106.200.2.104 - IPInfo

Basic Info

City: Malappuram

Region: Kerala

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.200.216.130	attackbotsspam	Jul 15 18:22:12 php1 sshd\[684\]: Invalid user gpl from 106.200.216.130 Jul 15 18:22:12 php1 sshd\[684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.216.130 Jul 15 18:22:14 php1 sshd\[684\]: Failed password for invalid user gpl from 106.200.216.130 port 58564 ssh2 Jul 15 18:26:23 php1 sshd\[1163\]: Invalid user ssc from 106.200.216.130 Jul 15 18:26:23 php1 sshd\[1163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.216.130	2020-07-16 12:34:33
106.200.207.182	attack	Jun 22 14:44:43 piServer sshd[3712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.207.182 Jun 22 14:44:46 piServer sshd[3712]: Failed password for invalid user zqm from 106.200.207.182 port 41798 ssh2 Jun 22 14:48:51 piServer sshd[4074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.207.182 ...	2020-06-23 04:20:32
106.200.207.182	attackbotsspam	Lines containing failures of 106.200.207.182 Jun 19 18:30:45 penfold sshd[11468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.207.182 user=r.r Jun 19 18:30:47 penfold sshd[11468]: Failed password for r.r from 106.200.207.182 port 46434 ssh2 Jun 19 18:30:48 penfold sshd[11468]: Received disconnect from 106.200.207.182 port 46434:11: Bye Bye [preauth] Jun 19 18:30:48 penfold sshd[11468]: Disconnected from authenticating user r.r 106.200.207.182 port 46434 [preauth] Jun 19 18:46:40 penfold sshd[12584]: Invalid user guoman from 106.200.207.182 port 57668 Jun 19 18:46:40 penfold sshd[12584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.207.182 Jun 19 18:46:42 penfold sshd[12584]: Failed password for invalid user guoman from 106.200.207.182 port 57668 ssh2 Jun 19 18:46:44 penfold sshd[12584]: Received disconnect from 106.200.207.182 port 57668:11: Bye Bye [preauth] Jun 19 1........ ------------------------------	2020-06-20 07:35:07
106.200.245.253	attackbotsspam	2020-03-31T17:29:27.594373sorsha.thespaminator.com sshd[8325]: Invalid user pi from 106.200.245.253 port 58446 2020-03-31T17:29:30.355892sorsha.thespaminator.com sshd[8325]: Failed password for invalid user pi from 106.200.245.253 port 58446 ssh2 ...	2020-04-01 08:27:14
106.200.245.99	attackspambots	SSH Scan	2019-10-29 02:13:58
106.200.226.166	attackspam	Automated reporting of SSH Vulnerability scanning	2019-10-04 00:50:04
106.200.254.248	attack	2019-09-17T03:33:48.153Z CLOSE host=106.200.254.248 port=33125 fd=4 time=19158.367 bytes=3185464 ...	2019-09-17 18:18:14
106.200.255.16	attackspam	Fail2Ban Ban Triggered	2019-09-01 05:38:28
106.200.246.106	attackspam	Jul 26 10:21:36 extapp sshd[28402]: Invalid user chao from 106.200.246.106 Jul 26 10:21:39 extapp sshd[28402]: Failed password for invalid user chao from 106.200.246.106 port 12120 ssh2 Jul 26 10:23:51 extapp sshd[29124]: Invalid user ghostnameolhostnamee from 106.200.246.106 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.200.246.106	2019-07-27 01:23:57
106.200.234.35	attackbotsspam	Jul 11 04:18:36 db sshd\[21251\]: Invalid user ubnt from 106.200.234.35 Jul 11 04:18:36 db sshd\[21251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.200.234.35 Jul 11 04:18:38 db sshd\[21251\]: Failed password for invalid user ubnt from 106.200.234.35 port 42579 ssh2 Jul 11 04:18:41 db sshd\[21251\]: Failed password for invalid user ubnt from 106.200.234.35 port 42579 ssh2 Jul 11 04:18:43 db sshd\[21251\]: Failed password for invalid user ubnt from 106.200.234.35 port 42579 ssh2 ...	2019-07-11 17:18:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.200.2.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56340
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.200.2.104.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030100 1800 900 604800 86400

;; Query time: 536 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 01 19:51:38 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 104.2.200.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.2.200.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
54.39.145.123	attackbotsspam	2020-06-02T13:26:53.229093shield sshd\[1655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-54-39-145.net user=root 2020-06-02T13:26:54.732657shield sshd\[1655\]: Failed password for root from 54.39.145.123 port 39514 ssh2 2020-06-02T13:30:35.689869shield sshd\[2508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-54-39-145.net user=root 2020-06-02T13:30:37.670008shield sshd\[2508\]: Failed password for root from 54.39.145.123 port 44304 ssh2 2020-06-02T13:34:24.239632shield sshd\[3281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-54-39-145.net user=root	2020-06-03 02:38:43
185.130.184.207	attackspambots	[2020-06-02 14:47:24] NOTICE[1156] chan_sip.c: Registration from '' failed for '185.130.184.207:58707' - Wrong password [2020-06-02 14:47:24] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-02T14:47:24.388-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2060",SessionID="0x7fc444068078",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/58707",Challenge="38231d04",ReceivedChallenge="38231d04",ReceivedHash="8e35d4f3daf9929aad69eb31ce4f5a2b" [2020-06-02 14:48:13] NOTICE[1156] chan_sip.c: Registration from '' failed for '185.130.184.207:51990' - Wrong password [2020-06-02 14:48:13] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-02T14:48:13.589-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8231",SessionID="0x7fc4440584d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130 ...	2020-06-03 02:53:27
180.76.236.65	attackspambots	Jun 2 15:06:28 sip sshd[508482]: Failed password for root from 180.76.236.65 port 58084 ssh2 Jun 2 15:10:48 sip sshd[508539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.236.65 user=root Jun 2 15:10:50 sip sshd[508539]: Failed password for root from 180.76.236.65 port 56242 ssh2 ...	2020-06-03 02:31:38
142.93.121.47	attackspam	" "	2020-06-03 02:52:05
189.203.164.169	attack	Jun 3 00:53:00 itv-usvr-01 sshd[17384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.203.164.169 user=root Jun 3 00:53:02 itv-usvr-01 sshd[17384]: Failed password for root from 189.203.164.169 port 11031 ssh2 Jun 3 00:56:34 itv-usvr-01 sshd[17554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.203.164.169 user=root Jun 3 00:56:36 itv-usvr-01 sshd[17554]: Failed password for root from 189.203.164.169 port 13506 ssh2 Jun 3 01:00:08 itv-usvr-01 sshd[17713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.203.164.169 user=root Jun 3 01:00:10 itv-usvr-01 sshd[17713]: Failed password for root from 189.203.164.169 port 36832 ssh2	2020-06-03 02:44:19
178.128.83.1	attackbotsspam	Automatic report - XMLRPC Attack	2020-06-03 02:21:09
182.71.77.58	attack	Unauthorized connection attempt from IP address 182.71.77.58 on Port 445(SMB)	2020-06-03 02:40:45
157.230.112.34	attack	Jun 2 20:43:27 root sshd[9305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.112.34 user=root Jun 2 20:43:29 root sshd[9305]: Failed password for root from 157.230.112.34 port 54472 ssh2 ...	2020-06-03 02:48:48
140.143.197.56	attackspam	2020-06-02T19:33:06.480533amanda2.illicoweb.com sshd\[16245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.197.56 user=root 2020-06-02T19:33:08.386289amanda2.illicoweb.com sshd\[16245\]: Failed password for root from 140.143.197.56 port 11203 ssh2 2020-06-02T19:37:44.774427amanda2.illicoweb.com sshd\[16638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.197.56 user=root 2020-06-02T19:37:46.845640amanda2.illicoweb.com sshd\[16638\]: Failed password for root from 140.143.197.56 port 44203 ssh2 2020-06-02T19:39:00.902700amanda2.illicoweb.com sshd\[16721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.197.56 user=root ...	2020-06-03 02:44:47
185.232.52.99	attackspam	(mod_security) mod_security (id:210492) triggered by 185.232.52.99 (NL/Netherlands/liostatostia1977.prohoster.info): 5 in the last 3600 secs	2020-06-03 02:23:50
51.75.18.215	attackbotsspam	Failed password for root from 51.75.18.215 port 35930 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-18.eu user=root Failed password for root from 51.75.18.215 port 40446 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-18.eu user=root Failed password for root from 51.75.18.215 port 44962 ssh2	2020-06-03 02:41:45
61.130.71.58	attackbots	Unauthorized connection attempt from IP address 61.130.71.58 on Port 445(SMB)	2020-06-03 02:45:38
106.51.3.121	attackspam	20/6/2@08:10:34: FAIL: Alarm-Network address from=106.51.3.121 ...	2020-06-03 02:32:46
177.104.126.50	attackspam	Unauthorized connection attempt detected from IP address 177.104.126.50 to port 445	2020-06-03 02:36:45
174.91.105.56	attackbotsspam	Automatic report - Port Scan Attack	2020-06-03 02:33:15

Recently Reported IPs

146.68.70.254	120.182.12.211	81.161.38.91	2.65.71.186
15.229.83.52	164.62.72.11	131.147.88.195	163.3.16.82
90.8.32.20	68.56.53.175	223.156.85.49	41.183.159.81
44.144.3.173	72.48.141.220	86.219.0.136	222.9.94.179
121.10.111.104	218.222.100.168	17.51.95.223	165.213.126.187