116.103.107.20

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-08-11 22:36:51.327024-0500 localhost smtpd[4103]: NOQUEUE: reject: RCPT from unknown[116.103.107.20]: 554 5.7.1 Service unavailable; Client host [116.103.107.20] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/116.103.107.20; from= to= proto=ESMTP helo=<[116.103.107.20]>	2020-08-12 18:08:00

Type

Details

Datetime

attack

2020-08-11 22:36:51.327024-0500  localhost smtpd[4103]: NOQUEUE: reject: RCPT from unknown[116.103.107.20]: 554 5.7.1 Service unavailable; Client host [116.103.107.20] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/116.103.107.20; from= to= proto=ESMTP helo=<[116.103.107.20]>

2020-08-12 18:08:00

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.103.107.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.103.107.20.			IN	A

;; AUTHORITY SECTION:
.			416	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081200 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 18:07:55 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 20.107.103.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.107.103.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
23.129.64.215	attackspam	2020-08-27T13:35:40.314315randservbullet-proofcloud-66.localdomain sshd[11945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.215 user=root 2020-08-27T13:35:42.666111randservbullet-proofcloud-66.localdomain sshd[11945]: Failed password for root from 23.129.64.215 port 22806 ssh2 2020-08-27T13:35:45.215190randservbullet-proofcloud-66.localdomain sshd[11945]: Failed password for root from 23.129.64.215 port 22806 ssh2 2020-08-27T13:35:40.314315randservbullet-proofcloud-66.localdomain sshd[11945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.215 user=root 2020-08-27T13:35:42.666111randservbullet-proofcloud-66.localdomain sshd[11945]: Failed password for root from 23.129.64.215 port 22806 ssh2 2020-08-27T13:35:45.215190randservbullet-proofcloud-66.localdomain sshd[11945]: Failed password for root from 23.129.64.215 port 22806 ssh2 ...	2020-08-28 03:43:33
190.85.149.170	attack	1598532980 - 08/27/2020 14:56:20 Host: 190.85.149.170/190.85.149.170 Port: 445 TCP Blocked	2020-08-28 04:14:47
34.87.17.222	attackspambots	Aug 27 19:01:08 scw-focused-cartwright sshd[23405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.87.17.222 Aug 27 19:01:11 scw-focused-cartwright sshd[23405]: Failed password for invalid user stage from 34.87.17.222 port 40716 ssh2	2020-08-28 04:13:18
195.146.10.115	attack	Aug 27 20:50:59 marvibiene sshd[15678]: Failed password for root from 195.146.10.115 port 49234 ssh2	2020-08-28 04:16:15
94.232.40.6	attack	Fail2Ban Ban Triggered	2020-08-28 04:11:00
128.199.95.60	attack	Aug 27 19:55:41 rush sshd[32613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 Aug 27 19:55:43 rush sshd[32613]: Failed password for invalid user ts from 128.199.95.60 port 50946 ssh2 Aug 27 19:59:54 rush sshd[32734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 ...	2020-08-28 04:05:30
71.58.90.64	attackbots	(sshd) Failed SSH login from 71.58.90.64 (US/United States/c-71-58-90-64.hsd1.pa.comcast.net): 10 in the last 3600 secs	2020-08-28 04:03:20
71.246.210.34	attackbots	2020-08-27T18:05:46.102759abusebot-7.cloudsearch.cf sshd[14011]: Invalid user admin from 71.246.210.34 port 38484 2020-08-27T18:05:46.106988abusebot-7.cloudsearch.cf sshd[14011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 2020-08-27T18:05:46.102759abusebot-7.cloudsearch.cf sshd[14011]: Invalid user admin from 71.246.210.34 port 38484 2020-08-27T18:05:48.261201abusebot-7.cloudsearch.cf sshd[14011]: Failed password for invalid user admin from 71.246.210.34 port 38484 ssh2 2020-08-27T18:08:18.453810abusebot-7.cloudsearch.cf sshd[14021]: Invalid user lnn from 71.246.210.34 port 46260 2020-08-27T18:08:18.458233abusebot-7.cloudsearch.cf sshd[14021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 2020-08-27T18:08:18.453810abusebot-7.cloudsearch.cf sshd[14021]: Invalid user lnn from 71.246.210.34 port 46260 2020-08-27T18:08:20.812960abusebot-7.cloudsearch.cf sshd[14021]: Failed pas ...	2020-08-28 04:14:28
182.137.62.255	attack	spam (f2b h2)	2020-08-28 03:55:35
91.244.85.75	attackbotsspam	1598532984 - 08/27/2020 14:56:24 Host: 91.244.85.75/91.244.85.75 Port: 445 TCP Blocked	2020-08-28 04:13:34
172.105.23.36	attackbots	TCP (SYN) 172.105.23.36:47710 -> port 110, len 44	2020-08-28 03:47:19
177.185.201.25	attackbotsspam	Sending E-Mails with malicious Word macrocode (scr.malcode!gen22, isb.downloader!gen411).	2020-08-28 04:11:21
157.245.5.133	attackspambots	157.245.5.133 - - [27/Aug/2020:13:56:59 +0100] "POST /wp-login.php HTTP/1.1" 200 4434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.5.133 - - [27/Aug/2020:13:57:01 +0100] "POST /wp-login.php HTTP/1.1" 200 4434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.5.133 - - [27/Aug/2020:13:57:03 +0100] "POST /wp-login.php HTTP/1.1" 200 4434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-28 03:48:17
111.229.129.100	attack	SSH auth scanning - multiple failed logins	2020-08-28 03:51:17
192.81.209.72	attackspam	2020-08-27T11:41:43.120550mail.thespaminator.com sshd[9489]: Invalid user harry from 192.81.209.72 port 44364 2020-08-27T11:41:45.099938mail.thespaminator.com sshd[9489]: Failed password for invalid user harry from 192.81.209.72 port 44364 ssh2 ...	2020-08-28 04:16:27

Recently Reported IPs

20.132.123.170	222.231.49.76	58.47.51.238	161.35.157.180
203.220.180.209	190.200.179.198	181.114.208.223	106.44.99.242
50.91.49.127	196.200.181.3	224.228.75.152	223.223.120.244
171.249.136.114	106.40.148.246	157.215.113.220	51.178.81.106
16.115.204.98	16.69.178.89	118.228.199.37	207.158.47.78