106.111.20.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.111.203.203	attack	Invalid user ts3 from 106.111.203.203 port 39840	2020-09-27 02:25:16
106.111.203.203	attackbotsspam	Time: Sat Sep 26 05:34:50 2020 +0000 IP: 106.111.203.203 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 05:12:03 activeserver sshd[25009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.111.203.203 user=root Sep 26 05:12:04 activeserver sshd[25009]: Failed password for root from 106.111.203.203 port 57184 ssh2 Sep 26 05:32:26 activeserver sshd[8622]: Invalid user aditya from 106.111.203.203 port 58084 Sep 26 05:32:28 activeserver sshd[8622]: Failed password for invalid user aditya from 106.111.203.203 port 58084 ssh2 Sep 26 05:34:46 activeserver sshd[14286]: Invalid user george from 106.111.203.203 port 34158	2020-09-26 18:20:17
106.111.203.203	attackbotsspam	Sep 23 02:04:43 localhost sshd[2271410]: Invalid user deborah from 106.111.203.203 port 36770 ...	2020-09-23 00:11:13
106.111.200.122	attack	Aug 12 23:55:08 mxgate1 postfix/postscreen[14750]: CONNECT from [106.111.200.122]:52838 to [176.31.12.44]:25 Aug 12 23:55:08 mxgate1 postfix/dnsblog[15128]: addr 106.111.200.122 listed by domain zen.spamhaus.org as 127.0.0.11 Aug 12 23:55:08 mxgate1 postfix/postscreen[14750]: PREGREET 13 after 0.23 from [106.111.200.122]:52838: EHLO pKPacu Aug 12 23:55:08 mxgate1 postfix/postscreen[14750]: DNSBL rank 2 for [106.111.200.122]:52838 Aug 12 23:55:08 mxgate1 postfix/postscreen[14750]: NOQUEUE: reject: RCPT from [106.111.200.122]:52838: 550 5.7.1 Service unavailable; client [106.111.200.122] blocked using zen.spamhaus.org; from=x@x helo= Aug 12 23:55:09 mxgate1 postfix/postscreen[14750]: DISCONNECT [106.111.200.122]:52838 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.111.200.122	2019-08-13 12:02:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.111.20.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.111.20.2.			IN	A

;; AUTHORITY SECTION:
.			200	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 21:18:08 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 2.20.111.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.20.111.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.137.23.72	attack	1596457114 - 08/03/2020 14:18:34 Host: 5.137.23.72/5.137.23.72 Port: 445 TCP Blocked	2020-08-04 04:05:14
200.111.147.13	attack	Spam	2020-08-04 03:55:28
94.102.51.28	attackspambots	08/03/2020-16:23:09.555113 94.102.51.28 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-08-04 04:23:18
45.136.108.17	attack	RDP brute forcing (d)	2020-08-04 04:10:35
132.232.68.138	attackspambots	2020-08-03T20:43:27.863273mail.broermann.family sshd[18309]: Failed password for root from 132.232.68.138 port 36778 ssh2 2020-08-03T20:48:06.541925mail.broermann.family sshd[18516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.138 user=root 2020-08-03T20:48:08.562788mail.broermann.family sshd[18516]: Failed password for root from 132.232.68.138 port 54616 ssh2 2020-08-03T20:52:40.077707mail.broermann.family sshd[18761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.138 user=root 2020-08-03T20:52:42.380348mail.broermann.family sshd[18761]: Failed password for root from 132.232.68.138 port 44212 ssh2 ...	2020-08-04 04:00:08
197.255.160.226	attackspam	Aug 3 19:22:40 ns382633 sshd\[13201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.226 user=root Aug 3 19:22:42 ns382633 sshd\[13201\]: Failed password for root from 197.255.160.226 port 60370 ssh2 Aug 3 19:38:30 ns382633 sshd\[18807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.226 user=root Aug 3 19:38:31 ns382633 sshd\[18807\]: Failed password for root from 197.255.160.226 port 27098 ssh2 Aug 3 19:43:08 ns382633 sshd\[19691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.226 user=root	2020-08-04 04:13:29
154.28.188.38	attack	Tried repeatedly to login into my qnap with account credentials "admin"	2020-08-04 03:51:27
39.42.122.178	attackspambots	Automatic report - Port Scan Attack	2020-08-04 03:56:43
139.59.83.179	attackspambots	" "	2020-08-04 04:18:14
175.142.212.232	attackspam	TCP (SYN) 175.142.212.232:46832 -> port 23, len 44	2020-08-04 04:09:57
218.173.47.105	attackbots	1596457137 - 08/03/2020 14:18:57 Host: 218.173.47.105/218.173.47.105 Port: 445 TCP Blocked	2020-08-04 03:55:10
84.147.107.144	attackspambots	Automatic report - Port Scan Attack	2020-08-04 04:20:47
172.69.68.198	attackspambots	Aug 3 14:18:55 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.68.198 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=57 ID=32926 DF PROTO=TCP SPT=26650 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 3 14:18:56 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.68.198 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=57 ID=32927 DF PROTO=TCP SPT=26650 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 3 14:18:58 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=172.69.68.198 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=57 ID=32928 DF PROTO=TCP SPT=26650 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0	2020-08-04 03:53:12
103.144.21.189	attackspam	2020-08-03T21:48[Censored Hostname] sshd[20689]: Failed password for root from 103.144.21.189 port 50860 ssh2 2020-08-03T21:54[Censored Hostname] sshd[23709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.144.21.189 user=root 2020-08-03T21:54[Censored Hostname] sshd[23709]: Failed password for root from 103.144.21.189 port 35840 ssh2[...]	2020-08-04 04:22:05
46.101.113.206	attackbots	Aug 3 20:16:48 ns382633 sshd\[26057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206 user=root Aug 3 20:16:50 ns382633 sshd\[26057\]: Failed password for root from 46.101.113.206 port 45610 ssh2 Aug 3 20:30:39 ns382633 sshd\[28552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206 user=root Aug 3 20:30:41 ns382633 sshd\[28552\]: Failed password for root from 46.101.113.206 port 39554 ssh2 Aug 3 20:34:23 ns382633 sshd\[28785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.113.206 user=root	2020-08-04 04:11:46

Recently Reported IPs

106.111.20.192	106.111.20.212	106.111.20.16	106.111.20.48
106.111.20.26	106.111.20.97	106.111.20.64	106.111.201.90
106.111.202.103	106.111.202.108	106.111.202.107	101.206.117.20
106.111.20.75	106.111.202.11	106.111.202.105	106.111.202.110
106.111.202.113	106.111.202.114	106.111.202.117	106.111.202.119