45.5.117.138 - IPInfo

Basic Info

City: Guatemala City

Region: Departamento de Guatemala

Country: Guatemala

Internet Service Provider: unknown

Hostname: unknown

Organization: INVERSIONES GRAJEDA ANDRADE S.A

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.5.117.114	attack	8443/tcp 8081/tcp 8080/tcp... [2020-04-25/06-24]8pkt,5pt.(tcp)	2020-06-25 06:01:37
45.5.117.114	attack	Web application attack detected by fail2ban	2020-06-08 14:41:12

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.5.117.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1706
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.5.117.138.			IN	A

;; AUTHORITY SECTION:
.			2848	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050401 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun May 05 03:23:01 +08 2019
;; MSG SIZE  rcvd: 116

Host info

Host 138.117.5.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 138.117.5.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.197.180.29	attack	Aug 7 17:37:43 vpn01 sshd[1338]: Failed password for root from 138.197.180.29 port 44378 ssh2 ...	2020-08-08 00:04:30
61.188.18.141	attackspam	$f2bV_matches	2020-08-08 00:31:59
179.127.166.10	attackbotsspam	TCP (SYN) 179.127.166.10:19195 -> port 23, len 44	2020-08-08 00:07:58
37.49.224.189	attackbots	TCP (SYN) 37.49.224.189:49474 -> port 22, len 48	2020-08-07 23:57:41
177.87.154.2	attackspambots	2020-08-07T07:39:39.971996morrigan.ad5gb.com sshd[952749]: Failed password for root from 177.87.154.2 port 56560 ssh2 2020-08-07T07:39:42.317244morrigan.ad5gb.com sshd[952749]: Disconnected from authenticating user root 177.87.154.2 port 56560 [preauth]	2020-08-08 00:13:23
159.89.194.160	attackspambots	2020-08-07T16:10:59.917949amanda2.illicoweb.com sshd\[15646\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root 2020-08-07T16:11:02.200240amanda2.illicoweb.com sshd\[15646\]: Failed password for root from 159.89.194.160 port 49676 ssh2 2020-08-07T16:16:47.179113amanda2.illicoweb.com sshd\[16936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root 2020-08-07T16:16:48.903954amanda2.illicoweb.com sshd\[16936\]: Failed password for root from 159.89.194.160 port 55350 ssh2 2020-08-07T16:18:45.931183amanda2.illicoweb.com sshd\[17185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root ...	2020-08-07 23:54:00
188.152.189.220	attackbotsspam	$f2bV_matches	2020-08-07 23:52:44
103.105.59.80	attack	Aug 7 11:44:56 vps46666688 sshd[1583]: Failed password for root from 103.105.59.80 port 38516 ssh2 ...	2020-08-07 23:48:51
221.153.225.196	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-07 23:56:20
222.186.180.223	attack	Aug 7 17:58:28 abendstille sshd\[15086\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Aug 7 17:58:29 abendstille sshd\[15086\]: Failed password for root from 222.186.180.223 port 41886 ssh2 Aug 7 17:58:40 abendstille sshd\[15086\]: Failed password for root from 222.186.180.223 port 41886 ssh2 Aug 7 17:58:43 abendstille sshd\[15086\]: Failed password for root from 222.186.180.223 port 41886 ssh2 Aug 7 17:58:50 abendstille sshd\[15542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root ...	2020-08-08 00:11:52
195.54.167.153	attackspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-07T11:33:16Z and 2020-08-07T12:04:50Z	2020-08-08 00:05:53
41.42.17.110	attackbots	Aug 7 11:43:50 vps34202 sshd[4185]: reveeclipse mapping checking getaddrinfo for host-41.42.17.110.tedata.net [41.42.17.110] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 7 11:43:50 vps34202 sshd[4185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.42.17.110 user=r.r Aug 7 11:43:52 vps34202 sshd[4185]: Failed password for r.r from 41.42.17.110 port 59130 ssh2 Aug 7 11:43:52 vps34202 sshd[4185]: Received disconnect from 41.42.17.110: 11: Bye Bye [preauth] Aug 7 11:48:21 vps34202 sshd[4314]: reveeclipse mapping checking getaddrinfo for host-41.42.17.110.tedata.net [41.42.17.110] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 7 11:48:21 vps34202 sshd[4314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.42.17.110 user=r.r Aug 7 11:48:22 vps34202 sshd[4314]: Failed password for r.r from 41.42.17.110 port 42248 ssh2 Aug 7 11:48:22 vps34202 sshd[4314]: Received disconnect from 41.42.17.110: ........ -------------------------------	2020-08-08 00:24:25
145.239.11.166	attackspambots	[2020-08-07 12:09:22] NOTICE[1248][C-00004962] chan_sip.c: Call from '' (145.239.11.166:35679) to extension '00447441399590' rejected because extension not found in context 'public'. [2020-08-07 12:09:22] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-07T12:09:22.261-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00447441399590",SessionID="0x7f272002e0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.11.166/5060",ACLName="no_extension_match" [2020-08-07 12:10:31] NOTICE[1248][C-00004967] chan_sip.c: Call from '' (145.239.11.166:11129) to extension '00447441399590' rejected because extension not found in context 'public'. [2020-08-07 12:10:31] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-07T12:10:31.330-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00447441399590",SessionID="0x7f27204d2b88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/14 ...	2020-08-08 00:17:03
103.212.140.149	attackspambots	Aug 7 13:51:47 iago sshd[12888]: Did not receive identification string from 103.212.140.149 Aug 7 13:52:51 iago sshd[12892]: Invalid user thostname0nich from 103.212.140.149 Aug 7 13:52:52 iago sshd[12892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.140.149 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.212.140.149	2020-08-08 00:08:51
27.78.65.198	attackspam	Automatic report - Port Scan Attack	2020-08-08 00:26:50

Recently Reported IPs

103.86.200.126	5.10.245.2	116.11.52.46	93.113.146.54
42.2.235.52	66.48.138.235	156.209.109.191	142.46.203.134
32.50.50.203	197.53.83.223	51.158.125.6	41.215.77.54
118.170.212.92	112.111.98.72	185.3.134.111	190.71.38.196
119.82.240.123	50.37.221.73	109.123.117.239	98.210.180.42