106.45.1.219 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Ningxia Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt detected from IP address 106.45.1.219 to port 8080 [T]	2020-01-27 14:48:32

Comments on same subnet:

IP	Type	Details	Datetime
106.45.172.230	attackbots	Invalid user server from 106.45.172.230 port 16352	2020-08-28 01:38:18
106.45.1.234	attackbotsspam	Web Server Scan. RayID: 594576a0de09d38e, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN	2020-05-21 04:14:02
106.45.1.98	attackbotsspam	Scanning	2020-05-06 01:26:48
106.45.1.68	attackspambots	Unauthorized connection attempt detected from IP address 106.45.1.68 to port 8118 [J]	2020-03-02 18:44:45
106.45.1.241	attackspam	Unauthorized connection attempt detected from IP address 106.45.1.241 to port 80	2020-02-16 02:12:18
106.45.1.39	attack	The IP has triggered Cloudflare WAF. CF-Ray: 560547b4df36eae7 \| WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-02-06 04:50:32
106.45.1.141	attackspam	Unauthorized connection attempt detected from IP address 106.45.1.141 to port 80 [J]	2020-02-05 09:41:40
106.45.1.5	attackspambots	Unauthorized connection attempt detected from IP address 106.45.1.5 to port 8080 [J]	2020-01-31 22:37:30
106.45.10.142	attack	Unauthorized connection attempt detected from IP address 106.45.10.142 to port 23 [T]	2020-01-30 08:46:48
106.45.1.20	attackspambots	Unauthorized connection attempt detected from IP address 106.45.1.20 to port 3979 [T]	2020-01-29 17:45:05
106.45.1.241	attackbots	Unauthorized connection attempt detected from IP address 106.45.1.241 to port 808 [J]	2020-01-27 15:16:25
106.45.1.102	attack	Unauthorized connection attempt detected from IP address 106.45.1.102 to port 8118 [J]	2020-01-22 08:36:39
106.45.1.37	attackbotsspam	Unauthorized connection attempt detected from IP address 106.45.1.37 to port 8123 [J]	2020-01-22 08:12:04
106.45.1.181	attackspambots	Unauthorized connection attempt detected from IP address 106.45.1.181 to port 80 [J]	2020-01-19 16:05:34
106.45.1.50	attackspambots	Unauthorized connection attempt detected from IP address 106.45.1.50 to port 8899 [T]	2020-01-14 20:40:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.45.1.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21726
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.45.1.219.			IN	A

;; AUTHORITY SECTION:
.			359	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012700 1800 900 604800 86400

;; Query time: 128 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 14:48:28 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 219.1.45.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 219.1.45.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.156.24.43	attackspam	Sep 4 06:01:38 fr01 sshd[6622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.43 user=root Sep 4 06:01:41 fr01 sshd[6622]: Failed password for root from 36.156.24.43 port 53466 ssh2 ...	2019-09-04 12:03:44
222.186.15.101	attackbotsspam	Sep 4 06:56:27 site3 sshd\[72954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root Sep 4 06:56:29 site3 sshd\[72954\]: Failed password for root from 222.186.15.101 port 57564 ssh2 Sep 4 06:56:35 site3 sshd\[72956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root Sep 4 06:56:37 site3 sshd\[72956\]: Failed password for root from 222.186.15.101 port 43022 ssh2 Sep 4 06:56:44 site3 sshd\[72966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root ...	2019-09-04 12:01:23
50.126.95.22	attackspam	Sep 4 06:14:09 legacy sshd[8209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.126.95.22 Sep 4 06:14:11 legacy sshd[8209]: Failed password for invalid user locco from 50.126.95.22 port 35552 ssh2 Sep 4 06:18:21 legacy sshd[8288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.126.95.22 ...	2019-09-04 12:21:24
157.230.16.197	attackspam	Sep 4 05:41:21 markkoudstaal sshd[16996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.16.197 Sep 4 05:41:23 markkoudstaal sshd[16996]: Failed password for invalid user sirene from 157.230.16.197 port 41030 ssh2 Sep 4 05:45:17 markkoudstaal sshd[17366]: Failed password for sshd from 157.230.16.197 port 28697 ssh2	2019-09-04 11:48:29
90.173.78.53	attackbots	2019-09-03 22:29:46 H=(lrmmotors.it) [90.173.78.53]:56515 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-03 22:29:46 H=(lrmmotors.it) [90.173.78.53]:56515 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-03 22:29:47 H=(lrmmotors.it) [90.173.78.53]:56515 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-04 11:46:48
218.98.40.152	attackspambots	SSH Brute Force, server-1 sshd[27650]: Failed password for root from 218.98.40.152 port 46334 ssh2	2019-09-04 11:57:15
82.202.160.164	attackbots	2019-09-04T03:29:29Z - RDP login failed multiple times. (82.202.160.164)	2019-09-04 12:03:20
117.73.2.103	attackspambots	Sep 4 05:00:57 mail sshd\[437\]: Failed password for invalid user juan from 117.73.2.103 port 39552 ssh2 Sep 4 05:16:34 mail sshd\[710\]: Invalid user as from 117.73.2.103 port 60936 ...	2019-09-04 12:18:39
203.110.179.26	attackspambots	Sep 3 17:27:39 hiderm sshd\[27200\]: Invalid user zimbra from 203.110.179.26 Sep 3 17:27:39 hiderm sshd\[27200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.179.26 Sep 3 17:27:41 hiderm sshd\[27200\]: Failed password for invalid user zimbra from 203.110.179.26 port 59889 ssh2 Sep 3 17:29:48 hiderm sshd\[27386\]: Invalid user invite from 203.110.179.26 Sep 3 17:29:48 hiderm sshd\[27386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.179.26	2019-09-04 11:43:17
222.186.52.89	attackbots	Sep 4 05:52:36 Ubuntu-1404-trusty-64-minimal sshd\[30236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root Sep 4 05:52:38 Ubuntu-1404-trusty-64-minimal sshd\[30236\]: Failed password for root from 222.186.52.89 port 34492 ssh2 Sep 4 05:52:44 Ubuntu-1404-trusty-64-minimal sshd\[30271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root Sep 4 05:52:47 Ubuntu-1404-trusty-64-minimal sshd\[30271\]: Failed password for root from 222.186.52.89 port 24932 ssh2 Sep 4 05:52:53 Ubuntu-1404-trusty-64-minimal sshd\[30296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root	2019-09-04 12:05:34
183.60.21.113	attackspam	2019-09-04T05:38:32.368216mail01 postfix/smtpd[6915]: warning: unknown[183.60.21.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-09-04T05:38:40.168663mail01 postfix/smtpd[25713]: warning: unknown[183.60.21.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-09-04T05:38:53.440649mail01 postfix/smtpd[25713]: warning: unknown[183.60.21.113]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-09-04 11:47:27
190.151.105.182	attackbotsspam	Sep 3 23:49:07 plusreed sshd[9123]: Invalid user wuhao from 190.151.105.182 ...	2019-09-04 11:52:52
162.247.74.200	attackbotsspam	Automated report - ssh fail2ban: Sep 4 06:09:14 wrong password, user=root, port=60720, ssh2 Sep 4 06:09:17 wrong password, user=root, port=60720, ssh2 Sep 4 06:09:20 wrong password, user=root, port=60720, ssh2 Sep 4 06:09:23 wrong password, user=root, port=60720, ssh2	2019-09-04 12:18:21
78.188.214.48	attack	" "	2019-09-04 12:10:23
222.175.126.74	attack	Sep 3 18:01:12 hcbb sshd\[28565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.175.126.74 user=root Sep 3 18:01:14 hcbb sshd\[28565\]: Failed password for root from 222.175.126.74 port 35754 ssh2 Sep 3 18:05:45 hcbb sshd\[28928\]: Invalid user sharp from 222.175.126.74 Sep 3 18:05:45 hcbb sshd\[28928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.175.126.74 Sep 3 18:05:47 hcbb sshd\[28928\]: Failed password for invalid user sharp from 222.175.126.74 port 56713 ssh2	2019-09-04 12:24:10

Recently Reported IPs

120.99.40.165	125.48.35.146	37.204.144.53	212.45.241.184
240.140.164.0	27.224.136.188	188.2.60.15	76.33.218.198
15.124.130.214	162.122.31.37	2.49.144.82	220.141.55.140
220.132.1.64	212.77.138.155	62.233.255.121	200.194.12.37
200.146.248.82	200.52.61.16	199.189.230.133	196.75.156.17