119.45.243.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-09-19T12:49:14.091341static.108.197.76.144.clients.your-server.de sshd[15233]: Invalid user test1 from 119.45.243.54 2020-09-19T12:49:14.094167static.108.197.76.144.clients.your-server.de sshd[15233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54 2020-09-19T12:49:16.158452static.108.197.76.144.clients.your-server.de sshd[15233]: Failed password for invalid user test1 from 119.45.243.54 port 35780 ssh2 2020-09-19T12:54:43.191916static.108.197.76.144.clients.your-server.de sshd[15812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54 user=r.r 2020-09-19T12:54:45.751200static.108.197.76.144.clients.your-server.de sshd[15812]: Failed password for r.r from 119.45.243.54 port 59996 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=119.45.243.54	2020-09-21 03:25:10
attack	2020-09-19T12:49:14.091341static.108.197.76.144.clients.your-server.de sshd[15233]: Invalid user test1 from 119.45.243.54 2020-09-19T12:49:14.094167static.108.197.76.144.clients.your-server.de sshd[15233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54 2020-09-19T12:49:16.158452static.108.197.76.144.clients.your-server.de sshd[15233]: Failed password for invalid user test1 from 119.45.243.54 port 35780 ssh2 2020-09-19T12:54:43.191916static.108.197.76.144.clients.your-server.de sshd[15812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54 user=r.r 2020-09-19T12:54:45.751200static.108.197.76.144.clients.your-server.de sshd[15812]: Failed password for r.r from 119.45.243.54 port 59996 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=119.45.243.54	2020-09-20 19:31:38

Type

Details

Datetime

attack

2020-09-19T12:49:14.091341static.108.197.76.144.clients.your-server.de sshd[15233]: Invalid user test1 from 119.45.243.54
2020-09-19T12:49:14.094167static.108.197.76.144.clients.your-server.de sshd[15233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54
2020-09-19T12:49:16.158452static.108.197.76.144.clients.your-server.de sshd[15233]: Failed password for invalid user test1 from 119.45.243.54 port 35780 ssh2
2020-09-19T12:54:43.191916static.108.197.76.144.clients.your-server.de sshd[15812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54  user=r.r
2020-09-19T12:54:45.751200static.108.197.76.144.clients.your-server.de sshd[15812]: Failed password for r.r from 119.45.243.54 port 59996 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.45.243.54

2020-09-21 03:25:10

attack

2020-09-19T12:49:14.091341static.108.197.76.144.clients.your-server.de sshd[15233]: Invalid user test1 from 119.45.243.54
2020-09-19T12:49:14.094167static.108.197.76.144.clients.your-server.de sshd[15233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54
2020-09-19T12:49:16.158452static.108.197.76.144.clients.your-server.de sshd[15233]: Failed password for invalid user test1 from 119.45.243.54 port 35780 ssh2
2020-09-19T12:54:43.191916static.108.197.76.144.clients.your-server.de sshd[15812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.243.54  user=r.r
2020-09-19T12:54:45.751200static.108.197.76.144.clients.your-server.de sshd[15812]: Failed password for r.r from 119.45.243.54 port 59996 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.45.243.54

2020-09-20 19:31:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.45.243.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25085
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.45.243.54.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092000 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 20 19:31:34 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 54.243.45.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.243.45.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
196.52.43.58	attackbots	Unauthorized connection attempt detected from IP address 196.52.43.58 to port 6002 [J]	2020-01-05 00:40:10
198.211.123.196	attackbotsspam	Unauthorized connection attempt detected from IP address 198.211.123.196 to port 2220 [J]	2020-01-05 00:39:36
69.94.158.95	attack	Jan 4 15:03:23 grey postfix/smtpd\[5563\]: NOQUEUE: reject: RCPT from cheap.swingthelamp.com\[69.94.158.95\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.95\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.95\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-05 00:58:20
91.223.136.238	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-05 00:57:11
103.133.215.101	attack	Automatic report - XMLRPC Attack	2020-01-05 01:17:57
103.213.2.36	attackspam	Unauthorized connection attempt detected from IP address 103.213.2.36 to port 23 [J]	2020-01-05 00:59:54
103.86.43.27	attackspambots	Automatic report - XMLRPC Attack	2020-01-05 00:50:03
46.38.144.17	attack	Jan 4 17:32:30 relay postfix/smtpd\[30128\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 4 17:33:14 relay postfix/smtpd\[30606\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 4 17:33:59 relay postfix/smtpd\[30128\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 4 17:34:42 relay postfix/smtpd\[22923\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 4 17:35:29 relay postfix/smtpd\[30650\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-05 00:44:12
51.38.238.165	attackbots	Unauthorized connection attempt detected from IP address 51.38.238.165 to port 2220 [J]	2020-01-05 01:15:12
167.71.87.56	attackbotsspam	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-01-05 01:06:57
218.92.0.179	attackbotsspam	Jan 4 14:17:06 firewall sshd[27888]: Failed password for root from 218.92.0.179 port 5140 ssh2 Jan 4 14:17:10 firewall sshd[27888]: Failed password for root from 218.92.0.179 port 5140 ssh2 Jan 4 14:17:13 firewall sshd[27888]: Failed password for root from 218.92.0.179 port 5140 ssh2 ...	2020-01-05 01:18:20
103.255.234.121	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-05 01:07:46
196.43.196.108	attackbotsspam	Unauthorized connection attempt detected from IP address 196.43.196.108 to port 2220 [J]	2020-01-05 01:11:01
106.111.240.248	attack	Unauthorized connection attempt detected from IP address 106.111.240.248 to port 1433 [J]	2020-01-05 01:14:46
144.91.91.116	attackspam	firewall-block, port(s): 2004/tcp	2020-01-05 00:49:35

Recently Reported IPs

5.74.139.34	22.134.79.80	245.19.135.89	227.88.45.208
78.115.138.57	23.102.154.52	94.129.247.215	201.112.51.250
121.174.222.174	100.133.207.171	130.181.155.77	31.48.183.21
119.45.58.111	220.58.62.146	201.105.45.190	148.103.100.67
183.174.170.32	94.214.168.48	27.5.44.109	129.176.96.107