45.82.34.84 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Sent Mail to address hacked/leaked/bought from crystalproductions.cz between 2011 and 2018	2019-07-31 17:04:21

Comments on same subnet:

IP	Type	Details	Datetime
45.82.34.224	attackspam	Mar 8 05:44:14 mail.srvfarm.net postfix/smtpd[3234583]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:44:24 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:46:47 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 8 05:47:46 mail.srvfarm.net postfix/smtpd[	2020-03-08 18:24:48
45.82.34.144	attackspam	Mar 7 05:24:21 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:24:35 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:28:44 mail.srvfarm.net postfix/smtpd[2593157]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 05:29:09 mail.srvfarm.net postfix/smtpd[2591616]: NOQUEUE: reject: RCPT from unknown[45.82.34.1	2020-03-07 18:58:40
45.82.34.191	attackspambots	Mar 6 05:29:23 mail.srvfarm.net postfix/smtpd[1923012]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:30:30 mail.srvfarm.net postfix/smtpd[1924591]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:31:17 mail.srvfarm.net postfix/smtpd[1924585]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 05:33:14 mail.srvfarm.net postfix/smtpd[1924	2020-03-06 18:50:39
45.82.34.238	attackspambots	Mar 5 05:28:44 web01 postfix/smtpd[25364]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:28:44 web01 policyd-spf[25367]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:28:44 web01 policyd-spf[25367]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:28:44 web01 postfix/smtpd[25364]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 postfix/smtpd[25361]: connect from dance.geomaticvista.com[45.82.34.238] Mar 5 05:32:36 web01 policyd-spf[25366]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar 5 05:32:36 web01 policyd-spf[25366]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x Mar x@x Mar 5 05:32:36 web01 postfix/smtpd[25361]: disconnect from dance.geomaticvista.com[45.82.34.238] Mar 5........ -------------------------------	2020-03-05 15:59:02
45.82.34.245	attackbotsspam	[ER hit] Tried to deliver spam. Already well known.	2020-01-26 13:53:14
45.82.34.212	attack	Autoban 45.82.34.212 AUTH/CONNECT	2020-01-24 19:16:41
45.82.34.178	attackspam	Autoban 45.82.34.178 AUTH/CONNECT	2020-01-08 20:07:18
45.82.34.90	attack	Brute force attempt	2020-01-08 19:29:55
45.82.34.85	attackspambots	Autoban 45.82.34.85 AUTH/CONNECT	2019-12-29 15:54:00
45.82.34.74	attackbotsspam	Email Spam	2019-12-23 18:28:30
45.82.34.239	attackbotsspam	Autoban 45.82.34.239 AUTH/CONNECT	2019-12-23 02:11:57
45.82.34.25	attackbots	Autoban 45.82.34.25 AUTH/CONNECT	2019-12-13 06:49:31
45.82.34.251	attackbots	Autoban 45.82.34.251 AUTH/CONNECT	2019-12-13 06:49:16
45.82.34.252	attack	Autoban 45.82.34.252 AUTH/CONNECT	2019-12-13 06:48:19
45.82.34.253	attack	Autoban 45.82.34.253 AUTH/CONNECT	2019-12-13 06:47:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.34.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23162
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.82.34.84.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 17:04:14 CST 2019
;; MSG SIZE  rcvd: 115

Host info

84.34.82.45.in-addr.arpa domain name pointer knowledge.geomaticvista.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
84.34.82.45.in-addr.arpa	name = knowledge.geomaticvista.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.200.206.225	attack	Invalid user master from 42.200.206.225 port 44602	2020-05-15 15:45:01
51.15.1.221	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-05-15 15:50:27
113.190.253.231	attackspambots	SSH bruteforce	2020-05-15 16:19:15
123.108.35.186	attack	May 15 15:48:29 localhost sshd[533180]: Invalid user user from 123.108.35.186 port 35652 ...	2020-05-15 16:00:27
222.186.175.167	attackbotsspam	May 15 10:07:46 eventyay sshd[17738]: Failed password for root from 222.186.175.167 port 5834 ssh2 May 15 10:07:50 eventyay sshd[17738]: Failed password for root from 222.186.175.167 port 5834 ssh2 May 15 10:07:54 eventyay sshd[17738]: Failed password for root from 222.186.175.167 port 5834 ssh2 May 15 10:07:58 eventyay sshd[17738]: Failed password for root from 222.186.175.167 port 5834 ssh2 ...	2020-05-15 16:09:22
64.227.37.93	attack	Invalid user fld from 64.227.37.93 port 49870	2020-05-15 16:15:12
143.255.150.81	attack	Invalid user test from 143.255.150.81 port 44250	2020-05-15 15:49:59
62.141.150.246	attack	SSH brute-force attempt	2020-05-15 16:13:00
51.75.19.45	attackbotsspam	3x Failed Password	2020-05-15 16:14:15
138.197.142.81	attack	May 15 09:04:15 sso sshd[20968]: Failed password for root from 138.197.142.81 port 51588 ssh2 ...	2020-05-15 16:23:54
201.247.40.134	attackbots	Email SMTP authentication failure	2020-05-15 15:41:35
146.185.180.60	attackspambots	(sshd) Failed SSH login from 146.185.180.60 (NL/Netherlands/-): 5 in the last 3600 secs	2020-05-15 15:48:10
139.199.75.110	attackbots	odoo8 ...	2020-05-15 16:05:04
101.51.82.12	attackbotsspam	20/5/14@23:53:16: FAIL: IoT-SSH address from=101.51.82.12 ...	2020-05-15 15:55:47
188.254.55.130	attackspam	nft/Honeypot/22/73e86	2020-05-15 16:18:58

Recently Reported IPs

51.136.137.134	107.22.99.115	163.91.198.120	43.48.103.89
8.231.203.245	164.38.75.51	242.246.228.114	238.174.199.146
139.255.246.160	255.6.195.81	156.73.253.207	177.125.89.55
54.232.87.29	20.108.213.92	72.168.87.247	169.199.3.115
224.186.215.71	185.108.164.147	217.182.16.126	196.52.84.57