45.137.22.132 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Bangladesh

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 UAB LIMORIS - newworld@nwd.com.hk, invoice, 2 Jul 2021 185.222.58.104 khalid Siddiqui - ceo@seafarerpk.com, SHIPPING DOCUMENTS FOR GATE PASS, 3 Jul 2021 person: K.M. Badrul Alam address: Naherins Domain, 134/7 B, Furfura Sharif Road, Darus Salam inetnum: 45.128.0.0 - 45.159.255.255 185.222.57.0 - 185.222.57.255 185.222.58.0 - 185.222.58.255 Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 185.222.57.140 FUKUSEN (SALES DEPT) - fukusen-ikari@alpha.ocn.ne.jp - RE: Confirmation Order for PO # B18024091/02730918, 4 May 2021 21:38:19 185.222.57.140 Julie shi - shifulan@sinotrans.com - RE: SATEMENT OF ACCOUNT, 5 May 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, 30 Apr 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, Mon, 26 Apr 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, Sun, 25 Apr 2021 185.222.57.140 Magdi Amin - areej@alamalcargo.com - RE: New Order, 6 May 2021 185.222.57.143 Mr. Ahmed Bilwani - daniel.robinson@compelo.com, OUTSTANDING PAYMENT REMINDER, 13 Jun 2021 185.222.57.143 Barbara Liu / 刘莉 - liuli.hgxs"@sinopec.com, Payment confirmation, 13 Jun 2021 185.222.57.143 M. Ahmed Bilwani - jiovieno@marketresearch.com, PAYMENT REMINDER, 18 Jun 2021 185.222.57.143 M. Ahmed Bilwani - jiovieno@marketresearch.com, PAYMENT REMINDER, 19 Jun 2021 185.222.58.104 khalid Siddiqui - ceo@seafarerpk.com, SHIPPING DOCUMENTS FOR GATE PASS, 3 Jul 2021	2021-07-03 06:54:21
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 Alla Shpedko - mediainquiries@cision.com, Confirmation, 30 Jun 2021 45.137.22.47 Barbara Liu - info@pixelmechanics.com.sg, P O, 30 Jun 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 45.137.22.47 Kastriot Buci - Kastriot.Bucii@dahuatech.com, Order, 30 Jun 2021 45.137.22.47 Alla Shpedko - mediainquiries@cision.com, Confirmation, 30 Jun 2021 45.137.22.47 Barbara Liu - info@pixelmechanics.com.sg, P O, 30 Jun 2021	2021-07-01 09:54:31
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 Kastriot Buci - Kastriot.Bucii@dahuatech.com, Order, 30 Jun 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021	2021-06-30 08:55:35
45.137.22.44	spamattack	PHISHING ATTACK 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021	2021-05-31 07:57:16
45.137.22.37	spamattack	45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021	2021-05-19 07:48:47
45.137.22.37	spamattack	45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK	2021-05-18 05:15:04
45.137.22.138	spamattack	PHISHING AND SPAM ATTACK FROM "Grace 曹向慧 - wh.dzxs02@xinyiglass.com -" : SUBJECT "XYG FINANCIAL REQUIREMENT--- LC" : RECEIVED "from [45.137.22.138] (port=58343 helo=xinyiglass.com)" : DATE/TIMESENT "Fri, 30 Apr 2021 17:28:39 " IP ADDRESS "inetnum:45.128.0.0 - 45.159.255.255 org-name:RootLayer Web Services Ltd."	2021-05-01 18:57:41
45.137.22.138	spamattack	PHISHING AND SPAM ATTACK FROM "Cherry - zamy0001@126.com -" : SUBJECT "Marine Open Policy No. MP/O/10/000116/11/2020/DT, CMIC Chloride - 6000 Kgs. against L/C No. LC/99/082/3087" : RECEIVED "from [45.137.22.138] (port=55954 helo=126.com) (envelope-from ) id 1lR9XR-004z74-Kj " : DATE/TIMESENT "Tue, 30 Mar 2021 19:15:51" IP ADDRESS "inetnum:45.128.0.0 - 45.159.255.255 Organization: RIPE Network Coordination Centre (RIPE)"	2021-03-30 16:52:45
45.137.22.90	attackspam	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 22:31:07
45.137.22.90	attack	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 14:36:52
45.137.22.90	attackbotsspam	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 06:39:39
45.137.22.108	attackbotsspam	SMTP AUTH	2020-09-16 23:45:25
45.137.22.108	attackbotsspam	Sep 15 18:59:01 server postfix/smtpd[12697]: NOQUEUE: reject: RCPT from unknown[45.137.22.108]: 554 5.7.1 Service unavailable; Client host [45.137.22.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?45.137.22.108; from= to= proto=ESMTP helo=	2020-09-16 16:02:22
45.137.22.108	attackbotsspam	Sep 15 18:59:01 server postfix/smtpd[12697]: NOQUEUE: reject: RCPT from unknown[45.137.22.108]: 554 5.7.1 Service unavailable; Client host [45.137.22.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?45.137.22.108; from= to= proto=ESMTP helo=	2020-09-16 08:02:47
45.137.229.5	attackbots	45.137.229.5 - - [29/Aug/2020:05:42:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.137.229.5 - - [29/Aug/2020:05:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10784 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 12:14:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.137.22.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61054
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.137.22.132.			IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:40:17 CST 2022
;; MSG SIZE  rcvd: 106

Host info

132.22.137.45.in-addr.arpa domain name pointer hosted-by.rootlayer.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.22.137.45.in-addr.arpa	name = hosted-by.rootlayer.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
89.248.168.202	attack	slow and persistent scanner	2019-11-11 02:49:55
182.61.40.17	attack	2019-11-10T18:41:14.722894abusebot-5.cloudsearch.cf sshd\[27672\]: Invalid user bob from 182.61.40.17 port 54082	2019-11-11 03:08:37
89.248.162.139	attackbots	Port Scan: TCP/8089	2019-11-11 03:05:07
5.45.6.66	attack	2019-11-10T11:58:26.9009091495-001 sshd\[43445\]: Failed password for invalid user jenkins from 5.45.6.66 port 40438 ssh2 2019-11-10T13:00:43.5318751495-001 sshd\[45932\]: Invalid user usuario from 5.45.6.66 port 46688 2019-11-10T13:00:43.5395281495-001 sshd\[45932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=066-006-045-005.ip-addr.inexio.net 2019-11-10T13:00:44.9232971495-001 sshd\[45932\]: Failed password for invalid user usuario from 5.45.6.66 port 46688 ssh2 2019-11-10T13:03:39.8254711495-001 sshd\[46076\]: Invalid user guest from 5.45.6.66 port 48234 2019-11-10T13:03:39.8299911495-001 sshd\[46076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=066-006-045-005.ip-addr.inexio.net ...	2019-11-11 03:09:56
51.89.185.101	attack	Multiport scan : 10 ports scanned 1390 2390 4390 5390 7390 8390 9390 10390 11390 12390	2019-11-11 02:55:59
185.209.0.91	attack	Portscan or hack attempt detected by psad/fwsnort	2019-11-11 03:00:43
92.118.37.99	attack	11/10/2019-13:07:37.357350 92.118.37.99 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-11 02:47:22
185.176.27.18	attackbotsspam	185.176.27.18 was recorded 146 times by 28 hosts attempting to connect to the following ports: 55390,104,7011,22222,15351,44301,65001,1389,23813,53411,406,58706,7001,42312,9874,3383,8001,53911,50720,37037,13389,33430,48048,33333,5589,18902,65110,23500,20013,31313,50213,11111,16111,50007,4489,9833,3394,33901,41812,33001,30000,2009,60001,3393,56010,8412,10101,33224. Incident counter (4h, 24h, all-time): 146, 770, 4185	2019-11-11 03:02:05
185.209.0.92	attackspambots	Portscan or hack attempt detected by psad/fwsnort	2019-11-11 02:37:48
14.232.208.115	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 9 - port: 1433 proto: TCP cat: Misc Attack	2019-11-11 03:08:13
185.209.0.58	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 8829 proto: TCP cat: Misc Attack	2019-11-11 02:38:20
202.138.229.228	attack	Nov 10 19:38:15 mail postfix/smtpd[10805]: warning: register.bandungwetan.com[202.138.229.228]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 19:38:24 mail postfix/smtpd[12113]: warning: register.bandungwetan.com[202.138.229.228]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 19:40:23 mail postfix/smtpd[13602]: warning: register.bandungwetan.com[202.138.229.228]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-11 03:15:20
80.82.78.100	attackbots	firewall-block, port(s): 1088/udp, 1157/udp	2019-11-11 02:53:21
132.232.94.184	attackspam	Multiport scan : 8 ports scanned 80 6379 6380 7001 7002 8080 8088 9200	2019-11-11 02:45:12
89.248.174.222	attackspam	Nov 9 08:36:29 SRC=89.248.174.222 PROTO=TCP SPT=47065 DPT=8089 Nov 9 09:26:54 SRC=89.248.174.222 PROTO=TCP SPT=49176 DPT=8089 Nov 9 10:12:04 SRC=89.248.174.222 PROTO=TCP SPT=52276 DPT=8089 Nov 9 11:00:17 SRC=89.248.174.222 PROTO=TCP SPT=55968 DPT=8089 Nov 9 12:48:59 SRC=89.248.174.222 PROTO=TCP SPT=40952 DPT=8089	2019-11-11 02:48:39

Recently Reported IPs

183.200.165.13	2.140.116.23	45.248.42.29	188.162.163.28
111.162.138.34	109.237.102.78	182.70.190.130	221.226.192.110
41.42.43.84	89.165.11.151	36.72.218.36	61.246.1.42
134.236.117.46	113.124.227.192	159.65.132.219	171.107.124.73
91.171.186.74	220.198.205.116	44.201.201.233	73.191.41.54