45.119.53.106 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Qingdao City Chengyang Zhengyang Middle Road

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Invalid user test from 45.119.53.106 port 50431	2019-08-22 23:57:49

Comments on same subnet:

IP	Type	Details	Datetime
45.119.53.58	attackspam	2019-12-03T10:22:51.5742671495-001 sshd\[23607\]: Failed password for root from 45.119.53.58 port 57532 ssh2 2019-12-03T10:22:51.9936411495-001 sshd\[23609\]: Failed password for root from 45.119.53.58 port 41786 ssh2 2019-12-03T11:24:40.8805861495-001 sshd\[25524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.53.58 user=root 2019-12-03T11:24:41.3887741495-001 sshd\[25528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.53.58 user=root 2019-12-03T11:24:42.9384631495-001 sshd\[25524\]: Failed password for root from 45.119.53.58 port 54428 ssh2 2019-12-03T11:24:43.9179471495-001 sshd\[25528\]: Failed password for root from 45.119.53.58 port 38680 ssh2 ...	2019-12-04 00:37:07
45.119.53.58	attack	root ssh:notty 45.119.53.58 Sat Sep 7 13:28 - 13:28 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:27 - 13:27 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:26 - 13:26 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:25 - 13:25 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:25 - 13:25 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:24 - 13:24 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:23 - 13:23 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:22 - 13:22 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:21 - 13:21 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:21 - 13:21 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:20 - 13:20 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:19 - 13:19 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:18 - 13:18 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:18 - 13:18 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:17 - 13:17 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:16 - 13:16 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:15 - 13:15 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:15 - 13:15 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:14 - 13:14 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:13 - 13:13 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:12 - 13:12 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:11 - 13:11 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:11 - 13:11 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:10 - 13:10 (00:00)	2019-09-08 13:43:20
45.119.53.109	attackspam	10 attempts against mh-pma-try-ban on milky.magehost.pro	2019-07-22 18:14:47

Type

Details

Datetime

45.119.53.58

attackspam

2019-12-03T10:22:51.5742671495-001 sshd\[23607\]: Failed password for root from 45.119.53.58 port 57532 ssh2
2019-12-03T10:22:51.9936411495-001 sshd\[23609\]: Failed password for root from 45.119.53.58 port 41786 ssh2
2019-12-03T11:24:40.8805861495-001 sshd\[25524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.53.58  user=root
2019-12-03T11:24:41.3887741495-001 sshd\[25528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.53.58  user=root
2019-12-03T11:24:42.9384631495-001 sshd\[25524\]: Failed password for root from 45.119.53.58 port 54428 ssh2
2019-12-03T11:24:43.9179471495-001 sshd\[25528\]: Failed password for root from 45.119.53.58 port 38680 ssh2
...

2019-12-04 00:37:07

45.119.53.58

attack

root     ssh:notty    45.119.53.58     Sat Sep  7 13:28 - 13:28  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:27 - 13:27  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:26 - 13:26  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:25 - 13:25  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:25 - 13:25  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:24 - 13:24  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:23 - 13:23  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:22 - 13:22  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:21 - 13:21  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:21 - 13:21  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:20 - 13:20  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:19 - 13:19  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:18 - 13:18  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:18 - 13:18  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:17 - 13:17  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:16 - 13:16  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:15 - 13:15  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:15 - 13:15  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:14 - 13:14  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:13 - 13:13  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:12 - 13:12  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:11 - 13:11  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:11 - 13:11  (00:00)    
root     ssh:notty    45.119.53.58     Sat Sep  7 13:10 - 13:10  (00:00)

2019-09-08 13:43:20

45.119.53.109

attackspam

10 attempts against mh-pma-try-ban on milky.magehost.pro

2019-07-22 18:14:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.119.53.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40308
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.119.53.106.			IN	A

;; AUTHORITY SECTION:
.			3159	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 22 23:57:33 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 106.53.119.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 106.53.119.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.16.189.203	attackspam	Apr 10 01:01:08 lanister sshd[28524]: Failed password for invalid user user from 210.16.189.203 port 35364 ssh2 Apr 10 01:01:05 lanister sshd[28524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.16.189.203 Apr 10 01:01:05 lanister sshd[28524]: Invalid user user from 210.16.189.203 Apr 10 01:01:08 lanister sshd[28524]: Failed password for invalid user user from 210.16.189.203 port 35364 ssh2	2020-04-10 15:50:28
47.34.128.43	attackspam	Port Scan	2020-04-10 15:43:06
35.202.143.222	attack	Apr 10 07:18:54 web8 sshd\[21443\]: Invalid user zero from 35.202.143.222 Apr 10 07:18:54 web8 sshd\[21443\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.143.222 Apr 10 07:18:55 web8 sshd\[21443\]: Failed password for invalid user zero from 35.202.143.222 port 46208 ssh2 Apr 10 07:22:41 web8 sshd\[23468\]: Invalid user deploy from 35.202.143.222 Apr 10 07:22:41 web8 sshd\[23468\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.143.222	2020-04-10 15:43:49
222.186.175.216	attack	Apr 10 03:15:09 ny01 sshd[9926]: Failed password for root from 222.186.175.216 port 32524 ssh2 Apr 10 03:15:23 ny01 sshd[9926]: Failed password for root from 222.186.175.216 port 32524 ssh2 Apr 10 03:15:23 ny01 sshd[9926]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 32524 ssh2 [preauth]	2020-04-10 15:20:54
51.255.101.8	attack	51.255.101.8 - - [10/Apr/2020:07:57:03 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.255.101.8 - - [10/Apr/2020:07:57:05 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.255.101.8 - - [10/Apr/2020:07:57:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-10 15:49:36
141.98.9.137	attack	Unauthorized SSH login attempts	2020-04-10 15:24:53
112.85.42.186	attack	Apr 10 09:01:48 vmd38886 sshd\[12523\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.186 user=root Apr 10 09:01:49 vmd38886 sshd\[12523\]: Failed password for root from 112.85.42.186 port 30233 ssh2 Apr 10 09:01:52 vmd38886 sshd\[12523\]: Failed password for root from 112.85.42.186 port 30233 ssh2	2020-04-10 15:15:51
103.58.249.82	attackspambots	DATE:2020-04-10 05:55:34, IP:103.58.249.82, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-04-10 15:22:55
129.204.147.84	attackbotsspam	SSH Brute-Forcing (server1)	2020-04-10 15:19:52
106.54.127.159	attackbotsspam	invalid login attempt (postgres)	2020-04-10 15:31:29
47.180.212.134	attackspambots	$f2bV_matches	2020-04-10 15:11:55
182.84.124.201	attack	Apr 10 10:19:22 tuotantolaitos sshd[1954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.84.124.201 Apr 10 10:19:23 tuotantolaitos sshd[1954]: Failed password for invalid user pi from 182.84.124.201 port 55800 ssh2 ...	2020-04-10 15:22:03
91.232.96.102	attackbots	Apr 10 05:55:52 smtp postfix/smtpd[13360]: NOQUEUE: reject: RCPT from subdued.kumsoft.com[91.232.96.102]: 554 5.7.1 Service unavailable; Client host [91.232.96.102] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2020-04-10 15:07:30
178.62.0.215	attackbots	Apr 10 07:20:06 web8 sshd\[22147\]: Invalid user admin from 178.62.0.215 Apr 10 07:20:06 web8 sshd\[22147\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.0.215 Apr 10 07:20:08 web8 sshd\[22147\]: Failed password for invalid user admin from 178.62.0.215 port 46870 ssh2 Apr 10 07:23:29 web8 sshd\[23900\]: Invalid user kamal from 178.62.0.215 Apr 10 07:23:29 web8 sshd\[23900\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.0.215	2020-04-10 15:28:44
139.59.46.243	attackbots	Apr 10 05:42:24 ip-172-31-61-156 sshd[30319]: Failed password for invalid user chad from 139.59.46.243 port 43634 ssh2 Apr 10 05:42:22 ip-172-31-61-156 sshd[30319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 Apr 10 05:42:22 ip-172-31-61-156 sshd[30319]: Invalid user chad from 139.59.46.243 Apr 10 05:42:24 ip-172-31-61-156 sshd[30319]: Failed password for invalid user chad from 139.59.46.243 port 43634 ssh2 Apr 10 05:46:38 ip-172-31-61-156 sshd[30451]: Invalid user az from 139.59.46.243 ...	2020-04-10 15:30:59

Recently Reported IPs

6.183.20.173	14.146.207.131	139.118.68.143	147.229.156.31
107.146.154.156	5.216.132.34	64.66.138.188	150.232.163.193
208.22.254.29	186.241.251.115	84.51.4.207	46.250.202.147
97.64.2.5	103.139.66.30	174.202.121.217	196.76.195.29
66.216.249.102	69.150.23.223	154.121.114.247	174.102.71.154