118.42.102.106

Basic Info

City: unknown

Region: unknown

Country: Korea Republic of

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.42.102.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20609
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.42.102.106.			IN	A

;; AUTHORITY SECTION:
.			289	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 16:32:27 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 106.102.42.118.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.102.42.118.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.190.48.144	attackbotsspam	1601670803 - 10/02/2020 22:33:23 Host: 213.190.48.144/213.190.48.144 Port: 445 TCP Blocked ...	2020-10-04 04:02:09
129.28.169.185	attackbots	(sshd) Failed SSH login from 129.28.169.185 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 21:15:28 server sshd[7886]: Invalid user jenkins from 129.28.169.185 Oct 3 21:15:28 server sshd[7886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.169.185 Oct 3 21:15:30 server sshd[7886]: Failed password for invalid user jenkins from 129.28.169.185 port 58272 ssh2 Oct 3 21:21:51 server sshd[8793]: Invalid user tempuser from 129.28.169.185 Oct 3 21:21:51 server sshd[8793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.169.185	2020-10-04 04:04:46
103.84.175.197	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-10-04 03:56:11
194.87.138.33	attack	DATE:2020-10-02 22:33:48, IP:194.87.138.33, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-10-04 03:46:51
103.141.174.130	attackspam	srvr2: (mod_security) mod_security (id:920350) triggered by 103.141.174.130 (BD/-/-): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/02 22:33:37 [error] 142888#0: 187758 [client 103.141.174.130] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160167081795.491896"] [ref "o0,15v21,15"], client: 103.141.174.130, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-10-04 03:51:15
185.147.215.8	attackspambots	[2020-10-03 15:27:48] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.8:62795' - Wrong password [2020-10-03 15:27:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T15:27:48.740-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1187",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/62795",Challenge="3bb27028",ReceivedChallenge="3bb27028",ReceivedHash="c1ce44241726deb187a6f815d46f2148" [2020-10-03 15:30:22] NOTICE[1182] chan_sip.c: Registration from '' failed for '185.147.215.8:58486' - Wrong password [2020-10-03 15:30:22] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T15:30:22.260-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1091",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-10-04 03:50:51
189.213.45.125	attack	[H1.VM8] Blocked by UFW	2020-10-04 03:40:02
45.80.175.4	attack	"Mail spam"	2020-10-04 03:51:40
37.49.226.169	attack	TCP ports : 465 / 587	2020-10-04 04:01:51
61.148.56.158	attackbots	(sshd) Failed SSH login from 61.148.56.158 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 14:42:22 jbs1 sshd[18034]: Invalid user haldaemon from 61.148.56.158 Oct 3 14:42:22 jbs1 sshd[18034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.56.158 Oct 3 14:42:24 jbs1 sshd[18034]: Failed password for invalid user haldaemon from 61.148.56.158 port 3353 ssh2 Oct 3 14:47:47 jbs1 sshd[20487]: Invalid user router from 61.148.56.158 Oct 3 14:47:47 jbs1 sshd[20487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.56.158	2020-10-04 03:49:12
71.94.65.190	attackspam	ssh 22	2020-10-04 03:30:27
68.116.41.6	attackbotsspam	Oct 3 12:16:08 vps46666688 sshd[24531]: Failed password for root from 68.116.41.6 port 32934 ssh2 Oct 3 12:25:26 vps46666688 sshd[24649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.116.41.6 ...	2020-10-04 03:54:59
106.75.241.200	attack	"Unauthorized connection attempt on SSHD detected"	2020-10-04 03:49:00
129.211.50.239	attack	Oct 3 09:56:57 vm0 sshd[21235]: Failed password for root from 129.211.50.239 port 38374 ssh2 Oct 3 10:01:05 vm0 sshd[21288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.50.239 ...	2020-10-04 03:28:08
63.80.187.59	attackspam	E-Mail Spam (RBL) [REJECTED]	2020-10-04 03:38:51

Recently Reported IPs

118.40.78.24	118.45.109.49	118.45.123.10	118.46.79.143
118.43.85.61	118.46.93.244	118.40.31.227	118.67.102.69
118.68.122.124	118.68.118.107	118.68.156.144	118.68.165.202
118.68.107.137	118.68.160.60	118.68.183.218	118.68.231.243
118.68.26.116	118.68.36.197	118.68.36.222	118.68.51.157