106.54.214.101

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Port scan detected on ports: 1433[TCP], 1433[TCP], 65529[TCP]	2020-04-27 07:33:51

Comments on same subnet:

IP	Type	Details	Datetime
106.54.214.206	attack	...	2019-12-26 05:34:18
106.54.214.185	attackbotsspam	Brute-force attempt banned	2019-11-29 20:15:37
106.54.214.84	attackspam	Automatic report - SSH Brute-Force Attack	2019-10-28 17:03:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.214.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16329
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.214.101.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042601 1800 900 604800 86400

;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 27 07:33:47 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 101.214.54.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 101.214.54.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
89.216.124.253	attackbots	Automatic report - XMLRPC Attack	2019-10-13 06:01:42
198.245.63.94	attackspambots	Oct 12 08:47:12 friendsofhawaii sshd\[748\]: Invalid user qwer!@\#\$ from 198.245.63.94 Oct 12 08:47:12 friendsofhawaii sshd\[748\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns508619.ip-198-245-63.net Oct 12 08:47:15 friendsofhawaii sshd\[748\]: Failed password for invalid user qwer!@\#\$ from 198.245.63.94 port 42110 ssh2 Oct 12 08:50:37 friendsofhawaii sshd\[1032\]: Invalid user 123Scorpion from 198.245.63.94 Oct 12 08:50:37 friendsofhawaii sshd\[1032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns508619.ip-198-245-63.net	2019-10-13 05:48:41
106.12.202.192	attack	Oct 12 18:34:28 firewall sshd[1527]: Failed password for root from 106.12.202.192 port 39040 ssh2 Oct 12 18:38:01 firewall sshd[1684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.202.192 user=root Oct 12 18:38:03 firewall sshd[1684]: Failed password for root from 106.12.202.192 port 45354 ssh2 ...	2019-10-13 05:40:53
95.33.24.208	attackbots	2019-10-12T21:42:43.389853abusebot-5.cloudsearch.cf sshd\[29241\]: Invalid user lukasz from 95.33.24.208 port 38050	2019-10-13 06:06:44
198.71.228.63	attackbots	xmlrpc attack	2019-10-13 05:54:28
172.81.204.249	attackspam	Oct 12 22:37:53 * sshd[23363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 Oct 12 22:37:55 * sshd[23363]: Failed password for invalid user Heslo@abc from 172.81.204.249 port 47284 ssh2	2019-10-13 05:38:10
218.92.0.191	attack	Oct 12 23:21:47 dcd-gentoo sshd[26748]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Oct 12 23:21:49 dcd-gentoo sshd[26748]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Oct 12 23:21:47 dcd-gentoo sshd[26748]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Oct 12 23:21:49 dcd-gentoo sshd[26748]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Oct 12 23:21:47 dcd-gentoo sshd[26748]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Oct 12 23:21:49 dcd-gentoo sshd[26748]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Oct 12 23:21:49 dcd-gentoo sshd[26748]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 56086 ssh2 ...	2019-10-13 05:35:03
95.165.163.229	attackspambots	Sat Oct 12 20:00:04 CEST 2019: Custom script for mail.log monitoring - Spammer	2019-10-13 05:30:16
123.247.34.10	attackspambots	Unauthorised access (Oct 12) SRC=123.247.34.10 LEN=44 TOS=0x10 PREC=0x40 TTL=45 ID=24514 TCP DPT=23 WINDOW=5782 SYN	2019-10-13 05:50:09
131.255.217.129	attackbots	Automatic report - Port Scan Attack	2019-10-13 05:40:05
123.51.152.53	attackspambots	Automatic report - Banned IP Access	2019-10-13 05:58:09
218.92.0.200	attack	Oct 12 23:21:10 vpn01 sshd[7201]: Failed password for root from 218.92.0.200 port 51784 ssh2 ...	2019-10-13 05:32:40
162.144.141.141	attackspam	Automatic report - XMLRPC Attack	2019-10-13 05:38:34
216.245.196.198	attack	\[2019-10-12 13:19:47\] NOTICE\[1887\] chan_sip.c: Registration from '"999" \' failed for '216.245.196.198:5688' - Wrong password \[2019-10-12 13:19:47\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-12T13:19:47.021-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="999",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.245.196.198/5688",Challenge="6cc14634",ReceivedChallenge="6cc14634",ReceivedHash="f0ccf4abab1b8c627db08636b5162f71" \[2019-10-12 13:19:47\] NOTICE\[1887\] chan_sip.c: Registration from '"999" \' failed for '216.245.196.198:5688' - Wrong password \[2019-10-12 13:19:47\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-12T13:19:47.086-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="999",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-10-13 05:53:44
186.156.177.115	attackspambots	2019-10-12T18:25:57.684261hub.schaetter.us sshd\[3225\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dvc-115-177-156-186.movil.vtr.net user=root 2019-10-12T18:25:59.920294hub.schaetter.us sshd\[3225\]: Failed password for root from 186.156.177.115 port 43530 ssh2 2019-10-12T18:31:05.445405hub.schaetter.us sshd\[3299\]: Invalid user 12345 from 186.156.177.115 port 54122 2019-10-12T18:31:05.452855hub.schaetter.us sshd\[3299\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dvc-115-177-156-186.movil.vtr.net 2019-10-12T18:31:07.640291hub.schaetter.us sshd\[3299\]: Failed password for invalid user 12345 from 186.156.177.115 port 54122 ssh2 ...	2019-10-13 05:55:21

Recently Reported IPs

217.27.200.177	54.215.135.167	157.230.35.103	109.112.27.221
212.186.39.44	94.168.19.233	193.34.119.219	12.124.184.69
49.111.41.18	99.185.121.92	37.13.118.86	178.107.96.152
221.123.136.123	94.131.240.93	104.224.59.32	180.29.221.54
189.2.252.178	185.202.2.240	121.32.84.73	94.43.96.51