106.42.97.97 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.42.97.127	attackbots	Unauthorized connection attempt detected from IP address 106.42.97.127 to port 139 [T]	2020-05-20 09:29:55
106.42.97.1	attackspambots	Unauthorized connection attempt detected from IP address 106.42.97.1 to port 139 [T]	2020-05-20 08:59:41
106.42.97.132	attackspam	Unauthorized connection attempt detected from IP address 106.42.97.132 to port 139 [T]	2020-05-20 08:50:37

Type

Details

Datetime

106.42.97.127

attackbots

Unauthorized connection attempt detected from IP address 106.42.97.127 to port 139 [T]

2020-05-20 09:29:55

106.42.97.1

attackspambots

Unauthorized connection attempt detected from IP address 106.42.97.1 to port 139 [T]

2020-05-20 08:59:41

106.42.97.132

attackspam

Unauthorized connection attempt detected from IP address 106.42.97.132 to port 139 [T]

2020-05-20 08:50:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.42.97.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57301
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.42.97.97.			IN	A

;; AUTHORITY SECTION:
.			212	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:27:23 CST 2022
;; MSG SIZE  rcvd: 105

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 106.42.97.97.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
152.200.32.198	attack	Brute forcing RDP port 3389	2020-09-06 21:59:05
111.229.4.247	attackspam	...	2020-09-06 22:14:16
37.59.35.206	attackspam	/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php?filename=../../../../../../../../../etc/passwd	2020-09-06 22:15:46
103.146.63.44	attackbots	Sep 6 10:46:29 sshgateway sshd\[21669\]: Invalid user test from 103.146.63.44 Sep 6 10:46:29 sshgateway sshd\[21669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.63.44 Sep 6 10:46:30 sshgateway sshd\[21669\]: Failed password for invalid user test from 103.146.63.44 port 47816 ssh2 Sep 6 10:50:59 sshgateway sshd\[24456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.63.44 user=root Sep 6 10:51:02 sshgateway sshd\[24456\]: Failed password for root from 103.146.63.44 port 45616 ssh2 Sep 6 10:54:06 sshgateway sshd\[26416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.63.44 user=root Sep 6 10:54:07 sshgateway sshd\[26416\]: Failed password for root from 103.146.63.44 port 45420 ssh2 Sep 6 10:55:33 sshgateway sshd\[27308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.146.63.44 user=root Sep	2020-09-06 21:56:48
211.142.26.106	attackbotsspam	Sep 5 23:35:00 ip106 sshd[8913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.142.26.106 Sep 5 23:35:02 ip106 sshd[8913]: Failed password for invalid user carter from 211.142.26.106 port 8393 ssh2 ...	2020-09-06 21:55:14
103.145.12.217	attackbotsspam	[2020-09-06 07:29:58] NOTICE[1194] chan_sip.c: Registration from '"601" ' failed for '103.145.12.217:6186' - Wrong password [2020-09-06 07:29:58] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T07:29:58.978-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="601",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.217/6186",Challenge="78258ec9",ReceivedChallenge="78258ec9",ReceivedHash="d9dfa3d8262850f61f3df33856fdb051" [2020-09-06 07:29:59] NOTICE[1194] chan_sip.c: Registration from '"601" ' failed for '103.145.12.217:6186' - Wrong password [2020-09-06 07:29:59] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T07:29:59.114-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="601",SessionID="0x7f2ddc12c6d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.1 ...	2020-09-06 21:59:47
201.57.40.70	attackbots	Sep 6 16:00:20 marvibiene sshd[6831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.57.40.70 Sep 6 16:00:21 marvibiene sshd[6831]: Failed password for invalid user natsu from 201.57.40.70 port 39826 ssh2	2020-09-06 22:06:30
193.169.255.40	attack	Sep 6 14:10:44 srv01 postfix/smtpd\[18560\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 14:10:50 srv01 postfix/smtpd\[32481\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 14:11:00 srv01 postfix/smtpd\[32598\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 14:11:23 srv01 postfix/smtpd\[18560\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 14:11:29 srv01 postfix/smtpd\[32481\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-06 21:32:10
45.140.17.61	attackbots	Scanning	2020-09-06 22:10:33
42.112.20.32	attackbots	Sep 6 00:35:00 gospond sshd[31864]: Invalid user ftpuser from 42.112.20.32 port 52436 Sep 6 00:35:02 gospond sshd[31864]: Failed password for invalid user ftpuser from 42.112.20.32 port 52436 ssh2 Sep 6 00:35:24 gospond sshd[31874]: Invalid user clamav from 42.112.20.32 port 55880 ...	2020-09-06 21:39:45
162.158.159.140	attack	srv02 Scanning Webserver Target(80:http) Events(1) ..	2020-09-06 21:51:55
14.160.52.58	attack	Dovecot Invalid User Login Attempt.	2020-09-06 21:56:13
184.105.139.94	attackbotsspam	TCP (SYN) 184.105.139.94:41702 -> port 80, len 44	2020-09-06 22:15:14
103.78.88.90	attack	TCP (SYN) 103.78.88.90:63592 -> port 1433, len 52	2020-09-06 21:32:41
81.163.14.205	attack	failed_logins	2020-09-06 21:46:43

Recently Reported IPs

106.3.149.111	106.45.9.208	106.42.99.144	106.46.60.150
106.46.60.86	106.51.64.220	106.46.61.2	106.51.65.187
106.51.90.127	13.226.31.35	106.46.61.31	106.52.164.73
106.7.96.180	106.69.228.40	106.53.132.90	106.75.144.195
106.59.214.59	106.75.91.216	106.83.248.117	106.86.165.34