45.82.34.212 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: UAB Baltnetos komunikacijos

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Autoban 45.82.34.212 AUTH/CONNECT	2020-01-24 19:16:41

Comments on same subnet:

IP	Type	Details	Datetime
45.82.34.224	attackspam	Mar 8 05:44:14 mail.srvfarm.net postfix/smtpd[3234583]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:44:24 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:46:47 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:47:46 mail.srvfarm.net postfix/smtpd[	2020-03-08 18:24:48
45.82.34.144	attackspam	Mar 7 05:24:21 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:24:35 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:28:44 mail.srvfarm.net postfix/smtpd[2593157]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:29:09 mail.srvfarm.net postfix/smtpd[2591616]: NOQUEUE: reject: RCPT from unknown[45.82.34.1	2020-03-07 18:58:40
45.82.34.191	attackspambots	Mar 6 05:29:23 mail.srvfarm.net postfix/smtpd[1923012]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:30:30 mail.srvfarm.net postfix/smtpd[1924591]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:31:17 mail.srvfarm.net postfix/smtpd[1924585]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:33:14 mail.srvfarm.net postfix/smtpd[1924	2020-03-06 18:50:39
45.82.34.238	attackspambots	Mar 5 05:28:44 web01 postfix/smtpd[25364]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:28:44 web01 policyd-spf[25367]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:28:44 web01 policyd-spf[25367]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:28:44 web01 postfix/smtpd[25364]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 postfix/smtpd[25361]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 policyd-spf[25366]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:32:36 web01 policyd-spf[25366]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:32:36 web01 postfix/smtpd[25361]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5........ -------------------------------	2020-03-05 15:59:02
45.82.34.245	attackbotsspam	[ER hit] Tried to deliver spam. Already well known.	2020-01-26 13:53:14
45.82.34.178	attackspam	Autoban 45.82.34.178 AUTH/CONNECT	2020-01-08 20:07:18
45.82.34.90	attack	Brute force attempt	2020-01-08 19:29:55
45.82.34.85	attackspambots	Autoban 45.82.34.85 AUTH/CONNECT	2019-12-29 15:54:00
45.82.34.74	attackbotsspam	Email Spam	2019-12-23 18:28:30
45.82.34.239	attackbotsspam	Autoban 45.82.34.239 AUTH/CONNECT	2019-12-23 02:11:57
45.82.34.25	attackbots	Autoban 45.82.34.25 AUTH/CONNECT	2019-12-13 06:49:31
45.82.34.251	attackbots	Autoban 45.82.34.251 AUTH/CONNECT	2019-12-13 06:49:16
45.82.34.252	attack	Autoban 45.82.34.252 AUTH/CONNECT	2019-12-13 06:48:19
45.82.34.253	attack	Autoban 45.82.34.253 AUTH/CONNECT	2019-12-13 06:47:50
45.82.34.254	attackbotsspam	Autoban 45.82.34.254 AUTH/CONNECT	2019-12-13 06:47:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.34.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.82.34.212.			IN	A

;; AUTHORITY SECTION:
.			376	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012400 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 19:16:37 CST 2020
;; MSG SIZE  rcvd: 116

Host info

212.34.82.45.in-addr.arpa domain name pointer party.geomaticvista.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
212.34.82.45.in-addr.arpa	name = party.geomaticvista.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.247.13.114	attackbotsspam	Aug 18 22:30:34 lnxded64 sshd[30761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.247.13.114	2019-08-19 05:58:48
23.97.180.45	attack	Aug 18 17:05:07 server sshd\[16842\]: Invalid user lubuntu from 23.97.180.45 port 39254 Aug 18 17:05:07 server sshd\[16842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45 Aug 18 17:05:09 server sshd\[16842\]: Failed password for invalid user lubuntu from 23.97.180.45 port 39254 ssh2 Aug 18 17:10:08 server sshd\[10973\]: Invalid user dd from 23.97.180.45 port 34848 Aug 18 17:10:08 server sshd\[10973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45	2019-08-19 05:59:45
141.98.9.42	attack	Aug 18 18:28:54 mail postfix/smtpd\[2462\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 18 18:59:13 mail postfix/smtpd\[3362\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 18 19:00:14 mail postfix/smtpd\[3409\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Aug 18 19:01:15 mail postfix/smtpd\[3409\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-08-19 05:46:01
172.81.212.111	attackbots	Aug 18 17:08:56 microserver sshd[62327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.212.111 user=root Aug 18 17:08:58 microserver sshd[62327]: Failed password for root from 172.81.212.111 port 52638 ssh2 Aug 18 17:13:14 microserver sshd[62951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.212.111 user=root Aug 18 17:13:16 microserver sshd[62951]: Failed password for root from 172.81.212.111 port 57580 ssh2 Aug 18 17:17:23 microserver sshd[63545]: Invalid user batchService from 172.81.212.111 port 34286 Aug 18 17:30:00 microserver sshd[64948]: Invalid user readonly from 172.81.212.111 port 49108 Aug 18 17:30:00 microserver sshd[64948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.212.111 Aug 18 17:30:03 microserver sshd[64948]: Failed password for invalid user readonly from 172.81.212.111 port 49108 ssh2 Aug 18 17:34:22 microserver sshd[323]: Invalid user tom	2019-08-19 05:50:10
83.171.99.217	attack	Aug 18 17:22:04 vps200512 sshd\[9024\]: Invalid user jaimie from 83.171.99.217 Aug 18 17:22:04 vps200512 sshd\[9024\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.171.99.217 Aug 18 17:22:06 vps200512 sshd\[9024\]: Failed password for invalid user jaimie from 83.171.99.217 port 3622 ssh2 Aug 18 17:26:00 vps200512 sshd\[9110\]: Invalid user impala from 83.171.99.217 Aug 18 17:26:00 vps200512 sshd\[9110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.171.99.217	2019-08-19 05:34:20
2a01:cb08:940:9200:40cc:6b95:d2e4:f44	attackbotsspam	LGS,WP GET /wp-login.php	2019-08-19 05:36:21
163.172.192.210	attackspambots	\[2019-08-18 13:49:43\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-18T13:49:43.654-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/58655",ACLName="no_extension_match" \[2019-08-18 13:53:35\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-18T13:53:35.508-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/58929",ACLName="no_extension_match" \[2019-08-18 13:57:20\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-18T13:57:20.083-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="333011972592277524",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/60709",ACLName="no_extension_match" ...	2019-08-19 05:52:20
148.70.17.61	attackbotsspam	Aug 18 05:44:42 friendsofhawaii sshd\[3987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.17.61 user=root Aug 18 05:44:45 friendsofhawaii sshd\[3987\]: Failed password for root from 148.70.17.61 port 51890 ssh2 Aug 18 05:50:46 friendsofhawaii sshd\[4542\]: Invalid user yolanda from 148.70.17.61 Aug 18 05:50:46 friendsofhawaii sshd\[4542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.17.61 Aug 18 05:50:48 friendsofhawaii sshd\[4542\]: Failed password for invalid user yolanda from 148.70.17.61 port 39206 ssh2	2019-08-19 05:22:59
46.39.46.199	attackbots	WordPress brute force	2019-08-19 05:45:30
196.18.236.68	attackbots	Unauthorized access detected from banned ip	2019-08-19 05:44:49
108.62.202.220	attackspam	Splunk® : port scan detected: Aug 18 17:47:32 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=108.62.202.220 DST=104.248.11.191 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=54321 PROTO=TCP SPT=58430 DPT=33824 WINDOW=65535 RES=0x00 SYN URGP=0	2019-08-19 05:48:15
91.180.19.167	attackspambots	Aug 18 12:56:48 sshgateway sshd\[6729\]: Invalid user sammy from 91.180.19.167 Aug 18 12:56:48 sshgateway sshd\[6729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.180.19.167 Aug 18 12:56:50 sshgateway sshd\[6729\]: Failed password for invalid user sammy from 91.180.19.167 port 55070 ssh2	2019-08-19 05:29:09
54.39.209.227	attackspam	08/18/2019-17:54:12.015167 54.39.209.227 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52	2019-08-19 05:54:46
121.182.166.81	attack	Aug 18 23:40:12 SilenceServices sshd[10327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81 Aug 18 23:40:14 SilenceServices sshd[10327]: Failed password for invalid user yunmen from 121.182.166.81 port 62454 ssh2 Aug 18 23:45:02 SilenceServices sshd[13820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.81	2019-08-19 05:58:00
5.255.250.161	attackspambots	Newburyport, Mass USA, child pornography links, IP: 5.255.250.161 Hostname: 5-255-250-161.spider.yandex.com Human/Bot: Bot Browser: undefined Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)	2019-08-19 05:44:11

Recently Reported IPs

180.244.235.16	228.6.107.250	143.239.63.102	71.96.178.58
68.143.149.97	87.124.58.225	95.110.226.103	51.227.172.87
169.118.155.22	249.11.109.65	180.180.123.71	113.141.50.12
191.110.136.26	187.162.41.35	159.65.9.145	134.119.223.66
36.90.83.34	138.97.243.253	46.32.83.98	111.67.206.134