45.115.243.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Ahon Information Technology Co. Limited

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Port probing on unauthorized port 1433	2020-04-29 06:30:26
attackbotsspam	unauthorized connection attempt	2020-02-04 18:40:42

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.115.243.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33029
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.115.243.34.			IN	A

;; AUTHORITY SECTION:
.			462	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 134 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 18:40:36 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 34.243.115.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.243.115.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
40.122.24.52	attack	Jun 23 09:36:53 root sshd[27779]: Invalid user jtsai from 40.122.24.52 ...	2020-06-23 14:45:26
118.24.54.178	attackspam	SSH invalid-user multiple login try	2020-06-23 14:48:07
185.220.102.4	attackbots	2020-06-22 22:54:47.872912-0500 localhost sshd[93612]: Failed password for root from 185.220.102.4 port 46185 ssh2	2020-06-23 14:46:34
129.146.19.86	attackspambots	"Unauthorized connection attempt on SSHD detected"	2020-06-23 15:07:57
89.12.92.30	attack	Jun 23 05:55:15 sip sshd[17401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.12.92.30 Jun 23 05:55:15 sip sshd[17402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.12.92.30 Jun 23 05:55:16 sip sshd[17401]: Failed password for invalid user pi from 89.12.92.30 port 38418 ssh2 Jun 23 05:55:16 sip sshd[17402]: Failed password for invalid user pi from 89.12.92.30 port 38416 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.12.92.30	2020-06-23 14:38:00
192.241.224.229	attackbots	Port Scan detected! ...	2020-06-23 14:46:57
206.189.18.40	attackbotsspam	Jun 23 05:50:06 mail sshd\[4094\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.18.40 user=root Jun 23 05:50:08 mail sshd\[4094\]: Failed password for root from 206.189.18.40 port 56816 ssh2 Jun 23 05:54:55 mail sshd\[4507\]: Invalid user hh from 206.189.18.40 Jun 23 05:54:55 mail sshd\[4507\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.18.40 Jun 23 05:54:57 mail sshd\[4507\]: Failed password for invalid user hh from 206.189.18.40 port 41174 ssh2 ...	2020-06-23 14:51:03
36.67.248.206	attackspam	Jun 23 03:54:59 *** sshd[22978]: User root from 36.67.248.206 not allowed because not listed in AllowUsers	2020-06-23 14:47:37
161.35.77.82	attackbots	k+ssh-bruteforce	2020-06-23 14:43:13
103.145.12.176	attack	[2020-06-23 02:59:56] NOTICE[1273] chan_sip.c: Registration from '"812" ' failed for '103.145.12.176:5145' - Wrong password [2020-06-23 02:59:56] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-23T02:59:56.992-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="812",SessionID="0x7f31c02adcc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.176/5145",Challenge="2462f3e9",ReceivedChallenge="2462f3e9",ReceivedHash="63655bbe5ea9d0409c2b47615070627b" [2020-06-23 02:59:57] NOTICE[1273] chan_sip.c: Registration from '"812" ' failed for '103.145.12.176:5145' - Wrong password [2020-06-23 02:59:57] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-23T02:59:57.121-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="812",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.1 ...	2020-06-23 15:17:05
192.241.218.87	attackbotsspam	trying to access non-authorized port	2020-06-23 15:17:25
211.104.171.239	attackspambots	Invalid user toan from 211.104.171.239 port 33624	2020-06-23 15:08:56
222.186.175.154	attackspambots	Jun 23 09:05:06 vm1 sshd[9913]: Failed password for root from 222.186.175.154 port 10130 ssh2 Jun 23 09:05:18 vm1 sshd[9913]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 10130 ssh2 [preauth] ...	2020-06-23 15:10:49
187.12.181.106	attack	$f2bV_matches	2020-06-23 14:56:05
178.213.204.229	attackbots	20/6/22@23:54:59: FAIL: Alarm-Network address from=178.213.204.229 20/6/22@23:54:59: FAIL: Alarm-Network address from=178.213.204.229 ...	2020-06-23 14:50:10

Recently Reported IPs

187.188.141.41	178.137.93.115	178.137.17.146	178.74.11.19
172.105.13.100	171.35.11.227	171.4.242.208	159.203.42.130
139.189.241.251	125.162.88.85	123.188.25.57	122.118.218.113
122.118.127.37	121.11.240.105	120.188.86.223	114.176.51.108
114.108.175.229	114.43.76.201	114.39.112.231	113.111.247.166