103.94.120.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.94.120.227	attackbots	Port Scan: TCP/443	2020-10-12 02:22:06
103.94.120.227	attackspam	Port Scan: TCP/443	2020-10-11 18:12:15
103.94.120.54	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-30 16:03:21
103.94.120.66	attackspambots	103.94.120.66 - - [28/Aug/2019:05:20:55 +0100] "POST /xmlrpc.php HTTP/1.1" 200 370 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; BLA-AL00 Build/HUAWEIBLA-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.132 MQQBrowser/8.9 Mobile Safari/537.36"	2019-10-28 23:37:37
103.94.120.66	attackspambots	103.94.120.66 - - [28/Aug/2019:05:20:55 +0100] "POST /xmlrpc.php HTTP/1.1" 200 370 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; BLA-AL00 Build/HUAWEIBLA-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.132 MQQBrowser/8.9 Mobile Safari/537.36"	2019-08-28 19:33:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.94.120.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.94.120.34.			IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:36:29 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 34.120.94.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.120.94.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.65.255.153	attackbots	Sep 28 21:32:11 pkdns2 sshd\[56896\]: Invalid user password1 from 159.65.255.153Sep 28 21:32:13 pkdns2 sshd\[56896\]: Failed password for invalid user password1 from 159.65.255.153 port 51004 ssh2Sep 28 21:36:01 pkdns2 sshd\[57099\]: Invalid user angie123 from 159.65.255.153Sep 28 21:36:03 pkdns2 sshd\[57099\]: Failed password for invalid user angie123 from 159.65.255.153 port 34066 ssh2Sep 28 21:39:57 pkdns2 sshd\[57261\]: Invalid user popa from 159.65.255.153Sep 28 21:39:58 pkdns2 sshd\[57261\]: Failed password for invalid user popa from 159.65.255.153 port 45344 ssh2 ...	2019-09-29 02:44:19
94.0.27.209	attackspambots	Automatic report - Port Scan Attack	2019-09-29 02:29:29
67.215.225.107	attackspam	From: "Domain Services" (FRAUD DOMAIN REGISTRAR)	2019-09-29 02:24:29
43.241.56.4	attackspam	xmlrpc attack	2019-09-29 02:38:09
123.207.237.31	attackbotsspam	Sep 28 08:15:16 aiointranet sshd\[12642\]: Invalid user misiek from 123.207.237.31 Sep 28 08:15:16 aiointranet sshd\[12642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.237.31 Sep 28 08:15:18 aiointranet sshd\[12642\]: Failed password for invalid user misiek from 123.207.237.31 port 47822 ssh2 Sep 28 08:18:33 aiointranet sshd\[12936\]: Invalid user server from 123.207.237.31 Sep 28 08:18:33 aiointranet sshd\[12936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.237.31	2019-09-29 02:21:32
211.23.61.194	attack	Sep 28 20:20:34 localhost sshd\[12144\]: Invalid user adhi from 211.23.61.194 port 45258 Sep 28 20:20:34 localhost sshd\[12144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.23.61.194 Sep 28 20:20:37 localhost sshd\[12144\]: Failed password for invalid user adhi from 211.23.61.194 port 45258 ssh2	2019-09-29 02:45:34
220.98.204.169	attackspam	(Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=43873 TCP DPT=8080 WINDOW=24010 SYN (Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=19394 TCP DPT=8080 WINDOW=24010 SYN (Sep 28) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=34201 TCP DPT=8080 WINDOW=24010 SYN (Sep 27) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=24538 TCP DPT=8080 WINDOW=24010 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=4851 TCP DPT=8080 WINDOW=24010 SYN (Sep 26) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=44401 TCP DPT=8080 WINDOW=24010 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=21881 TCP DPT=8080 WINDOW=24010 SYN (Sep 24) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=63692 TCP DPT=8080 WINDOW=24010 SYN (Sep 23) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=44808 TCP DPT=8080 WINDOW=24010 SYN (Sep 23) LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=4947 TCP DPT=8080 WINDOW=24010 SYN	2019-09-29 02:23:14
112.85.42.195	attackspam	Sep 28 18:10:06 game-panel sshd[5529]: Failed password for root from 112.85.42.195 port 41216 ssh2 Sep 28 18:13:27 game-panel sshd[5624]: Failed password for root from 112.85.42.195 port 63707 ssh2	2019-09-29 02:32:01
13.235.54.249	attackspambots	Sep 28 15:35:45 markkoudstaal sshd[24855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.235.54.249 Sep 28 15:35:48 markkoudstaal sshd[24855]: Failed password for invalid user operator from 13.235.54.249 port 43002 ssh2 Sep 28 15:40:30 markkoudstaal sshd[25451]: Failed password for root from 13.235.54.249 port 55908 ssh2	2019-09-29 02:34:30
123.58.33.18	attackspam	Sep 28 19:45:26 MK-Soft-VM6 sshd[7350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.33.18 Sep 28 19:45:28 MK-Soft-VM6 sshd[7350]: Failed password for invalid user admin from 123.58.33.18 port 41392 ssh2 ...	2019-09-29 02:33:47
115.238.236.78	attackspam	Sep 28 14:11:31 mail sshd[13889]: Invalid user uv from 115.238.236.78 Sep 28 14:11:31 mail sshd[13889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78 Sep 28 14:11:31 mail sshd[13889]: Invalid user uv from 115.238.236.78 Sep 28 14:11:33 mail sshd[13889]: Failed password for invalid user uv from 115.238.236.78 port 39226 ssh2 Sep 28 14:29:40 mail sshd[9570]: Invalid user vagrant from 115.238.236.78 ...	2019-09-29 02:20:23
194.44.80.212	attack	Sep 26 21:00:28 mxgate1 postfix/postscreen[8929]: CONNECT from [194.44.80.212]:39752 to [176.31.12.44]:25 Sep 26 21:00:28 mxgate1 postfix/dnsblog[9183]: addr 194.44.80.212 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 26 21:00:28 mxgate1 postfix/dnsblog[9179]: addr 194.44.80.212 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 26 21:00:28 mxgate1 postfix/dnsblog[9183]: addr 194.44.80.212 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 26 21:00:28 mxgate1 postfix/dnsblog[9183]: addr 194.44.80.212 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 26 21:00:28 mxgate1 postfix/dnsblog[9182]: addr 194.44.80.212 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 26 21:00:28 mxgate1 postfix/postscreen[8929]: PREGREET 27 after 0.11 from [194.44.80.212]:39752: EHLO 055communication.com Sep 26 21:00:29 mxgate1 postfix/postscreen[8929]: DNSBL rank 4 for [194.44.80.212]:39752 Sep x@x Sep 26 21:00:30 mxgate1 postfix/postscreen[8929]: HANGUP after 0.56 from [194.44.80.2........ -------------------------------	2019-09-29 02:47:07
176.215.77.245	attackbots	Sep 28 07:51:42 hcbb sshd\[1530\]: Invalid user noi from 176.215.77.245 Sep 28 07:51:42 hcbb sshd\[1530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.215.77.245 Sep 28 07:51:45 hcbb sshd\[1530\]: Failed password for invalid user noi from 176.215.77.245 port 58442 ssh2 Sep 28 07:55:53 hcbb sshd\[1919\]: Invalid user zi from 176.215.77.245 Sep 28 07:55:53 hcbb sshd\[1919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.215.77.245	2019-09-29 02:41:11
82.251.20.221	attackbots	SSH Brute-Forcing (ownc)	2019-09-29 02:30:21
128.199.223.127	attackspam	notenfalter.de 128.199.223.127 \[28/Sep/2019:19:13:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" notenfalter.de 128.199.223.127 \[28/Sep/2019:19:13:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 5632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-09-29 02:33:25

Recently Reported IPs

79.101.143.122	115.248.102.145	185.183.15.37	182.129.13.217
34.226.205.213	2.56.59.170	41.60.233.32	77.243.112.122
193.163.125.152	187.162.115.23	114.134.26.80	92.85.51.60
42.82.224.66	185.99.215.159	112.120.153.111	201.179.163.195
112.168.38.3	2.85.151.33	42.233.114.172	187.189.28.204