103.45.149.200

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shenzhen Qianhai bird cloud computing Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Jun 29 20:47:16 ajax sshd[15574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.200 Jun 29 20:47:19 ajax sshd[15574]: Failed password for invalid user stop from 103.45.149.200 port 53080 ssh2	2020-06-30 06:52:44
attackspambots	Invalid user file from 103.45.149.200 port 37388	2020-06-29 13:13:17
attack	Brute-force attempt banned	2020-06-28 07:06:16
attackbots	Jun 15 20:44:25 fwservlet sshd[20730]: Invalid user tahir from 103.45.149.200 Jun 15 20:44:25 fwservlet sshd[20730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.200 Jun 15 20:44:27 fwservlet sshd[20730]: Failed password for invalid user tahir from 103.45.149.200 port 57374 ssh2 Jun 15 20:44:27 fwservlet sshd[20730]: Received disconnect from 103.45.149.200 port 57374:11: Bye Bye [preauth] Jun 15 20:44:27 fwservlet sshd[20730]: Disconnected from 103.45.149.200 port 57374 [preauth] Jun 15 20:57:45 fwservlet sshd[21129]: Invalid user wangwei from 103.45.149.200 Jun 15 20:57:45 fwservlet sshd[21129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.200 Jun 15 20:57:47 fwservlet sshd[21129]: Failed password for invalid user wangwei from 103.45.149.200 port 48722 ssh2 Jun 15 20:57:47 fwservlet sshd[21129]: Received disconnect from 103.45.149.200 port 48722:11: Bye Bye [prea........ -------------------------------	2020-06-16 06:20:51

Comments on same subnet:

IP	Type	Details	Datetime
103.45.149.101	attackbotsspam	Invalid user admin from 103.45.149.101 port 57892	2020-06-18 04:06:15
103.45.149.63	attackbots	20 attempts against mh-ssh on echoip	2020-06-16 20:29:04
103.45.149.67	attackspam	Jun 8 14:07:43 ns382633 sshd\[9733\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.67 user=root Jun 8 14:07:45 ns382633 sshd\[9733\]: Failed password for root from 103.45.149.67 port 53958 ssh2 Jun 8 14:27:25 ns382633 sshd\[13622\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.67 user=root Jun 8 14:27:27 ns382633 sshd\[13622\]: Failed password for root from 103.45.149.67 port 40090 ssh2 Jun 8 14:30:37 ns382633 sshd\[14367\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.67 user=root	2020-06-08 22:23:42
103.45.149.67	attackbotsspam	Jun 3 15:57:31 PorscheCustomer sshd[9391]: Failed password for root from 103.45.149.67 port 34414 ssh2 Jun 3 16:01:38 PorscheCustomer sshd[9525]: Failed password for root from 103.45.149.67 port 52868 ssh2 ...	2020-06-03 22:52:03
103.45.149.67	attack	SSH Bruteforce attack	2020-05-31 18:35:49
103.45.149.71	attack	May 27 22:30:44 minden010 sshd[13887]: Failed password for root from 103.45.149.71 port 47284 ssh2 May 27 22:36:34 minden010 sshd[15960]: Failed password for root from 103.45.149.71 port 36418 ssh2 ...	2020-05-28 05:21:09
103.45.149.67	attackspambots	$f2bV_matches	2020-05-27 02:35:30
103.45.149.22	attackspambots	Forbidden directory scan :: 2019/10/17 22:46:24 [error] 1095#1095: *308890 access forbidden by rule, client: 103.45.149.22, server: [censored_1], request: "GET /.../exchange-2010-how-to-configure-storage-quotas HTTP/1.1", host: "www.[censored_1]"	2019-10-17 20:18:58
103.45.149.216	attackspam	Sep 7 13:52:33 bouncer sshd\[21330\]: Invalid user 1q2w3e4r from 103.45.149.216 port 55364 Sep 7 13:52:33 bouncer sshd\[21330\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 Sep 7 13:52:35 bouncer sshd\[21330\]: Failed password for invalid user 1q2w3e4r from 103.45.149.216 port 55364 ssh2 ...	2019-09-07 20:46:48
103.45.149.216	attackbotsspam	2019-09-05T21:11:53.772133abusebot-2.cloudsearch.cf sshd\[20304\]: Invalid user teamspeak3 from 103.45.149.216 port 49577	2019-09-06 05:40:46
103.45.149.216	attackspam	Sep 3 15:06:49 dedicated sshd[13617]: Invalid user postgres from 103.45.149.216 port 53476	2019-09-03 21:14:14
103.45.149.216	attack	Aug 30 12:40:13 lcl-usvr-01 sshd[7629]: Invalid user celia from 103.45.149.216 Aug 30 12:40:13 lcl-usvr-01 sshd[7629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 Aug 30 12:40:13 lcl-usvr-01 sshd[7629]: Invalid user celia from 103.45.149.216 Aug 30 12:40:15 lcl-usvr-01 sshd[7629]: Failed password for invalid user celia from 103.45.149.216 port 49791 ssh2 Aug 30 12:45:54 lcl-usvr-01 sshd[9215]: Invalid user dresden from 103.45.149.216	2019-08-30 17:06:11
103.45.149.216	attack	Aug 23 07:35:54 MK-Soft-VM7 sshd\[29656\]: Invalid user harrison from 103.45.149.216 port 34648 Aug 23 07:35:54 MK-Soft-VM7 sshd\[29656\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 Aug 23 07:35:55 MK-Soft-VM7 sshd\[29656\]: Failed password for invalid user harrison from 103.45.149.216 port 34648 ssh2 ...	2019-08-23 16:05:26
103.45.149.216	attack	Aug 22 05:22:15 lcl-usvr-02 sshd[25068]: Invalid user dovecot from 103.45.149.216 port 43494 Aug 22 05:22:15 lcl-usvr-02 sshd[25068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 Aug 22 05:22:15 lcl-usvr-02 sshd[25068]: Invalid user dovecot from 103.45.149.216 port 43494 Aug 22 05:22:17 lcl-usvr-02 sshd[25068]: Failed password for invalid user dovecot from 103.45.149.216 port 43494 ssh2 Aug 22 05:28:12 lcl-usvr-02 sshd[26441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.149.216 user=root Aug 22 05:28:14 lcl-usvr-02 sshd[26441]: Failed password for root from 103.45.149.216 port 42295 ssh2 ...	2019-08-22 07:56:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.45.149.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20479
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.45.149.200.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061502 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 16 06:20:48 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 200.149.45.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 200.149.45.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.102.248	attackbotsspam	Sep 21 14:30:03 server sshd[28237]: Failed password for invalid user ty from 118.24.102.248 port 33042 ssh2 Sep 21 15:10:42 server sshd[33473]: Failed password for invalid user sonos from 118.24.102.248 port 34836 ssh2 Sep 21 15:14:49 server sshd[34013]: Failed password for root from 118.24.102.248 port 37504 ssh2	2019-09-22 00:14:12
46.38.144.57	attack	Sep 21 17:41:02 webserver postfix/smtpd\[12788\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:42:19 webserver postfix/smtpd\[14583\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:43:36 webserver postfix/smtpd\[12788\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:44:52 webserver postfix/smtpd\[12788\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:46:09 webserver postfix/smtpd\[14457\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-21 23:47:13
77.247.108.220	attack	\[2019-09-21 11:29:00\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password \[2019-09-21 11:29:00\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:00.822-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/6796",Challenge="502bfb2e",ReceivedChallenge="502bfb2e",ReceivedHash="6e44134dea64af6f0c8a48bfd0ac1362" \[2019-09-21 11:29:01\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password \[2019-09-21 11:29:01\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:01.030-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c409238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-09-22 00:09:55
153.36.236.35	attackspam	Sep 21 17:28:01 cvbnet sshd[26505]: Failed password for root from 153.36.236.35 port 20629 ssh2 Sep 21 17:28:03 cvbnet sshd[26505]: Failed password for root from 153.36.236.35 port 20629 ssh2	2019-09-21 23:35:49
118.69.73.241	attack	Sep 21 17:56:32 mail sshd\[12192\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.73.241 user=root Sep 21 17:56:34 mail sshd\[12192\]: Failed password for root from 118.69.73.241 port 37142 ssh2 Sep 21 17:57:01 mail sshd\[12220\]: Invalid user guest from 118.69.73.241 ...	2019-09-22 00:15:10
106.75.240.46	attackbotsspam	Sep 21 15:06:58 eventyay sshd[22339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.46 Sep 21 15:07:00 eventyay sshd[22339]: Failed password for invalid user admin from 106.75.240.46 port 40340 ssh2 Sep 21 15:12:20 eventyay sshd[22452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.46 ...	2019-09-21 23:40:59
51.75.254.196	attackspambots	Sep 21 19:52:13 itv-usvr-02 sshd[28259]: Invalid user geekadmin from 51.75.254.196 port 13749 Sep 21 19:52:13 itv-usvr-02 sshd[28259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.254.196 Sep 21 19:52:13 itv-usvr-02 sshd[28259]: Invalid user geekadmin from 51.75.254.196 port 13749 Sep 21 19:52:15 itv-usvr-02 sshd[28259]: Failed password for invalid user geekadmin from 51.75.254.196 port 13749 ssh2 Sep 21 19:55:58 itv-usvr-02 sshd[28273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.254.196 user=root Sep 21 19:56:01 itv-usvr-02 sshd[28273]: Failed password for root from 51.75.254.196 port 55959 ssh2	2019-09-21 23:56:16
198.245.63.151	attackbotsspam	Sep 21 06:02:53 auw2 sshd\[12241\]: Invalid user condor from 198.245.63.151 Sep 21 06:02:53 auw2 sshd\[12241\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns502909.ip-198-245-63.net Sep 21 06:02:55 auw2 sshd\[12241\]: Failed password for invalid user condor from 198.245.63.151 port 40862 ssh2 Sep 21 06:06:52 auw2 sshd\[12624\]: Invalid user fabio from 198.245.63.151 Sep 21 06:06:52 auw2 sshd\[12624\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns502909.ip-198-245-63.net	2019-09-22 00:21:41
124.228.92.33	attack	FTP: login Brute Force attempt, PTR: PTR record not found	2019-09-22 00:18:36
220.85.233.145	attack	Sep 21 10:54:24 ny01 sshd[17337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145 Sep 21 10:54:26 ny01 sshd[17337]: Failed password for invalid user xdn from 220.85.233.145 port 38680 ssh2 Sep 21 10:59:34 ny01 sshd[18791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145	2019-09-22 00:13:03
51.174.116.225	attack	ssh failed login	2019-09-21 23:54:06
218.235.29.87	attack	Sep 21 17:38:46 vps01 sshd[6627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.235.29.87 Sep 21 17:38:48 vps01 sshd[6627]: Failed password for invalid user biable from 218.235.29.87 port 45652 ssh2	2019-09-21 23:42:14
181.129.14.218	attackbotsspam	$f2bV_matches	2019-09-21 23:43:23
213.138.73.250	attack	Sep 21 05:01:19 php1 sshd\[4476\]: Invalid user hdduser from 213.138.73.250 Sep 21 05:01:19 php1 sshd\[4476\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.138.73.250 Sep 21 05:01:21 php1 sshd\[4476\]: Failed password for invalid user hdduser from 213.138.73.250 port 42701 ssh2 Sep 21 05:06:01 php1 sshd\[5052\]: Invalid user MSI from 213.138.73.250 Sep 21 05:06:01 php1 sshd\[5052\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.138.73.250	2019-09-21 23:53:32
88.10.116.49	attackbotsspam	Automatic report - Port Scan Attack	2019-09-22 00:11:31

Recently Reported IPs

75.72.132.210	39.96.32.187	76.88.144.91	219.15.52.197
73.77.83.127	89.83.96.141	139.208.127.246	188.81.22.0
119.121.167.192	79.145.179.23	66.128.32.192	35.223.4.188
78.149.188.233	65.3.64.88	72.191.197.154	128.123.165.44
219.111.127.89	116.88.2.130	184.73.93.96	63.169.201.34