45.57.225.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.57.225.78	attackbotsspam	[ThuOct0314:28:22.4038672019][:error][pid19757:tid47845818267392][client45.57.225.78:36117][client45.57.225.78]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"fonteanimalfeed.com"][uri"/"][unique_id"XZXpZiS@MC-BFOMoWQrw6AAAAA8"]\,referer:https://fonteanimalfeed.com[ThuOct0314:28:27.1381622019][:error][pid19859:tid47845818267392][client45.57.225.78:31757][client45.57.225.78]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSI	2019-10-03 22:12:21

Type

Details

Datetime

45.57.225.78

attackbotsspam

[ThuOct0314:28:22.4038672019][:error][pid19757:tid47845818267392][client45.57.225.78:36117][client45.57.225.78]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"fonteanimalfeed.com"][uri"/"][unique_id"XZXpZiS@MC-BFOMoWQrw6AAAAA8"]\,referer:https://fonteanimalfeed.com[ThuOct0314:28:27.1381622019][:error][pid19859:tid47845818267392][client45.57.225.78:31757][client45.57.225.78]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSI

2019-10-03 22:12:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.57.225.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42945
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.57.225.64.			IN	A

;; AUTHORITY SECTION:
.			211	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061500 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 16:21:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

64.225.57.45.in-addr.arpa domain name pointer bakehouse.gohomeassist.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.225.57.45.in-addr.arpa	name = bakehouse.gohomeassist.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.2.5.40	attackbots	Automatic report - Banned IP Access	2019-07-30 02:14:30
185.176.27.26	attackbots	firewall-block, port(s): 23583/tcp, 23584/tcp, 23690/tcp	2019-07-30 02:17:35
103.51.24.33	attack	Jul 29 01:38:00 mailman postfix/smtpd[26389]: NOQUEUE: reject: RCPT from unknown[103.51.24.33]: 554 5.7.1 Service unavailable; Client host [103.51.24.33] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/103.51.24.33; from= to= proto=ESMTP helo=<[103.51.24.33]> Jul 29 01:38:13 mailman postfix/smtpd[26389]: NOQUEUE: reject: RCPT from unknown[103.51.24.33]: 554 5.7.1 Service unavailable; Client host [103.51.24.33] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/103.51.24.33; from= to= proto=ESMTP helo=<[103.51.24.33]>	2019-07-30 01:40:36
2.228.163.157	attackbots	Lines containing failures of 2.228.163.157 Jul 29 08:33:48 benjouille sshd[14390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.163.157 user=r.r Jul 29 08:33:51 benjouille sshd[14390]: Failed password for r.r from 2.228.163.157 port 36942 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=2.228.163.157	2019-07-30 01:33:03
41.216.186.201	attackbotsspam	scan z	2019-07-30 02:18:16
178.62.222.60	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-07-30 02:10:18
177.103.254.24	attackbotsspam	Jul 29 08:38:30 vps65 sshd\[20368\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.103.254.24 user=root Jul 29 08:38:32 vps65 sshd\[20368\]: Failed password for root from 177.103.254.24 port 33176 ssh2 ...	2019-07-30 01:26:54
89.108.122.195	attack	Jul 29 08:38:46 MK-Soft-VM4 sshd\[31546\]: Invalid user gfdsa!@\#$% from 89.108.122.195 port 43400 Jul 29 08:38:46 MK-Soft-VM4 sshd\[31546\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.108.122.195 Jul 29 08:38:48 MK-Soft-VM4 sshd\[31546\]: Failed password for invalid user gfdsa!@\#$% from 89.108.122.195 port 43400 ssh2 ...	2019-07-30 01:42:55
173.82.235.202	attackspambots	2019-07-29T18:14:34.654006abusebot.cloudsearch.cf sshd\[5467\]: Invalid user xzsawq21 from 173.82.235.202 port 43194	2019-07-30 02:19:18
198.199.104.20	attack	2019-07-29T17:45:13.134451abusebot-6.cloudsearch.cf sshd\[8398\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.104.20 user=root	2019-07-30 01:53:15
185.244.25.89	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-07-30 02:18:46
79.58.215.225	attack	Telnetd brute force attack detected by fail2ban	2019-07-30 01:27:34
34.85.97.82	attackbotsspam	Jul 29 19:12:59 server sshd[11136]: Failed password for invalid user grayson from 34.85.97.82 port 50108 ssh2 Jul 29 19:29:05 server sshd[12372]: Failed password for invalid user ftp1 from 34.85.97.82 port 45422 ssh2 Jul 29 19:45:10 server sshd[13652]: Failed password for invalid user us from 34.85.97.82 port 40674 ssh2	2019-07-30 01:56:32
98.4.160.39	attack	Jul 29 17:59:47 server sshd\[19607\]: Invalid user tengxunyun from 98.4.160.39 port 53848 Jul 29 17:59:47 server sshd\[19607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39 Jul 29 17:59:49 server sshd\[19607\]: Failed password for invalid user tengxunyun from 98.4.160.39 port 53848 ssh2 Jul 29 18:04:13 server sshd\[27031\]: Invalid user balinez@123 from 98.4.160.39 port 46758 Jul 29 18:04:13 server sshd\[27031\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39	2019-07-30 01:36:57
138.204.26.85	attack	port scan/probe/communication attempt	2019-07-30 01:29:09

Recently Reported IPs

45.57.225.56	46.19.137.59	46.19.137.62	78.47.30.15
49.85.211.224	49.85.197.159	49.85.220.60	46.18.210.214
49.85.229.159	46.19.137.19	46.19.137.37	46.19.137.230
46.19.137.135	46.19.143.80	46.19.143.110	46.19.137.226
3.131.50.116	46.20.4.181	46.20.11.91	46.20.164.247