45.137.22.62 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): RootLayer Web Services Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Aug 12 14:39:02 web2 sshd[26392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.137.22.62 Aug 12 14:39:04 web2 sshd[26392]: Failed password for invalid user kjw92 from 45.137.22.62 port 52865 ssh2	2020-08-13 04:22:36

类型

评论内容

时间

attackspambots

Aug 12 14:39:02 web2 sshd[26392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.137.22.62
Aug 12 14:39:04 web2 sshd[26392]: Failed password for invalid user kjw92 from 45.137.22.62 port 52865 ssh2

2020-08-13 04:22:36

相同子网IP讨论:

IP	类型	评论内容	时间
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 UAB LIMORIS - newworld@nwd.com.hk, invoice, 2 Jul 2021 185.222.58.104 khalid Siddiqui - ceo@seafarerpk.com, SHIPPING DOCUMENTS FOR GATE PASS, 3 Jul 2021 person: K.M. Badrul Alam address: Naherins Domain, 134/7 B, Furfura Sharif Road, Darus Salam inetnum: 45.128.0.0 - 45.159.255.255 185.222.57.0 - 185.222.57.255 185.222.58.0 - 185.222.58.255 Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 185.222.57.140 FUKUSEN (SALES DEPT) - fukusen-ikari@alpha.ocn.ne.jp - RE: Confirmation Order for PO # B18024091/02730918, 4 May 2021 21:38:19 185.222.57.140 Julie shi - shifulan@sinotrans.com - RE: SATEMENT OF ACCOUNT, 5 May 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, 30 Apr 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, Mon, 26 Apr 2021 185.222.57.140 Jason Kim - jason@wscorporation.co.kr - Enquiry # A87983T - Fittings and Flanges for LNG project, Sun, 25 Apr 2021 185.222.57.140 Magdi Amin - areej@alamalcargo.com - RE: New Order, 6 May 2021 185.222.57.143 Mr. Ahmed Bilwani - daniel.robinson@compelo.com, OUTSTANDING PAYMENT REMINDER, 13 Jun 2021 185.222.57.143 Barbara Liu / 刘莉 - liuli.hgxs"@sinopec.com, Payment confirmation, 13 Jun 2021 185.222.57.143 M. Ahmed Bilwani - jiovieno@marketresearch.com, PAYMENT REMINDER, 18 Jun 2021 185.222.57.143 M. Ahmed Bilwani - jiovieno@marketresearch.com, PAYMENT REMINDER, 19 Jun 2021 185.222.58.104 khalid Siddiqui - ceo@seafarerpk.com, SHIPPING DOCUMENTS FOR GATE PASS, 3 Jul 2021	2021-07-03 06:54:21
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 Alla Shpedko - mediainquiries@cision.com, Confirmation, 30 Jun 2021 45.137.22.47 Barbara Liu - info@pixelmechanics.com.sg, P O, 30 Jun 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 45.137.22.47 Kastriot Buci - Kastriot.Bucii@dahuatech.com, Order, 30 Jun 2021 45.137.22.47 Alla Shpedko - mediainquiries@cision.com, Confirmation, 30 Jun 2021 45.137.22.47 Barbara Liu - info@pixelmechanics.com.sg, P O, 30 Jun 2021	2021-07-01 09:54:31
45.137.22.47	spamattack	PHISHING AND SPAM ATTACK 45.137.22.47 Kastriot Buci - Kastriot.Bucii@dahuatech.com, Order, 30 Jun 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021	2021-06-30 08:55:35
45.137.22.44	spamattack	PHISHING ATTACK 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK as well as; 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 45.137.22.44 Barbara Liu liuli.hgxs@sinopec.com, Req Invoice, 27 May 2021	2021-05-31 07:57:16
45.137.22.37	spamattack	45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK 45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 45.137.22.37 M. Ahmed Bilwani - editorial@thejakartapost.com - OUTSTANDING PAYMENT REMINDER, 17 May 2021	2021-05-19 07:48:47
45.137.22.37	spamattack	45.137.22.37 Engr. Ghazanfar Raza - ghazanfar@sgbmdxb.com - NEW ORDER, 17 May 2021 NetRange: 45.128.0.0 - 45.159.255.255 OrgId: RIPE Other emails from same group are listed below as PHISHING AND SPAM ATTACK	2021-05-18 05:15:04
45.137.22.138	spamattack	PHISHING AND SPAM ATTACK FROM "Grace 曹向慧 - wh.dzxs02@xinyiglass.com -" : SUBJECT "XYG FINANCIAL REQUIREMENT--- LC" : RECEIVED "from [45.137.22.138] (port=58343 helo=xinyiglass.com)" : DATE/TIMESENT "Fri, 30 Apr 2021 17:28:39 " IP ADDRESS "inetnum:45.128.0.0 - 45.159.255.255 org-name:RootLayer Web Services Ltd."	2021-05-01 18:57:41
45.137.22.138	spamattack	PHISHING AND SPAM ATTACK FROM "Cherry - zamy0001@126.com -" : SUBJECT "Marine Open Policy No. MP/O/10/000116/11/2020/DT, CMIC Chloride - 6000 Kgs. against L/C No. LC/99/082/3087" : RECEIVED "from [45.137.22.138] (port=55954 helo=126.com) (envelope-from ) id 1lR9XR-004z74-Kj " : DATE/TIMESENT "Tue, 30 Mar 2021 19:15:51" IP ADDRESS "inetnum:45.128.0.0 - 45.159.255.255 Organization: RIPE Network Coordination Centre (RIPE)"	2021-03-30 16:52:45
45.137.22.90	attackspam	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 22:31:07
45.137.22.90	attack	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 14:36:52
45.137.22.90	attackbotsspam	Subject: 答复: 答复: Revised Invoice Date: 21 Sep 2020 11:25:‪27 -0700‬ Message ID: <20200921112527.158DBCFBB65E469C@transwellogistic.com> Virus/Unauthorized code: >>> Possible MalWare 'AVE/Heur.AdvML.B!200' found in '‪25511069‬_3X_AR_PA2__INVOICE.exe'.	2020-09-22 06:39:39
45.137.22.108	attackbotsspam	SMTP AUTH	2020-09-16 23:45:25
45.137.22.108	attackbotsspam	Sep 15 18:59:01 server postfix/smtpd[12697]: NOQUEUE: reject: RCPT from unknown[45.137.22.108]: 554 5.7.1 Service unavailable; Client host [45.137.22.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?45.137.22.108; from= to= proto=ESMTP helo=	2020-09-16 16:02:22
45.137.22.108	attackbotsspam	Sep 15 18:59:01 server postfix/smtpd[12697]: NOQUEUE: reject: RCPT from unknown[45.137.22.108]: 554 5.7.1 Service unavailable; Client host [45.137.22.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?45.137.22.108; from= to= proto=ESMTP helo=	2020-09-16 08:02:47
45.137.229.5	attackbots	45.137.229.5 - - [29/Aug/2020:05:42:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.137.229.5 - - [29/Aug/2020:05:59:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 10784 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 12:14:49

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.137.22.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35268
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.137.22.62.			IN	A

;; AUTHORITY SECTION:
.			405	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081202 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 13 04:22:33 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

62.22.137.45.in-addr.arpa domain name pointer hosted-by.rootlayer.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
62.22.137.45.in-addr.arpa	name = hosted-by.rootlayer.net.

Authoritative answers can be found from:

IP	类型	评论内容	时间
223.171.32.56	attackspam	2019-10-19T14:17:38.593985abusebot-2.cloudsearch.cf sshd\[25222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.56 user=root	2019-10-19 22:35:32
101.99.80.99	attack	[ssh] SSH attack	2019-10-19 23:11:07
187.176.190.3	attackspambots	Automatic report - Port Scan Attack	2019-10-19 22:37:24
142.93.232.144	attackbotsspam	2019-10-19T14:38:21.951659shield sshd\[28521\]: Invalid user administrator from 142.93.232.144 port 39772 2019-10-19T14:38:21.955742shield sshd\[28521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.144 2019-10-19T14:38:23.270584shield sshd\[28521\]: Failed password for invalid user administrator from 142.93.232.144 port 39772 ssh2 2019-10-19T14:43:57.214841shield sshd\[30177\]: Invalid user ahmad from 142.93.232.144 port 38948 2019-10-19T14:43:57.219040shield sshd\[30177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.144	2019-10-19 22:48:48
178.210.50.114	attackspambots	Unauthorized connection attempt from IP address 178.210.50.114 on Port 445(SMB)	2019-10-19 22:50:38
61.153.61.50	attackspambots	Unauthorized connection attempt from IP address 61.153.61.50 on Port 445(SMB)	2019-10-19 22:57:27
65.155.170.34	attackspambots	Unauthorized connection attempt from IP address 65.155.170.34 on Port 445(SMB)	2019-10-19 23:12:51
62.97.35.188	attackspam	Unauthorized connection attempt from IP address 62.97.35.188 on Port 445(SMB)	2019-10-19 22:58:15
163.172.13.168	attackbots	Oct 19 12:02:18 work-partkepr sshd\[7200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.13.168 user=root Oct 19 12:02:20 work-partkepr sshd\[7200\]: Failed password for root from 163.172.13.168 port 33041 ssh2 ...	2019-10-19 22:43:29
51.91.218.189	attack	Oct 19 16:03:23 MK-Soft-VM5 sshd[10435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.218.189 Oct 19 16:03:25 MK-Soft-VM5 sshd[10435]: Failed password for invalid user Betong-ER from 51.91.218.189 port 58424 ssh2 ...	2019-10-19 22:44:37
222.186.180.6	attackspam	SSH Brute Force, server-1 sshd[28516]: Failed password for root from 222.186.180.6 port 51398 ssh2	2019-10-19 22:36:47
157.245.205.236	attackbotsspam	Oct 19 15:56:00 meumeu sshd[4491]: Failed password for root from 157.245.205.236 port 44134 ssh2 Oct 19 16:00:57 meumeu sshd[5489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.205.236 Oct 19 16:00:59 meumeu sshd[5489]: Failed password for invalid user kuroiwa from 157.245.205.236 port 56180 ssh2 ...	2019-10-19 22:34:46
222.65.177.128	attackbots	Unauthorized connection attempt from IP address 222.65.177.128 on Port 445(SMB)	2019-10-19 22:45:56
106.51.39.200	attackspam	Unauthorized connection attempt from IP address 106.51.39.200 on Port 445(SMB)	2019-10-19 22:38:39
185.14.148.66	attackbotsspam	postfix	2019-10-19 23:03:52

最近上报的IP列表

61.57.64.252	59.126.237.227	59.126.199.157	49.147.137.169
47.91.105.52	37.6.126.57	36.239.32.109	36.231.49.18
35.190.85.141	27.50.160.100	5.43.71.226	3.11.183.67
1.59.138.7	197.166.103.217	193.29.13.27	186.230.40.110
168.194.229.55	119.49.243.237	113.23.3.4	110.153.74.29