45.164.20.157 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.164.202.59	attack	Aug 31 16:10:19 mailman postfix/smtpd[29711]: warning: unknown[45.164.202.59]: SASL PLAIN authentication failed: authentication failure	2020-09-01 07:35:09
45.164.202.61	attack	Aug 15 01:44:34 mail.srvfarm.net postfix/smtpd[947514]: warning: unknown[45.164.202.61]: SASL PLAIN authentication failed: Aug 15 01:44:36 mail.srvfarm.net postfix/smtpd[947514]: lost connection after AUTH from unknown[45.164.202.61] Aug 15 01:47:22 mail.srvfarm.net postfix/smtpd[948188]: warning: unknown[45.164.202.61]: SASL PLAIN authentication failed: Aug 15 01:47:26 mail.srvfarm.net postfix/smtpd[948188]: lost connection after AUTH from unknown[45.164.202.61] Aug 15 01:50:11 mail.srvfarm.net postfix/smtps/smtpd[930971]: lost connection after CONNECT from unknown[45.164.202.61]	2020-08-15 13:57:52
45.164.203.170	attackspam	Aug 12 05:44:09 mail.srvfarm.net postfix/smtpd[2870462]: warning: unknown[45.164.203.170]: SASL PLAIN authentication failed: Aug 12 05:44:09 mail.srvfarm.net postfix/smtpd[2870462]: lost connection after AUTH from unknown[45.164.203.170] Aug 12 05:49:06 mail.srvfarm.net postfix/smtpd[2870459]: warning: unknown[45.164.203.170]: SASL PLAIN authentication failed: Aug 12 05:49:07 mail.srvfarm.net postfix/smtpd[2870459]: lost connection after AUTH from unknown[45.164.203.170] Aug 12 05:51:16 mail.srvfarm.net postfix/smtps/smtpd[2871474]: warning: unknown[45.164.203.170]: SASL PLAIN authentication failed:	2020-08-12 14:33:17
45.164.202.19	attackspambots	Aug 11 13:59:25 mail.srvfarm.net postfix/smtpd[2369192]: warning: unknown[45.164.202.19]: SASL PLAIN authentication failed: Aug 11 13:59:25 mail.srvfarm.net postfix/smtpd[2369192]: lost connection after AUTH from unknown[45.164.202.19] Aug 11 14:02:47 mail.srvfarm.net postfix/smtpd[2371691]: warning: unknown[45.164.202.19]: SASL PLAIN authentication failed: Aug 11 14:02:47 mail.srvfarm.net postfix/smtpd[2371691]: lost connection after AUTH from unknown[45.164.202.19] Aug 11 14:05:25 mail.srvfarm.net postfix/smtpd[2371611]: warning: unknown[45.164.202.19]: SASL PLAIN authentication failed:	2020-08-12 03:37:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.164.20.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47595
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.164.20.157.			IN	A

;; AUTHORITY SECTION:
.			501	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022071502 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 16 07:55:05 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 157.20.164.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.20.164.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
97.85.186.110	attackbots	Sep 19 19:01:01 sip sshd[17229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.85.186.110 Sep 19 19:01:02 sip sshd[17231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.85.186.110 Sep 19 19:01:03 sip sshd[17229]: Failed password for invalid user admin from 97.85.186.110 port 57802 ssh2	2020-09-20 06:54:46
149.34.21.141	attackspam	Sep 19 20:00:47 scw-focused-cartwright sshd[29751]: Failed password for root from 149.34.21.141 port 50867 ssh2 Sep 19 20:00:47 scw-focused-cartwright sshd[29753]: Failed password for root from 149.34.21.141 port 50890 ssh2	2020-09-20 06:33:27
210.245.110.9	attackspambots	Sep 19 23:18:27 * sshd[31733]: Failed password for root from 210.245.110.9 port 61443 ssh2	2020-09-20 06:41:51
159.203.188.175	attack	Sep 19 22:26:46 IngegnereFirenze sshd[30261]: User root from 159.203.188.175 not allowed because not listed in AllowUsers ...	2020-09-20 06:29:13
117.207.214.144	attackbotsspam	1600534877 - 09/19/2020 19:01:17 Host: 117.207.214.144/117.207.214.144 Port: 445 TCP Blocked ...	2020-09-20 06:58:14
49.36.67.232	attack	Unauthorized connection attempt from IP address 49.36.67.232 on Port 445(SMB)	2020-09-20 06:35:49
141.136.37.245	attackspambots	SIP/5060 Probe, BF, Hack -	2020-09-20 06:57:33
39.86.61.57	attackbots	TCP (SYN) 39.86.61.57:36130 -> port 23, len 44	2020-09-20 06:32:40
39.64.246.223	attack	Sep 19 14:01:09 ws24vmsma01 sshd[163871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.64.246.223 Sep 19 14:01:09 ws24vmsma01 sshd[163561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.64.246.223 Sep 19 14:01:11 ws24vmsma01 sshd[163871]: Failed password for invalid user pi from 39.64.246.223 port 42918 ssh2 Sep 19 14:01:11 ws24vmsma01 sshd[163561]: Failed password for invalid user pi from 39.64.246.223 port 42904 ssh2 ...	2020-09-20 06:52:19
202.103.202.80	attackspam	Icarus honeypot on github	2020-09-20 07:02:18
200.122.224.200	attack	TCP (SYN) 200.122.224.200:55357 -> port 445, len 48	2020-09-20 06:36:52
51.89.98.81	attackspam	[2020-09-19 18:31:00] NOTICE[1239][C-000055c1] chan_sip.c: Call from '' (51.89.98.81:5060) to extension '00961870897106' rejected because extension not found in context 'public'. [2020-09-19 18:31:00] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:31:00.472-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00961870897106",SessionID="0x7f4d4844faa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.98.81/5060",ACLName="no_extension_match" [2020-09-19 18:35:36] NOTICE[1239][C-000055c9] chan_sip.c: Call from '' (51.89.98.81:5060) to extension '001161870897106' rejected because extension not found in context 'public'. [2020-09-19 18:35:36] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:35:36.042-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001161870897106",SessionID="0x7f4d48513438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.98.81 ...	2020-09-20 06:49:25
23.160.208.250	attackspambots	Sep 19 19:49:16 rotator sshd\[7557\]: Address 23.160.208.250 maps to relay13f.tor.ian.sh, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 19 19:49:18 rotator sshd\[7557\]: Failed password for root from 23.160.208.250 port 44995 ssh2Sep 19 19:49:20 rotator sshd\[7557\]: Failed password for root from 23.160.208.250 port 44995 ssh2Sep 19 19:49:23 rotator sshd\[7557\]: Failed password for root from 23.160.208.250 port 44995 ssh2Sep 19 19:49:25 rotator sshd\[7557\]: Failed password for root from 23.160.208.250 port 44995 ssh2Sep 19 19:49:27 rotator sshd\[7557\]: Failed password for root from 23.160.208.250 port 44995 ssh2 ...	2020-09-20 06:34:35
218.92.0.191	attackspam	Sep 20 00:30:21 dcd-gentoo sshd[26927]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Sep 20 00:30:23 dcd-gentoo sshd[26927]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Sep 20 00:30:23 dcd-gentoo sshd[26927]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 20074 ssh2 ...	2020-09-20 06:32:53
171.250.169.227	attackbotsspam	Sep 14 20:07:08 www sshd[9949]: reveeclipse mapping checking getaddrinfo for dynamic-ip-adsl.viettel.vn [171.250.169.227] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 14 20:07:08 www sshd[9949]: Invalid user admin from 171.250.169.227 Sep 14 20:07:09 www sshd[9949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227 Sep 14 20:07:11 www sshd[9949]: Failed password for invalid user admin from 171.250.169.227 port 48660 ssh2 Sep 14 20:07:12 www sshd[9949]: Connection closed by 171.250.169.227 [preauth] Sep 17 08:00:27 www sshd[4818]: Address 171.250.169.227 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 17 08:00:28 www sshd[4818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227 user=r.r Sep 17 08:00:29 www sshd[4818]: Failed password for r.r from 171.250.169.227 port 41532 ssh2 Sep 17 08:00:30 www sshd[481........ -------------------------------	2020-09-20 06:24:46

Recently Reported IPs

187.158.44.16	204.188.228.101	95.9.137.140	193.202.85.191
177.130.169.93	29.230.240.219	58.147.186.214	83.23.161.77
41.74.142.69	113.3.158.5	183.245.16.45	134.122.132.6
70.185.209.120	42.224.169.187	60.81.164.50	37.0.8.71
45.67.214.167	62.204.35.126	144.168.253.38	177.162.77.160