106.54.80.202 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.54.80.25	attackbots	88 failed attempt(s) in the last 24h	2019-11-15 08:20:18
106.54.80.25	attack	Nov 13 04:50:13 ip-172-31-62-245 sshd\[9996\]: Invalid user ching from 106.54.80.25\ Nov 13 04:50:16 ip-172-31-62-245 sshd\[9996\]: Failed password for invalid user ching from 106.54.80.25 port 33162 ssh2\ Nov 13 04:54:05 ip-172-31-62-245 sshd\[10014\]: Failed password for root from 106.54.80.25 port 36310 ssh2\ Nov 13 04:57:49 ip-172-31-62-245 sshd\[10037\]: Invalid user nfs from 106.54.80.25\ Nov 13 04:57:51 ip-172-31-62-245 sshd\[10037\]: Failed password for invalid user nfs from 106.54.80.25 port 39464 ssh2\	2019-11-13 14:02:58
106.54.80.25	attackbotsspam	Nov 11 07:30:51 vpn01 sshd[12818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.80.25 Nov 11 07:30:53 vpn01 sshd[12818]: Failed password for invalid user prystie from 106.54.80.25 port 35066 ssh2 ...	2019-11-11 14:54:06

Type

Details

Datetime

106.54.80.25

attackbots

88 failed attempt(s) in the last 24h

2019-11-15 08:20:18

106.54.80.25

attack

Nov 13 04:50:13 ip-172-31-62-245 sshd\[9996\]: Invalid user ching from 106.54.80.25\
Nov 13 04:50:16 ip-172-31-62-245 sshd\[9996\]: Failed password for invalid user ching from 106.54.80.25 port 33162 ssh2\
Nov 13 04:54:05 ip-172-31-62-245 sshd\[10014\]: Failed password for root from 106.54.80.25 port 36310 ssh2\
Nov 13 04:57:49 ip-172-31-62-245 sshd\[10037\]: Invalid user nfs from 106.54.80.25\
Nov 13 04:57:51 ip-172-31-62-245 sshd\[10037\]: Failed password for invalid user nfs from 106.54.80.25 port 39464 ssh2\

2019-11-13 14:02:58

106.54.80.25

attackbotsspam

Nov 11 07:30:51 vpn01 sshd[12818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.80.25
Nov 11 07:30:53 vpn01 sshd[12818]: Failed password for invalid user prystie from 106.54.80.25 port 35066 ssh2
...

2019-11-11 14:54:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.80.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.54.80.202.			IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:41:12 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 202.80.54.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 202.80.54.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
223.74.105.147	attack	Mar 3 05:51:35 grey postfix/smtpd\[10215\]: NOQUEUE: reject: RCPT from unknown\[223.74.105.147\]: 554 5.7.1 Service unavailable\; Client host \[223.74.105.147\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[223.74.105.147\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-03 18:51:59
116.107.174.209	attackspambots	Port probing on unauthorized port 445	2020-03-03 19:22:32
180.76.168.54	attack	Mar 3 12:07:40 vpn01 sshd[28330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.168.54 Mar 3 12:07:42 vpn01 sshd[28330]: Failed password for invalid user hadoop from 180.76.168.54 port 39476 ssh2 ...	2020-03-03 19:23:19
72.239.31.158	attackspam	Automatic report - Port Scan Attack	2020-03-03 18:56:52
209.17.96.42	attack	Port scan: Attack repeated for 24 hours	2020-03-03 19:07:37
196.52.43.56	attackspam	Unauthorized connection attempt detected from IP address 196.52.43.56	2020-03-03 18:50:05
114.88.64.170	attack	SSH-bruteforce attempts	2020-03-03 19:20:58
94.102.51.8	attack	94.102.51.8 was recorded 25 times by 14 hosts attempting to connect to the following ports: 3702,123,60001. Incident counter (4h, 24h, all-time): 25, 68, 237	2020-03-03 18:50:40
134.209.109.246	attack	$f2bV_matches	2020-03-03 18:53:13
212.129.164.73	attackbots	Mar 3 11:34:16 MK-Soft-VM5 sshd[31506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.164.73 Mar 3 11:34:17 MK-Soft-VM5 sshd[31506]: Failed password for invalid user Ronald from 212.129.164.73 port 59829 ssh2 ...	2020-03-03 19:24:04
95.58.76.57	attackspam	Email rejected due to spam filtering	2020-03-03 19:27:09
220.149.231.165	attackspambots	Lines containing failures of 220.149.231.165 Mar 2 15:12:22 www sshd[28405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.149.231.165 user=mysql Mar 2 15:12:24 www sshd[28405]: Failed password for mysql from 220.149.231.165 port 39348 ssh2 Mar 2 15:12:24 www sshd[28405]: Received disconnect from 220.149.231.165 port 39348:11: Normal Shutdown [preauth] Mar 2 15:12:24 www sshd[28405]: Disconnected from authenticating user mysql 220.149.231.165 port 39348 [preauth] Mar 2 15:15:47 www sshd[28761]: Invalid user nimara from 220.149.231.165 port 37024 Mar 2 15:15:47 www sshd[28761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.149.231.165 Mar 2 15:15:50 www sshd[28761]: Failed password for invalid user nimara from 220.149.231.165 port 37024 ssh2 Mar 2 15:15:50 www sshd[28761]: Received disconnect from 220.149.231.165 port 37024:11: Normal Shutdown [preauth] Mar 2 15:15:50 www........ ------------------------------	2020-03-03 19:19:12
156.0.66.241	attack	Port 22 Scan, PTR: PTR record not found	2020-03-03 19:15:28
112.35.27.97	attackspam	Mar 3 00:55:09 hpm sshd\[9736\]: Invalid user chenhaixin from 112.35.27.97 Mar 3 00:55:09 hpm sshd\[9736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.27.97 Mar 3 00:55:10 hpm sshd\[9736\]: Failed password for invalid user chenhaixin from 112.35.27.97 port 46934 ssh2 Mar 3 00:59:25 hpm sshd\[10040\]: Invalid user lingqi from 112.35.27.97 Mar 3 00:59:25 hpm sshd\[10040\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.27.97	2020-03-03 19:08:16
118.70.52.43	attack	Email rejected due to spam filtering	2020-03-03 19:31:18

Recently Reported IPs

106.54.79.19	106.54.86.126	106.54.93.239	106.54.87.67
106.54.82.163	106.40.241.148	106.54.98.138	106.54.96.199
106.54.97.154	106.55.15.244	106.55.148.166	106.55.153.76
106.55.156.47	106.55.166.138	106.55.168.21	106.55.18.230
106.55.22.18	106.55.174.13	106.55.20.176	106.55.240.34