Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Oct  7 14:15:11 marvibiene sshd[330]: Failed password for root from 119.45.48.108 port 49228 ssh2
Oct  7 14:19:43 marvibiene sshd[647]: Failed password for root from 119.45.48.108 port 41834 ssh2
2020-10-07 23:40:59
attackbotsspam
Oct  7 09:03:43 fhem-rasp sshd[11112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.48.108  user=root
Oct  7 09:03:45 fhem-rasp sshd[11112]: Failed password for root from 119.45.48.108 port 53290 ssh2
...
2020-10-07 15:45:19
attackbots
2020-09-28T03:58:27.156000vps773228.ovh.net sshd[22395]: Failed password for invalid user info from 119.45.48.108 port 50336 ssh2
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:54.287450vps773228.ovh.net sshd[22442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.48.108
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:56.139778vps773228.ovh.net sshd[22442]: Failed password for invalid user trung from 119.45.48.108 port 52320 ssh2
...
2020-09-29 04:01:15
attackspambots
2020-09-28T03:58:27.156000vps773228.ovh.net sshd[22395]: Failed password for invalid user info from 119.45.48.108 port 50336 ssh2
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:54.287450vps773228.ovh.net sshd[22442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.48.108
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:56.139778vps773228.ovh.net sshd[22442]: Failed password for invalid user trung from 119.45.48.108 port 52320 ssh2
...
2020-09-28 20:14:48
attack
2020-09-28T03:58:27.156000vps773228.ovh.net sshd[22395]: Failed password for invalid user info from 119.45.48.108 port 50336 ssh2
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:54.287450vps773228.ovh.net sshd[22442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.48.108
2020-09-28T04:03:54.267254vps773228.ovh.net sshd[22442]: Invalid user trung from 119.45.48.108 port 52320
2020-09-28T04:03:56.139778vps773228.ovh.net sshd[22442]: Failed password for invalid user trung from 119.45.48.108 port 52320 ssh2
...
2020-09-28 12:19:13
attack
Sep 22 21:47:00 r.ca sshd[6028]: Failed password for root from 119.45.48.108 port 56314 ssh2
2020-09-23 19:46:59
attackspambots
Sep 22 21:47:00 r.ca sshd[6028]: Failed password for root from 119.45.48.108 port 56314 ssh2
2020-09-23 12:06:45
attack
2020-09-22T22:10:54.834520ollin.zadara.org sshd[1012811]: Invalid user wh from 119.45.48.108 port 37428
2020-09-22T22:10:57.441192ollin.zadara.org sshd[1012811]: Failed password for invalid user wh from 119.45.48.108 port 37428 ssh2
...
2020-09-23 03:51:30
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.45.48.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.45.48.108.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092201 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 03:51:26 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 108.48.45.119.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 108.48.45.119.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
14.253.174.41 attack
Unauthorized connection attempt from IP address 14.253.174.41 on Port 445(SMB)
2020-08-19 19:53:17
59.127.238.5 attackbots
 TCP (SYN) 59.127.238.5:7600 -> port 23, len 40
2020-08-19 20:12:53
184.68.234.110 attackspambots
Aug 19 05:30:13 ovpn sshd\[5714\]: Invalid user test3 from 184.68.234.110
Aug 19 05:30:13 ovpn sshd\[5714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.68.234.110
Aug 19 05:30:15 ovpn sshd\[5714\]: Failed password for invalid user test3 from 184.68.234.110 port 34567 ssh2
Aug 19 05:45:53 ovpn sshd\[9502\]: Invalid user connect from 184.68.234.110
Aug 19 05:45:53 ovpn sshd\[9502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.68.234.110
2020-08-19 20:05:30
113.178.250.178 attack
Attempted connection to port 445.
2020-08-19 20:18:52
159.65.180.64 attack
Aug 19 04:59:54 dignus sshd[19409]: Failed password for invalid user rit from 159.65.180.64 port 57374 ssh2
Aug 19 05:03:42 dignus sshd[19915]: Invalid user moises from 159.65.180.64 port 36782
Aug 19 05:03:42 dignus sshd[19915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.180.64
Aug 19 05:03:44 dignus sshd[19915]: Failed password for invalid user moises from 159.65.180.64 port 36782 ssh2
Aug 19 05:07:32 dignus sshd[20388]: Invalid user lb from 159.65.180.64 port 44428
...
2020-08-19 20:23:59
85.117.60.115 attackbots
Unauthorized connection attempt from IP address 85.117.60.115 on Port 445(SMB)
2020-08-19 20:33:33
14.252.42.171 attack
Attempted connection to port 445.
2020-08-19 20:12:13
37.187.124.209 attackbotsspam
Invalid user minecraft from 37.187.124.209 port 37555
2020-08-19 20:25:55
51.77.200.4 attackbotsspam
Invalid user ethan from 51.77.200.4 port 45350
2020-08-19 20:20:14
124.29.198.172 attackbotsspam
Unauthorized connection attempt from IP address 124.29.198.172 on Port 445(SMB)
2020-08-19 19:51:47
171.97.20.155 attack
Unauthorized connection attempt from IP address 171.97.20.155 on Port 445(SMB)
2020-08-19 19:59:56
165.22.209.132 attackbots
Attempt to hack Wordpress Login, XMLRPC or other login
2020-08-19 19:57:31
139.155.35.220 attack
Aug 19 14:32:15 nextcloud sshd\[13486\]: Invalid user gbc from 139.155.35.220
Aug 19 14:32:15 nextcloud sshd\[13486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.35.220
Aug 19 14:32:17 nextcloud sshd\[13486\]: Failed password for invalid user gbc from 139.155.35.220 port 60228 ssh2
2020-08-19 20:34:52
49.234.47.124 attack
sshd: Failed password for invalid user .... from 49.234.47.124 port 34306 ssh2 (4 attempts)
2020-08-19 20:31:32
81.12.5.186 attackspambots
Unauthorized connection attempt from IP address 81.12.5.186 on Port 445(SMB)
2020-08-19 19:54:29

Recently Reported IPs

45.196.57.31 33.163.53.174 91.225.117.19 109.128.112.195
30.121.49.60 108.107.253.205 210.142.20.144 186.235.211.94
207.79.11.30 94.126.36.115 94.190.217.127 130.89.108.219
211.177.30.59 217.127.19.8 111.254.93.147 30.42.61.175
136.51.11.0 37.153.79.96 183.94.170.209 92.245.5.102