106.14.4.53 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.14.44.239	attackspam	(Sep 6) LEN=40 TOS=0x10 PREC=0x40 TTL=43 ID=22822 TCP DPT=8080 WINDOW=19238 SYN (Sep 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=37439 TCP DPT=8080 WINDOW=19238 SYN (Sep 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=13808 TCP DPT=8080 WINDOW=19238 SYN (Sep 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=52821 TCP DPT=8080 WINDOW=19238 SYN (Sep 4) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=18167 TCP DPT=8080 WINDOW=19238 SYN (Sep 4) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=52981 TCP DPT=8080 WINDOW=19238 SYN (Sep 4) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=57098 TCP DPT=8080 WINDOW=19238 SYN (Sep 3) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=29095 TCP DPT=8080 WINDOW=58840 SYN (Sep 2) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=20592 TCP DPT=8080 WINDOW=19238 SYN	2019-09-06 09:10:51
106.14.44.239	attackspambots	Unauthorised access (Sep 3) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=29095 TCP DPT=8080 WINDOW=58840 SYN Unauthorised access (Sep 2) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=20592 TCP DPT=8080 WINDOW=19238 SYN	2019-09-03 07:24:09

Type

Details

Datetime

106.14.44.239

attackspam

(Sep  6)  LEN=40 TOS=0x10 PREC=0x40 TTL=43 ID=22822 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  5)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=37439 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  5)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=13808 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  5)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=52821 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  4)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=18167 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  4)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=52981 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  4)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=57098 TCP DPT=8080 WINDOW=19238 SYN 
 (Sep  3)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=29095 TCP DPT=8080 WINDOW=58840 SYN 
 (Sep  2)  LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=20592 TCP DPT=8080 WINDOW=19238 SYN

2019-09-06 09:10:51

106.14.44.239

attackspambots

Unauthorised access (Sep  3) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=29095 TCP DPT=8080 WINDOW=58840 SYN 
Unauthorised access (Sep  2) SRC=106.14.44.239 LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=20592 TCP DPT=8080 WINDOW=19238 SYN

2019-09-03 07:24:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.14.4.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.14.4.53.			IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:32:46 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 53.4.14.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.4.14.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
47.74.44.224	attack	Aug 24 00:53:14 ws24vmsma01 sshd[5587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.44.224 Aug 24 00:53:16 ws24vmsma01 sshd[5587]: Failed password for invalid user ct from 47.74.44.224 port 59240 ssh2 ...	2020-08-24 15:05:37
62.112.11.79	attackbotsspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-24T03:22:59Z and 2020-08-24T03:52:56Z	2020-08-24 15:18:35
188.234.247.110	attack	SSH	2020-08-24 15:09:53
61.182.226.42	attackspam	Invalid user tag from 61.182.226.42 port 52252	2020-08-24 15:17:48
112.134.131.159	attackbots	Attempts against non-existent wp-login	2020-08-24 15:08:10
139.99.192.189	attack	[2020-08-24 02:08:33] NOTICE[1185] chan_sip.c: Registration from '"322"' failed for '139.99.192.189:23369' - Wrong password [2020-08-24 02:08:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:08:33.794-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="322",SessionID="0x7f10c4239d98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139.99.192.189/23369",Challenge="11cf6f0a",ReceivedChallenge="11cf6f0a",ReceivedHash="265c52b28983f18d23133d93ab72aca2" [2020-08-24 02:10:46] NOTICE[1185] chan_sip.c: Registration from '"323"' failed for '139.99.192.189:33802' - Wrong password [2020-08-24 02:10:46] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-24T02:10:46.457-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="323",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/139. ...	2020-08-24 14:57:28
219.92.4.201	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-08-24 14:47:45
49.235.136.49	attack	Aug 23 23:59:46 propaganda sshd[43815]: Connection from 49.235.136.49 port 40308 on 10.0.0.161 port 22 rdomain "" Aug 23 23:59:47 propaganda sshd[43815]: Connection closed by 49.235.136.49 port 40308 [preauth]	2020-08-24 15:13:14
51.83.73.127	attackbotsspam	Aug 24 06:16:51 jumpserver sshd[23510]: Invalid user cacti from 51.83.73.127 port 33456 Aug 24 06:16:53 jumpserver sshd[23510]: Failed password for invalid user cacti from 51.83.73.127 port 33456 ssh2 Aug 24 06:20:37 jumpserver sshd[23559]: Invalid user tgu from 51.83.73.127 port 41314 ...	2020-08-24 14:57:10
175.123.253.220	attackspambots	Aug 24 08:50:06 eventyay sshd[11162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.123.253.220 Aug 24 08:50:08 eventyay sshd[11162]: Failed password for invalid user sami from 175.123.253.220 port 44240 ssh2 Aug 24 08:54:50 eventyay sshd[11323]: Failed password for root from 175.123.253.220 port 52094 ssh2 ...	2020-08-24 14:57:54
120.78.7.47	attack	Input Traffic from this IP, but critial abuseconfidencescore	2020-08-24 15:20:31
157.245.211.180	attackbotsspam	frenzy	2020-08-24 15:01:41
183.134.104.148	attackbotsspam	Input Traffic from this IP, but critial abuseconfidencescore	2020-08-24 14:43:10
62.234.217.203	attack	Invalid user zzx from 62.234.217.203 port 47738	2020-08-24 15:17:30
178.209.110.78	attackspambots	Port Scan detected! ...	2020-08-24 15:18:19

Recently Reported IPs

106.14.40.61	106.14.95.148	106.14.41.148	106.14.41.166
106.14.41.181	106.14.41.45	106.14.41.224	106.14.42.129
106.14.41.250	106.14.41.105	106.14.41.75	106.14.42.133
106.14.95.160	106.14.42.155	106.14.42.131	106.14.41.225
106.14.42.192	106.14.42.196	106.14.43.0	106.14.43.107