102.66.104.106

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
102.66.104.226	attack	[portscan] tcp/81 [alter-web/web-proxy] [scan/connect: 7 time(s)] *(RWIN=58959)(04301449)	2020-05-01 00:49:07
102.66.104.204	attackbotsspam	webserver:80 [02/Apr/2020] "POST /cgi-bin/mainfunction.cgi HTTP/1.1" 403 363 "-" "XTC BOTNET"	2020-04-03 01:25:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.66.104.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;102.66.104.106.			IN	A

;; AUTHORITY SECTION:
.			57	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062801 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 29 12:33:38 CST 2022
;; MSG SIZE  rcvd: 107

Host info

106.104.66.102.in-addr.arpa domain name pointer mal001.rawifi.co.za.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.104.66.102.in-addr.arpa	name = mal001.rawifi.co.za.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.129.34.72	attackspambots	Aug 14 14:44:07 vps sshd[8892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.34.72 Aug 14 14:44:10 vps sshd[8892]: Failed password for invalid user inputws from 212.129.34.72 port 29347 ssh2 Aug 14 15:01:23 vps sshd[9597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.34.72 ...	2019-08-14 21:03:48
31.173.97.207	attack	Automatic report - Port Scan Attack	2019-08-14 20:28:53
122.195.200.148	attackbots	Aug 14 08:32:01 ny01 sshd[10157]: Failed password for root from 122.195.200.148 port 40801 ssh2 Aug 14 08:32:22 ny01 sshd[10196]: Failed password for root from 122.195.200.148 port 19488 ssh2	2019-08-14 20:43:45
108.62.202.220	attackbots	Splunk® : port scan detected: Aug 14 08:06:36 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=108.62.202.220 DST=104.248.11.191 LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=54321 PROTO=TCP SPT=46802 DPT=33535 WINDOW=65535 RES=0x00 SYN URGP=0	2019-08-14 20:13:29
138.68.57.194	attack	Aug 14 12:21:34 thevastnessof sshd[2743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.57.194 ...	2019-08-14 20:22:26
5.145.192.86	attackspam	19/8/13@22:51:31: FAIL: IoT-Telnet address from=5.145.192.86 ...	2019-08-14 20:11:14
112.85.42.172	attack	Aug 14 13:46:51 Ubuntu-1404-trusty-64-minimal sshd\[24305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Aug 14 13:46:52 Ubuntu-1404-trusty-64-minimal sshd\[24305\]: Failed password for root from 112.85.42.172 port 32365 ssh2 Aug 14 13:47:09 Ubuntu-1404-trusty-64-minimal sshd\[24395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Aug 14 13:47:11 Ubuntu-1404-trusty-64-minimal sshd\[24395\]: Failed password for root from 112.85.42.172 port 35574 ssh2 Aug 14 13:47:29 Ubuntu-1404-trusty-64-minimal sshd\[24459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root	2019-08-14 20:51:57
92.118.160.1	attack	[IPBX probe: SIP RTP=tcp/554] *(RWIN=1024)(08141159)	2019-08-14 20:18:57
212.83.184.217	attack	\[2019-08-14 08:12:49\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2678' - Wrong password \[2019-08-14 08:12:49\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-14T08:12:49.234-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="73546",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.184.217/56567",Challenge="5a04c174",ReceivedChallenge="5a04c174",ReceivedHash="4cbe7c3ddfb2b7fbfa15d800bbdd7a4b" \[2019-08-14 08:13:36\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '212.83.184.217:2680' - Wrong password \[2019-08-14 08:13:36\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-14T08:13:36.097-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="80663",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.	2019-08-14 20:36:04
92.63.194.240	attack	RDP Bruteforce	2019-08-14 20:54:09
92.63.194.90	attack	Aug 14 07:36:30 mail sshd\[12231\]: Invalid user admin from 92.63.194.90 Aug 14 07:36:30 mail sshd\[12231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Aug 14 07:36:31 mail sshd\[12231\]: Failed password for invalid user admin from 92.63.194.90 port 41710 ssh2 ...	2019-08-14 20:34:47
192.99.70.199	attackspambots	Aug 14 09:45:04 server sshd[39883]: Failed password for invalid user user from 192.99.70.199 port 41360 ssh2 Aug 14 09:55:50 server sshd[40775]: Failed password for invalid user post1 from 192.99.70.199 port 43806 ssh2 Aug 14 10:00:36 server sshd[41197]: Failed password for invalid user sagar from 192.99.70.199 port 36126 ssh2	2019-08-14 21:04:40
213.113.175.212	attack	[portscan] Port scan	2019-08-14 21:03:20
27.254.81.81	attackspam	Aug 14 14:45:33 eventyay sshd[13237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.81.81 Aug 14 14:45:35 eventyay sshd[13237]: Failed password for invalid user whirlwind from 27.254.81.81 port 47290 ssh2 Aug 14 14:52:28 eventyay sshd[14989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.81.81 ...	2019-08-14 21:01:37
198.199.106.97	attackspambots	264/tcp 8080/tcp 2525/tcp... [2019-06-13/08-12]65pkt,55pt.(tcp),4pt.(udp)	2019-08-14 20:51:19

Recently Reported IPs

137.226.112.80	43.156.80.77	137.226.240.57	64.112.43.71
137.226.239.241	137.226.58.188	137.226.41.7	109.184.5.74
169.229.31.78	169.229.5.78	133.218.188.166	109.242.180.243
169.229.95.251	169.229.48.50	169.229.40.155	137.226.24.220
137.226.254.63	169.229.92.192	137.226.58.122	69.242.58.2