103.45.103.200

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shenzhen Qianhai bird cloud computing Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Port Scan detected from 103.45.103.200 (CN/China/-). 4 hits in the last 35 seconds	2019-07-20 16:37:10

Comments on same subnet:

IP	Type	Details	Datetime
103.45.103.214	attackspam	May 6 22:42:40 mout sshd[19158]: Invalid user test from 103.45.103.214 port 59530	2020-05-07 05:03:00
103.45.103.236	attackspambots	Unauthorized connection attempt detected from IP address 103.45.103.236 to port 80 [J]	2020-01-31 03:00:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.45.103.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31003
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.45.103.200.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072000 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 20 16:37:02 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 200.103.45.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 200.103.45.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.54.255.11	attackbotsspam	Jul 4 14:02:41 server sshd[10501]: Failed password for invalid user lfs from 106.54.255.11 port 56770 ssh2 Jul 4 14:06:29 server sshd[13658]: Failed password for invalid user test from 106.54.255.11 port 44960 ssh2 Jul 4 14:14:28 server sshd[19968]: Failed password for invalid user rust from 106.54.255.11 port 49584 ssh2	2020-07-04 20:16:32
213.202.228.43	attackspam	20 attempts against mh-ssh on sea	2020-07-04 19:57:28
139.162.79.87	attackbots	Unauthorized connection	2020-07-04 19:38:42
142.93.215.19	attack	Jul 4 12:10:51 master sshd[4731]: Failed password for invalid user userftp from 142.93.215.19 port 49222 ssh2	2020-07-04 20:11:03
211.43.13.243	attack	Jul 4 19:14:24 webhost01 sshd[30158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.43.13.243 Jul 4 19:14:26 webhost01 sshd[30158]: Failed password for invalid user bem from 211.43.13.243 port 39320 ssh2 ...	2020-07-04 20:18:01
37.49.230.133	attack	2020-07-04T07:04:36.177567na-vps210223 sshd[31258]: Failed password for root from 37.49.230.133 port 43282 ssh2 2020-07-04T07:04:47.502233na-vps210223 sshd[31780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.230.133 user=root 2020-07-04T07:04:49.413560na-vps210223 sshd[31780]: Failed password for root from 37.49.230.133 port 35802 ssh2 2020-07-04T07:05:00.874234na-vps210223 sshd[32302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.230.133 user=root 2020-07-04T07:05:03.237113na-vps210223 sshd[32302]: Failed password for root from 37.49.230.133 port 56350 ssh2 ...	2020-07-04 19:35:23
191.178.84.239	attack	Automatic report - Banned IP Access	2020-07-04 19:43:30
186.215.130.159	attack	(imapd) Failed IMAP login from 186.215.130.159 (BR/Brazil/idealizaurbanismo.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 4 13:09:56 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=186.215.130.159, lip=5.63.12.44, TLS, session=	2020-07-04 19:34:00
40.87.107.207	attackbots	(pop3d) Failed POP3 login from 40.87.107.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 4 11:46:54 ir1 dovecot[2885757]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=40.87.107.207, lip=5.63.12.44, session=	2020-07-04 19:47:09
218.60.56.122	attackbotsspam	400 BAD REQUEST	2020-07-04 20:10:47
199.59.62.236	attack	TCP (SYN) 199.59.62.236:61000 -> port 22, len 40	2020-07-04 20:09:02
51.91.125.136	attackbots	Jul 3 23:04:58 web9 sshd\[25499\]: Invalid user sic from 51.91.125.136 Jul 3 23:04:58 web9 sshd\[25499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.125.136 Jul 3 23:05:00 web9 sshd\[25499\]: Failed password for invalid user sic from 51.91.125.136 port 54928 ssh2 Jul 3 23:08:04 web9 sshd\[25955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.125.136 user=root Jul 3 23:08:06 web9 sshd\[25955\]: Failed password for root from 51.91.125.136 port 50942 ssh2	2020-07-04 19:36:15
222.186.180.223	attack	Jul 4 14:03:35 vps sshd[277065]: Failed password for root from 222.186.180.223 port 4012 ssh2 Jul 4 14:03:39 vps sshd[277065]: Failed password for root from 222.186.180.223 port 4012 ssh2 Jul 4 14:03:41 vps sshd[277065]: Failed password for root from 222.186.180.223 port 4012 ssh2 Jul 4 14:03:44 vps sshd[277065]: Failed password for root from 222.186.180.223 port 4012 ssh2 Jul 4 14:03:47 vps sshd[277065]: Failed password for root from 222.186.180.223 port 4012 ssh2 ...	2020-07-04 20:08:39
39.99.220.7	attackbotsspam	[H1] Blocked by UFW	2020-07-04 19:48:30
1.192.94.61	attackbotsspam	TCP (SYN) 1.192.94.61:57431 -> port 29825, len 44	2020-07-04 19:58:27

Recently Reported IPs

178.161.5.234	14.207.202.228	47.91.108.33	71.78.55.236
200.3.21.91	186.216.71.70	5.54.182.243	118.170.151.24
189.89.217.124	223.221.206.177	202.95.136.26	37.39.67.232
185.143.221.57	179.189.190.69	186.84.88.94	131.161.69.2
189.89.215.117	5.16.70.207	185.220.31.63	112.166.151.159