103.214.168.106

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.214.168.108	attackspam	Dec 25 14:38:35 XXX sshd[24073]: Did not receive identification string from 103.214.168.108 Dec 25 14:39:03 XXX sshd[24085]: Invalid user drcom from 103.214.168.108 Dec 25 14:39:04 XXX sshd[24087]: Invalid user hadoop from 103.214.168.108 Dec 25 14:39:04 XXX sshd[24085]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth] Dec 25 14:39:04 XXX sshd[24089]: Invalid user drcom from 103.214.168.108 Dec 25 14:39:05 XXX sshd[24091]: Invalid user redmine from 103.214.168.108 Dec 25 14:39:06 XXX sshd[24087]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth] Dec 25 14:39:06 XXX sshd[24089]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth] Dec 25 14:39:07 XXX sshd[24091]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth] Dec 25 14:39:11 XXX sshd[24106]: Invalid user drcom from 103.214.168.108 Dec 25 14:39........ -------------------------------	2019-12-26 06:37:46

Type

Details

Datetime

103.214.168.108

attackspam

Dec 25 14:38:35 XXX sshd[24073]: Did not receive identification string from 103.214.168.108
Dec 25 14:39:03 XXX sshd[24085]: Invalid user drcom from 103.214.168.108
Dec 25 14:39:04 XXX sshd[24087]: Invalid user hadoop from 103.214.168.108
Dec 25 14:39:04 XXX sshd[24085]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth]
Dec 25 14:39:04 XXX sshd[24089]: Invalid user drcom from 103.214.168.108
Dec 25 14:39:05 XXX sshd[24091]: Invalid user redmine from 103.214.168.108
Dec 25 14:39:06 XXX sshd[24087]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth]
Dec 25 14:39:06 XXX sshd[24089]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth]
Dec 25 14:39:07 XXX sshd[24091]: Received disconnect from 103.214.168.108: 11: Normal Shutdown, Thank you for playing [preauth]
Dec 25 14:39:11 XXX sshd[24106]: Invalid user drcom from 103.214.168.108
Dec 25 14:39........
-------------------------------

2019-12-26 06:37:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.214.168.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.214.168.106.		IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052502 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 26 05:51:53 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 106.168.214.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.168.214.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.158.41.208	attack	Unauthorised access (Mar 1) SRC=94.158.41.208 LEN=52 TTL=58 ID=25049 DF TCP DPT=1433 WINDOW=8192 SYN	2020-03-01 22:52:38
40.114.44.8	attackbotsspam	Mar 1 22:08:07 webhost01 sshd[12831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.114.44.8 Mar 1 22:08:09 webhost01 sshd[12831]: Failed password for invalid user liucanbin from 40.114.44.8 port 35762 ssh2 ...	2020-03-01 23:18:15
174.219.27.8	attack	Brute forcing email accounts	2020-03-01 23:03:17
201.209.234.104	attack	Honeypot attack, port: 445, PTR: 201-209-234-104.genericrev.cantv.net.	2020-03-01 23:38:03
80.82.64.124	attack	Mar 1 08:25:15 ast sshd[17951]: Invalid user pi from 80.82.64.124 port 21372 Mar 1 08:25:17 ast sshd[17951]: error: PAM: Authentication failure for illegal user pi from 80.82.64.124 Mar 1 08:25:15 ast sshd[17951]: Invalid user pi from 80.82.64.124 port 21372 Mar 1 08:25:17 ast sshd[17951]: error: PAM: Authentication failure for illegal user pi from 80.82.64.124 Mar 1 08:25:15 ast sshd[17951]: Invalid user pi from 80.82.64.124 port 21372 Mar 1 08:25:17 ast sshd[17951]: error: PAM: Authentication failure for illegal user pi from 80.82.64.124 Mar 1 08:25:17 ast sshd[17951]: Failed keyboard-interactive/pam for invalid user pi from 80.82.64.124 port 21372 ssh2 ...	2020-03-01 22:54:29
125.59.195.205	attackspambots	Honeypot attack, port: 5555, PTR: cm125-59-195-205.hkcable.com.hk.	2020-03-01 23:21:10
94.100.185.215	attackbots	(imapd) Failed IMAP login from 94.100.185.215 (RU/Russia/rimap21.i.mail.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar 1 16:55:06 ir1 dovecot[4133960]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.100.185.215, lip=5.63.12.44, TLS: Connection closed, session=<9mSb/8qf/4teZLnX>	2020-03-01 23:02:15
219.73.47.69	attackspambots	Honeypot attack, port: 5555, PTR: n219073047069.netvigator.com.	2020-03-01 23:33:33
121.230.161.186	attackspambots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-03-01 23:39:34
220.132.82.203	attackspambots	Unauthorized connection attempt detected from IP address 220.132.82.203 to port 23 [J]	2020-03-01 23:16:43
162.243.50.8	attack	Port Scan detected from 162.243.50.8 (US/United States/dev.rcms.io). 4 hits in the last 95 seconds	2020-03-01 23:11:59
13.94.133.154	attack	Feb 27 19:48:49 xxxxxxx9247313 sshd[29921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.133.154 user=r.r Feb 27 19:48:50 xxxxxxx9247313 sshd[29921]: Failed password for r.r from 13.94.133.154 port 46466 ssh2 Feb 27 19:48:58 xxxxxxx9247313 sshd[29923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.133.154 user=r.r Feb 27 19:49:00 xxxxxxx9247313 sshd[29923]: Failed password for r.r from 13.94.133.154 port 45542 ssh2 Feb 27 19:49:08 xxxxxxx9247313 sshd[29925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.133.154 user=r.r Feb 27 19:49:10 xxxxxxx9247313 sshd[29925]: Failed password for r.r from 13.94.133.154 port 44662 ssh2 Feb 27 19:49:19 xxxxxxx9247313 sshd[29929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.133.154 user=r.r Feb 27 19:49:21 xxxxxxx9247313 sshd[29929]: Failed p........ ------------------------------	2020-03-01 23:26:41
88.248.138.149	attackspam	Honeypot attack, port: 81, PTR: 88.248.138.149.static.ttnet.com.tr.	2020-03-01 23:16:30
197.240.76.159	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-03-01 23:23:09
183.83.138.182	attackspam	20/3/1@08:24:45: FAIL: Alarm-Network address from=183.83.138.182 20/3/1@08:24:46: FAIL: Alarm-Network address from=183.83.138.182 ...	2020-03-01 23:26:12

Recently Reported IPs

103.214.164.91	103.214.52.75	103.214.6.107	103.214.6.211
103.214.68.146	103.214.68.179	103.214.68.187	103.214.68.49
103.214.69.186	103.215.136.42	103.215.139.59	103.215.139.92
103.215.176.145	103.215.176.236	103.215.191.120	103.215.36.222
103.215.49.111	103.215.51.136	103.215.82.200	103.216.113.63