103.206.20.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.206.205.5	attackspam	Auto Detect Rule! proto TCP (SYN), 103.206.205.5:19764->gjan.info:23, len 40	2020-07-14 06:46:25
103.206.205.5	attackspam	20/7/11@16:08:03: FAIL: IoT-Telnet address from=103.206.205.5 ...	2020-07-12 04:51:57
103.206.20.17	attackbotsspam	389/udp 389/udp [2020-02-04]2pkt	2020-02-04 18:19:17
103.206.209.230	attack	2019-11-16 22:29:21 EET kam@snetsolution.com (103.206.209.230) Hackers know password from your account. Password ... 2.8 Phishing	2019-11-21 17:47:17
103.206.209.238	attackspam	Mail sent to address hacked/leaked from Last.fm	2019-08-14 04:20:06
103.206.209.238	attackspam	Aug 12 07:03:48 our-server-hostname postfix/smtpd[19881]: connect from unknown[103.206.209.238] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 12 07:03:53 our-server-hostname postfix/smtpd[19881]: lost connection after RCPT from unknown[103.206.209.238] Aug 12 07:03:53 our-server-hostname postfix/smtpd[19881]: disconnect from unknown[103.206.209.238] Aug 12 07:48:57 our-server-hostname postfix/smtpd[19902]: connect from unknown[103.206.209.238] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 12 07:49:06 our-server-hostname postfix/smtpd[19902]: lost connection after RCPT from unknown[103.206.209.238] Aug 12 07:49:06 our-server-hostname postfix/smtpd[19902]: disconnect from unknown[103.206.209.238] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.206.209.238	2019-08-12 20:25:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.206.20.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.206.20.42.			IN	A

;; AUTHORITY SECTION:
.			258	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 13:40:10 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 42.20.206.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.20.206.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.220.101.215	attack	Sep 12 16:38:25 Ubuntu-1404-trusty-64-minimal sshd\[3546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.215 user=root Sep 12 16:38:26 Ubuntu-1404-trusty-64-minimal sshd\[3546\]: Failed password for root from 185.220.101.215 port 27396 ssh2 Sep 12 16:38:33 Ubuntu-1404-trusty-64-minimal sshd\[3546\]: Failed password for root from 185.220.101.215 port 27396 ssh2 Sep 12 16:38:35 Ubuntu-1404-trusty-64-minimal sshd\[3546\]: Failed password for root from 185.220.101.215 port 27396 ssh2 Sep 12 16:38:37 Ubuntu-1404-trusty-64-minimal sshd\[3546\]: Failed password for root from 185.220.101.215 port 27396 ssh2	2020-09-14 02:52:13
185.193.90.98	attackbotsspam	TCP (SYN) 185.193.90.98:52145 -> port 5466, len 44	2020-09-14 02:54:17
212.90.191.162	attackspam	Unauthorized connection attempt from IP address 212.90.191.162 on Port 445(SMB)	2020-09-14 02:34:08
153.122.84.229	attackspambots	Sep 13 20:54:49 mout sshd[13786]: Invalid user hilde from 153.122.84.229 port 35806	2020-09-14 02:55:12
167.71.211.85	attack	Sep 13 19:22:06 router sshd[17978]: Failed password for root from 167.71.211.85 port 38958 ssh2 Sep 13 19:35:28 router sshd[18055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.211.85 Sep 13 19:35:30 router sshd[18055]: Failed password for invalid user pwn5 from 167.71.211.85 port 59952 ssh2 ...	2020-09-14 02:34:24
201.211.185.43	attack	1599929428 - 09/12/2020 18:50:28 Host: 201.211.185.43/201.211.185.43 Port: 445 TCP Blocked	2020-09-14 02:46:36
125.21.227.181	attackspam	2020-09-12T10:49:48.008391hostname sshd[16609]: Failed password for root from 125.21.227.181 port 54590 ssh2 ...	2020-09-14 02:48:02
62.234.20.135	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-13T15:38:11Z and 2020-09-13T15:42:22Z	2020-09-14 02:27:47
117.211.126.230	attackbots	Sep 14 00:45:30 itv-usvr-02 sshd[21948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.126.230 user=root Sep 14 00:48:29 itv-usvr-02 sshd[22040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.126.230 user=root Sep 14 00:51:36 itv-usvr-02 sshd[22139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.126.230 user=root	2020-09-14 02:38:01
94.208.138.113	attack	trying to access non-authorized port	2020-09-14 02:51:29
220.124.240.66	attackspambots	(imapd) Failed IMAP login from 220.124.240.66 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 13 16:35:12 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=220.124.240.66, lip=5.63.12.44, session=	2020-09-14 02:40:29
192.241.220.199	attackspambots	UDP 192.241.220.199:36217 -> port 1434, len 29	2020-09-14 02:28:14
107.181.174.74	attackbotsspam	Sep 13 20:18:10 marvibiene sshd[19542]: Failed password for root from 107.181.174.74 port 48488 ssh2 Sep 13 20:24:43 marvibiene sshd[19990]: Failed password for root from 107.181.174.74 port 59308 ssh2	2020-09-14 02:32:29
58.18.113.10	attackspam	Sep 13 18:08:01 ip-172-31-16-56 sshd\[11669\]: Invalid user mint from 58.18.113.10\ Sep 13 18:08:03 ip-172-31-16-56 sshd\[11669\]: Failed password for invalid user mint from 58.18.113.10 port 44430 ssh2\ Sep 13 18:11:39 ip-172-31-16-56 sshd\[11792\]: Invalid user tech1234 from 58.18.113.10\ Sep 13 18:11:42 ip-172-31-16-56 sshd\[11792\]: Failed password for invalid user tech1234 from 58.18.113.10 port 42504 ssh2\ Sep 13 18:15:12 ip-172-31-16-56 sshd\[11831\]: Invalid user hblee123 from 58.18.113.10\	2020-09-14 02:49:52
5.43.164.185	attack	POST /xmlrpc.php	2020-09-14 02:29:15

Recently Reported IPs

103.206.187.222	103.207.160.196	103.207.94.233	103.207.94.46
103.208.32.231	103.209.144.135	103.209.24.6	103.209.246.22
103.21.129.195	103.21.130.180	103.21.130.47	103.21.131.25
103.21.150.17	103.21.182.71	103.21.252.219	103.211.197.29
103.211.216.159	103.211.216.161	103.211.216.200	103.211.216.208