.136.228 user=root Sep 28 00:55:25 h2646465 sshd[19585]: Failed password for root from 90.127.136.228 port 59676 ssh2 Sep 28 00:58:52 h2646465 sshd[19710]: Invalid user testuser from 90.127.136.228 Sep 28 00:58:52 h2646465 sshd[19710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.127.136.228 Sep 28 00:58:52 h2646465 sshd[19710]: Invalid user	2020-09-28 07:41:02
51.195.63.10	attackbots	ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 454	2020-09-28 07:57:32
168.62.43.33	attackspam	Invalid user sokalan from 168.62.43.33 port 4501	2020-09-28 07:22:23
103.140.186.89	attackspambots	IP 103.140.186.89 attacked honeypot on port: 1433 at 9/26/2020 1:37:08 PM	2020-09-28 07:23:03
52.175.204.16	attack	Invalid user admin from 52.175.204.16 port 5680	2020-09-28 07:22:04
106.52.12.21	attack	Sep 27 02:13:02 hidden sshd[21341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.12.21 Sep 27 02:13:04 hidden sshd[21341]: Failed password for invalid user upgrade from 106.52.12.21 port 33434 ssh2 Sep 27 02:18:14 hidden sshd[22474]: Invalid user student5 from 106.52.12.21 port 59164	2020-09-28 07:50:05
132.232.80.87	attackspambots	" "	2020-09-28 07:52:13
13.66.217.166	attackbotsspam	Invalid user dietitianinindia from 13.66.217.166 port 34220	2020-09-28 07:47:48
188.19.180.254	attackbots	TCP (SYN) 188.19.180.254:20592 -> port 23, len 40	2020-09-28 07:39:17
113.118.107.66	attackbots	SSH/22 MH Probe, BF, Hack -	2020-09-28 07:46:24
123.125.194.150	attackspam	Sep 27 20:42:17 sso sshd[22333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.194.150 Sep 27 20:42:19 sso sshd[22333]: Failed password for invalid user marjorie from 123.125.194.150 port 58854 ssh2 ...	2020-09-28 07:32:43
157.245.227.165	attackbotsspam	Sep 28 00:40:11 vps333114 sshd[318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.227.165 Sep 28 00:40:13 vps333114 sshd[318]: Failed password for invalid user sammy from 157.245.227.165 port 44288 ssh2 ...	2020-09-28 07:37:05
182.18.144.99	attackspambots	Sep 27 20:23:59 ift sshd\[709\]: Failed password for invalid user admin from 182.18.144.99 port 56600 ssh2Sep 27 20:28:07 ift sshd\[1334\]: Invalid user rancid from 182.18.144.99Sep 27 20:28:09 ift sshd\[1334\]: Failed password for invalid user rancid from 182.18.144.99 port 36250 ssh2Sep 27 20:32:14 ift sshd\[2192\]: Invalid user socks from 182.18.144.99Sep 27 20:32:16 ift sshd\[2192\]: Failed password for invalid user socks from 182.18.144.99 port 44124 ssh2 ...	2020-09-28 07:25:01
138.68.238.242	attackbotsspam	Sep 28 01:35:39 server sshd[43762]: Failed password for invalid user lucia from 138.68.238.242 port 53172 ssh2 Sep 28 01:40:59 server sshd[45102]: Failed password for invalid user roman from 138.68.238.242 port 33556 ssh2 Sep 28 01:46:30 server sshd[46307]: Failed password for invalid user rio from 138.68.238.242 port 42176 ssh2	2020-09-28 07:57:54

Recently Reported IPs

68.5.88.53	190.13.151.1	46.186.51.131	85.106.102.105
177.229.21.190	116.236.138.107	81.241.50.141	1.129.111.164
103.136.96.82	185.106.20.148	179.32.18.114	156.96.157.155
152.225.246.142	119.145.99.29	189.224.11.60	91.193.151.22
110.77.212.116	186.192.21.194	162.251.23.177	183.237.40.52