45.82.34.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	[ER hit] Tried to deliver spam. Already well known.	2020-01-26 13:53:14

Comments on same subnet:

IP	Type	Details	Datetime
45.82.34.224	attackspam	Mar 8 05:44:14 mail.srvfarm.net postfix/smtpd[3234583]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:44:24 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:46:47 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:47:46 mail.srvfarm.net postfix/smtpd[	2020-03-08 18:24:48
45.82.34.144	attackspam	Mar 7 05:24:21 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:24:35 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:28:44 mail.srvfarm.net postfix/smtpd[2593157]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:29:09 mail.srvfarm.net postfix/smtpd[2591616]: NOQUEUE: reject: RCPT from unknown[45.82.34.1	2020-03-07 18:58:40
45.82.34.191	attackspambots	Mar 6 05:29:23 mail.srvfarm.net postfix/smtpd[1923012]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:30:30 mail.srvfarm.net postfix/smtpd[1924591]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:31:17 mail.srvfarm.net postfix/smtpd[1924585]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:33:14 mail.srvfarm.net postfix/smtpd[1924	2020-03-06 18:50:39
45.82.34.238	attackspambots	Mar 5 05:28:44 web01 postfix/smtpd[25364]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:28:44 web01 policyd-spf[25367]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:28:44 web01 policyd-spf[25367]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:28:44 web01 postfix/smtpd[25364]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 postfix/smtpd[25361]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 policyd-spf[25366]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:32:36 web01 policyd-spf[25366]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:32:36 web01 postfix/smtpd[25361]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5........ -------------------------------	2020-03-05 15:59:02
45.82.34.212	attack	Autoban 45.82.34.212 AUTH/CONNECT	2020-01-24 19:16:41
45.82.34.178	attackspam	Autoban 45.82.34.178 AUTH/CONNECT	2020-01-08 20:07:18
45.82.34.90	attack	Brute force attempt	2020-01-08 19:29:55
45.82.34.85	attackspambots	Autoban 45.82.34.85 AUTH/CONNECT	2019-12-29 15:54:00
45.82.34.74	attackbotsspam	Email Spam	2019-12-23 18:28:30
45.82.34.239	attackbotsspam	Autoban 45.82.34.239 AUTH/CONNECT	2019-12-23 02:11:57
45.82.34.25	attackbots	Autoban 45.82.34.25 AUTH/CONNECT	2019-12-13 06:49:31
45.82.34.251	attackbots	Autoban 45.82.34.251 AUTH/CONNECT	2019-12-13 06:49:16
45.82.34.252	attack	Autoban 45.82.34.252 AUTH/CONNECT	2019-12-13 06:48:19
45.82.34.253	attack	Autoban 45.82.34.253 AUTH/CONNECT	2019-12-13 06:47:50
45.82.34.254	attackbotsspam	Autoban 45.82.34.254 AUTH/CONNECT	2019-12-13 06:47:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.34.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.82.34.245.			IN	A

;; AUTHORITY SECTION:
.			430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012600 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 13:53:10 CST 2020
;; MSG SIZE  rcvd: 116

Host info

245.34.82.45.in-addr.arpa domain name pointer lighten.geomaticvista.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.34.82.45.in-addr.arpa	name = lighten.geomaticvista.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.253.74.197	attackbotsspam	Unauthorized connection attempt from IP address 171.253.74.197 on Port 445(SMB)	2019-12-20 06:09:51
219.255.251.251	attackspam	firewall-block, port(s): 1433/tcp	2019-12-20 05:56:38
91.218.160.180	attackbots	Unauthorized connection attempt from IP address 91.218.160.180 on Port 445(SMB)	2019-12-20 05:52:51
142.93.117.17	attackspambots	Dec 19 16:32:49 plusreed sshd[10910]: Invalid user nfs from 142.93.117.17 ...	2019-12-20 05:36:19
171.245.126.182	attackbots	Unauthorized connection attempt from IP address 171.245.126.182 on Port 445(SMB)	2019-12-20 05:47:19
181.177.244.68	attackspambots	Dec 19 22:45:26 jane sshd[10909]: Failed password for daemon from 181.177.244.68 port 48071 ssh2 ...	2019-12-20 06:04:55
128.70.165.161	attack	$f2bV_matches	2019-12-20 05:36:36
91.199.197.70	attackbotsspam	Unauthorized connection attempt detected from IP address 91.199.197.70 to port 445	2019-12-20 05:33:26
185.127.24.213	attackbotsspam	SSH invalid-user multiple login try	2019-12-20 06:04:29
177.155.180.6	attackbots	$f2bV_matches	2019-12-20 05:52:02
116.203.127.92	attackspam	Invalid user etc from 116.203.127.92 port 53258 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.127.92 Failed password for invalid user etc from 116.203.127.92 port 53258 ssh2 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.127.92 user=root Failed password for root from 116.203.127.92 port 58484 ssh2	2019-12-20 05:45:09
177.152.65.7	attackspam	Unauthorized connection attempt from IP address 177.152.65.7 on Port 445(SMB)	2019-12-20 05:44:51
185.80.100.156	attackbotsspam	DATE:2019-12-19 15:31:25, IP:185.80.100.156, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-12-20 05:51:11
149.56.45.87	attackspam	Dec 19 21:19:02 cp sshd[17413]: Failed password for root from 149.56.45.87 port 55708 ssh2 Dec 19 21:19:02 cp sshd[17413]: Failed password for root from 149.56.45.87 port 55708 ssh2	2019-12-20 06:01:15
42.118.104.53	attackspambots	Unauthorized connection attempt from IP address 42.118.104.53 on Port 445(SMB)	2019-12-20 06:03:30

Recently Reported IPs

187.109.166.32	181.203.25.157	106.75.95.133	1.171.134.153
23.165.237.169	122.51.240.151	165.30.109.55	201.97.115.115
57.134.114.209	142.197.19.152	192.82.173.196	140.63.141.59
104.203.168.182	193.122.32.61	161.91.218.23	132.239.83.50
34.24.32.196	234.229.82.158	183.100.125.71	7.180.114.210