45.224.162.111

Basic Info

City: Itaquaquecetuba

Region: Sao Paulo

Country: Brazil

Internet Service Provider: A.P.da Silva Mendonca ME

Hostname: unknown

Organization: A.P.DA SILVA MENDONCA ME

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 14 12:02:21 rigel postfix/smtpd[28835]: connect from unknown[45.224.162.111] Jul 14 12:02:24 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL CRAM-MD5 authentication failed: authentication failure Jul 14 12:02:24 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL PLAIN authentication failed: authentication failure Jul 14 12:02:26 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.224.162.111	2019-07-15 03:38:25

Type

Details

Datetime

attack

Jul 14 12:02:21 rigel postfix/smtpd[28835]: connect from unknown[45.224.162.111]
Jul 14 12:02:24 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 14 12:02:24 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL PLAIN authentication failed: authentication failure
Jul 14 12:02:26 rigel postfix/smtpd[28835]: warning: unknown[45.224.162.111]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.224.162.111

2019-07-15 03:38:25

Comments on same subnet:

IP	Type	Details	Datetime
45.224.162.4	attackspambots	(smtpauth) Failed SMTP AUTH login from 45.224.162.4 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-05 16:26:30 plain authenticator failed for ([45.224.162.4]) [45.224.162.4]: 535 Incorrect authentication data (set_id=sourenco.cominfo@sourenco.com)	2020-06-06 04:15:43
45.224.162.4	attack	Jun 5 05:34:52 mail.srvfarm.net postfix/smtps/smtpd[2916352]: warning: unknown[45.224.162.4]: SASL PLAIN authentication failed: Jun 5 05:34:53 mail.srvfarm.net postfix/smtps/smtpd[2916352]: lost connection after AUTH from unknown[45.224.162.4] Jun 5 05:39:54 mail.srvfarm.net postfix/smtps/smtpd[2917583]: warning: unknown[45.224.162.4]: SASL PLAIN authentication failed: Jun 5 05:39:54 mail.srvfarm.net postfix/smtps/smtpd[2917583]: lost connection after AUTH from unknown[45.224.162.4] Jun 5 05:40:54 mail.srvfarm.net postfix/smtps/smtpd[2917584]: lost connection after CONNECT from unknown[45.224.162.4]	2020-06-05 13:55:48

Type

Details

Datetime

45.224.162.4

attackspambots

(smtpauth) Failed SMTP AUTH login from 45.224.162.4 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-05 16:26:30 plain authenticator failed for ([45.224.162.4]) [45.224.162.4]: 535 Incorrect authentication data (set_id=sourenco.cominfo@sourenco.com)

2020-06-06 04:15:43

45.224.162.4

attack

Jun  5 05:34:52 mail.srvfarm.net postfix/smtps/smtpd[2916352]: warning: unknown[45.224.162.4]: SASL PLAIN authentication failed: 
Jun  5 05:34:53 mail.srvfarm.net postfix/smtps/smtpd[2916352]: lost connection after AUTH from unknown[45.224.162.4]
Jun  5 05:39:54 mail.srvfarm.net postfix/smtps/smtpd[2917583]: warning: unknown[45.224.162.4]: SASL PLAIN authentication failed: 
Jun  5 05:39:54 mail.srvfarm.net postfix/smtps/smtpd[2917583]: lost connection after AUTH from unknown[45.224.162.4]
Jun  5 05:40:54 mail.srvfarm.net postfix/smtps/smtpd[2917584]: lost connection after CONNECT from unknown[45.224.162.4]

2020-06-05 13:55:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.224.162.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10328
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.224.162.111.			IN	A

;; AUTHORITY SECTION:
.			1107	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071400 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 03:38:20 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 111.162.224.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 111.162.224.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.99.11.195	attackspambots	Jul 30 06:28:20 vps639187 sshd\[915\]: Invalid user smartbit from 192.99.11.195 port 60287 Jul 30 06:28:20 vps639187 sshd\[915\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.11.195 Jul 30 06:28:22 vps639187 sshd\[915\]: Failed password for invalid user smartbit from 192.99.11.195 port 60287 ssh2 ...	2020-07-30 12:41:04
141.98.10.197	attackbotsspam	Invalid user admin from 141.98.10.197 port 42725	2020-07-30 13:01:27
175.24.127.108	attackspambots	Port Scan ...	2020-07-30 12:33:54
62.234.15.136	attackspam	Invalid user cuichunlai from 62.234.15.136 port 43620	2020-07-30 13:04:45
74.82.47.15	attack	Jul 30 05:55:19 debian-2gb-nbg1-2 kernel: \[18339812.111158\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=74.82.47.15 DST=195.201.40.59 LEN=29 TOS=0x00 PREC=0x00 TTL=51 ID=12202 DF PROTO=UDP SPT=27773 DPT=53413 LEN=9	2020-07-30 13:04:28
120.92.149.231	attackbots	$f2bV_matches	2020-07-30 12:50:58
124.156.114.53	attackbots	Jul 30 04:58:15 ip-172-31-62-245 sshd\[17515\]: Invalid user zxf from 124.156.114.53\ Jul 30 04:58:17 ip-172-31-62-245 sshd\[17515\]: Failed password for invalid user zxf from 124.156.114.53 port 36340 ssh2\ Jul 30 05:02:01 ip-172-31-62-245 sshd\[17580\]: Invalid user inout from 124.156.114.53\ Jul 30 05:02:02 ip-172-31-62-245 sshd\[17580\]: Failed password for invalid user inout from 124.156.114.53 port 51366 ssh2\ Jul 30 05:05:58 ip-172-31-62-245 sshd\[17619\]: Invalid user user9 from 124.156.114.53\	2020-07-30 13:08:17
64.71.32.69	attackbotsspam	Trolling for resource vulnerabilities	2020-07-30 12:43:11
89.46.79.227	attackspambots	Invalid user psz from 89.46.79.227 port 39356	2020-07-30 13:09:35
220.134.114.10	attackspam	Automatic report - Banned IP Access	2020-07-30 13:06:45
120.203.25.58	attack	(imapd) Failed IMAP login from 120.203.25.58 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 30 09:13:27 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=120.203.25.58, lip=5.63.12.44, TLS, session=	2020-07-30 12:57:05
106.12.157.10	attack	Jul 30 06:58:05 sip sshd[1129186]: Invalid user minecraft from 106.12.157.10 port 38436 Jul 30 06:58:08 sip sshd[1129186]: Failed password for invalid user minecraft from 106.12.157.10 port 38436 ssh2 Jul 30 07:03:16 sip sshd[1129197]: Invalid user shenjiating from 106.12.157.10 port 40884 ...	2020-07-30 13:06:08
110.185.107.51	attackspam	Invalid user cody from 110.185.107.51 port 44622	2020-07-30 13:12:41
49.234.10.48	attackbots	Jul 30 06:41:16 fhem-rasp sshd[4422]: Invalid user ouxl from 49.234.10.48 port 58830 ...	2020-07-30 12:55:38
212.70.149.82	attackspam	2020-07-30 08:12:45 dovecot_login authenticator failed for $User$ \[212.70.149.82\]: 535 Incorrect authentication data $set_id=jeremy@org.ua$2020-07-30 08:13:14 dovecot_login authenticator failed for $User$ \[212.70.149.82\]: 535 Incorrect authentication data $set_id=jeri@org.ua$2020-07-30 08:13:43 dovecot_login authenticator failed for $User$ \[212.70.149.82\]: 535 Incorrect authentication data $set_id=jericho@org.ua$ ...	2020-07-30 13:15:29

Recently Reported IPs

211.149.155.188	102.140.244.94	64.61.174.250	90.118.6.199
114.109.199.198	73.95.216.194	2003:e9:d711:2044:ac27:9e45:960:4b00	176.144.223.193
109.238.48.147	53.71.166.162	121.128.205.183	63.3.140.246
106.251.163.118	194.193.61.212	181.146.92.78	183.197.76.124
187.87.15.133	4.239.152.165	125.231.252.239	73.71.103.12