106.118.20.149

Basic Info

City: Qinhuangdao

Region: Hebei

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: No.31,Jin-rong Street

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.118.200.245	attackbotsspam	Unauthorized connection attempt detected from IP address 106.118.200.245 to port 23 [J]	2020-01-23 00:56:22
106.118.200.52	attack	Unauthorized connection attempt detected from IP address 106.118.200.52 to port 23 [J]	2020-01-20 08:11:33
106.118.200.5	attackspambots	Jan 4 05:44:38 debian-2gb-nbg1-2 kernel: \[372403.598511\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.118.200.5 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=65292 DF PROTO=TCP SPT=28879 DPT=23 WINDOW=14520 RES=0x00 SYN URGP=0	2020-01-04 20:57:36

Type

Details

Datetime

106.118.200.245

attackbotsspam

Unauthorized connection attempt detected from IP address 106.118.200.245 to port 23 [J]

2020-01-23 00:56:22

106.118.200.52

attack

Unauthorized connection attempt detected from IP address 106.118.200.52 to port 23 [J]

2020-01-20 08:11:33

106.118.200.5

attackspambots

Jan  4 05:44:38 debian-2gb-nbg1-2 kernel: \[372403.598511\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.118.200.5 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=65292 DF PROTO=TCP SPT=28879 DPT=23 WINDOW=14520 RES=0x00 SYN URGP=0

2020-01-04 20:57:36

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.118.20.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47129
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.118.20.149.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 13:24:28 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 149.20.118.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 149.20.118.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.202.44.120	attackspambots	Aug 10 04:14:59 tux postfix/smtpd[22928]: connect from unknown[5.202.44.120] Aug x@x Aug 10 04:15:01 tux postfix/smtpd[22928]: lost connection after RCPT from unknown[5.202.44.120] Aug 10 04:15:01 tux postfix/smtpd[22928]: disconnect from unknown[5.202.44.120] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.202.44.120	2019-08-10 18:50:42
178.132.76.218	attackbots	Caught in portsentry honeypot	2019-08-10 19:20:21
158.222.176.225	attackbotsspam	Automatic report - Port Scan Attack	2019-08-10 18:52:25
159.203.36.212	attack	WordPress wp-login brute force :: 159.203.36.212 0.096 BYPASS [10/Aug/2019:12:25:31 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-08-10 19:24:10
140.143.249.234	attackspam	Failed password for invalid user bcd from 140.143.249.234 port 55688 ssh2 Invalid user bbui from 140.143.249.234 port 51430 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.249.234 Failed password for invalid user bbui from 140.143.249.234 port 51430 ssh2 Invalid user nick from 140.143.249.234 port 47098	2019-08-10 18:58:42
23.250.99.78	attackbotsspam	Malicious Traffic/Form Submission	2019-08-10 19:10:38
198.23.172.162	attackbots	Malicious Traffic/Form Submission	2019-08-10 18:55:48
37.139.24.204	attackspambots	SSH invalid-user multiple login try	2019-08-10 19:29:01
113.199.40.202	attackbots	Mar 3 05:16:21 motanud sshd\[28402\]: Invalid user oi from 113.199.40.202 port 47688 Mar 3 05:16:21 motanud sshd\[28402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.199.40.202 Mar 3 05:16:23 motanud sshd\[28402\]: Failed password for invalid user oi from 113.199.40.202 port 47688 ssh2	2019-08-10 19:25:52
187.188.183.73	attackspam	Aug 10 04:25:35 mailserver postfix/smtpd[84364]: connect from fixed-187-188-183-73.totalplay.net[187.188.183.73] Aug 10 04:25:39 mailserver postfix/smtpd[84364]: NOQUEUE: reject: RCPT from fixed-187-188-183-73.totalplay.net[187.188.183.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<[hidden]> proto=ESMTP helo= Aug 10 04:25:40 mailserver postfix/smtpd[84364]: NOQUEUE: reject: RCPT from fixed-187-188-183-73.totalplay.net[187.188.183.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<[hidden]> proto=ESMTP helo=	2019-08-10 19:19:28
104.144.15.178	attackbotsspam	Malicious Traffic/Form Submission	2019-08-10 18:57:09
104.248.7.24	attackspambots	Aug 10 12:40:26 fr01 sshd[27975]: Invalid user amministratore from 104.248.7.24 ...	2019-08-10 19:06:34
124.131.50.91	attackbots	23/tcp [2019-08-10]1pkt	2019-08-10 19:01:54
46.3.96.71	attack	Aug 10 13:10:05 lumpi kernel: INPUT:DROP:SPAMHAUS_DROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=46.3.96.71 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=15669 PROTO=TCP SPT=41257 DPT=13303 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-08-10 19:12:08
200.199.143.162	attack	Automatic report - Banned IP Access	2019-08-10 19:22:16

Recently Reported IPs

209.138.49.109	113.176.64.144	151.73.19.30	65.127.98.238
37.252.69.104	71.45.186.254	50.168.233.225	113.176.100.13
37.215.9.27	157.42.115.226	99.248.252.236	134.140.19.241
104.206.128.78	206.35.8.153	80.216.12.110	203.115.101.106
111.135.131.31	70.134.33.17	151.70.71.77	78.228.171.24