106.54.97.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Aug 29 08:14:10 vmd36147 sshd[23184]: Failed password for root from 106.54.97.55 port 40452 ssh2 Aug 29 08:19:15 vmd36147 sshd[1579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55 ...	2020-08-29 14:26:02
attack	$f2bV_matches	2020-08-28 16:18:00
attackspam	2020-08-09T06:04:10.956600hostname sshd[8939]: Failed password for root from 106.54.97.55 port 40094 ssh2 2020-08-09T06:05:54.736642hostname sshd[9600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55 user=root 2020-08-09T06:05:55.991938hostname sshd[9600]: Failed password for root from 106.54.97.55 port 57108 ssh2 ...	2020-08-09 08:21:43
attackspambots	Jul 30 11:10:54 pkdns2 sshd\[13895\]: Invalid user xbyang from 106.54.97.55Jul 30 11:10:56 pkdns2 sshd\[13895\]: Failed password for invalid user xbyang from 106.54.97.55 port 33090 ssh2Jul 30 11:15:28 pkdns2 sshd\[14107\]: Invalid user thomas from 106.54.97.55Jul 30 11:15:30 pkdns2 sshd\[14107\]: Failed password for invalid user thomas from 106.54.97.55 port 53764 ssh2Jul 30 11:20:13 pkdns2 sshd\[14325\]: Invalid user yzy from 106.54.97.55Jul 30 11:20:15 pkdns2 sshd\[14325\]: Failed password for invalid user yzy from 106.54.97.55 port 46206 ssh2 ...	2020-07-30 16:42:38
attackspam	detected by Fail2Ban	2020-07-23 05:03:55
attackspam	Jul 4 21:49:48 eventyay sshd[17508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55 Jul 4 21:49:49 eventyay sshd[17508]: Failed password for invalid user james from 106.54.97.55 port 38648 ssh2 Jul 4 21:51:02 eventyay sshd[17554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55 ...	2020-07-05 03:52:39
attackbots	Jul 4 02:27:56 lnxded63 sshd[12964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55	2020-07-04 12:16:20
attack	Jun 26 08:03:08 buvik sshd[15079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.55 Jun 26 08:03:10 buvik sshd[15079]: Failed password for invalid user pub from 106.54.97.55 port 35030 ssh2 Jun 26 08:05:28 buvik sshd[15472]: Invalid user pavbras from 106.54.97.55 ...	2020-06-26 14:59:26
attackbotsspam	$f2bV_matches	2020-06-08 13:57:00
attackbotsspam	$f2bV_matches	2020-05-07 16:13:35
attackspambots	5x Failed Password	2020-04-13 06:10:56
attackspambots	Mar 28 07:44:22 hosting180 sshd[25682]: Invalid user test from 106.54.97.55 port 43004 ...	2020-03-28 15:45:37

Comments on same subnet:

IP	Type	Details	Datetime
106.54.97.214	attack	SSH Login Bruteforce	2020-04-04 04:53:20
106.54.97.214	attackspambots	Mar 17 20:21:12 ovpn sshd\[26732\]: Invalid user hsqldb from 106.54.97.214 Mar 17 20:21:12 ovpn sshd\[26732\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Mar 17 20:21:14 ovpn sshd\[26732\]: Failed password for invalid user hsqldb from 106.54.97.214 port 47888 ssh2 Mar 17 20:31:03 ovpn sshd\[10093\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 user=root Mar 17 20:31:05 ovpn sshd\[10093\]: Failed password for root from 106.54.97.214 port 57736 ssh2	2020-03-18 04:41:31
106.54.97.214	attackspam	Mar 16 00:47:05 server sshd\[12403\]: Failed password for root from 106.54.97.214 port 58066 ssh2 Mar 16 10:15:39 server sshd\[21359\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 user=root Mar 16 10:15:41 server sshd\[21359\]: Failed password for root from 106.54.97.214 port 34872 ssh2 Mar 16 10:47:26 server sshd\[28410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 user=root Mar 16 10:47:29 server sshd\[28410\]: Failed password for root from 106.54.97.214 port 33420 ssh2 ...	2020-03-16 17:56:47
106.54.97.214	attack	Feb 27 10:01:06 MK-Soft-VM6 sshd[11940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Feb 27 10:01:07 MK-Soft-VM6 sshd[11940]: Failed password for invalid user vagrant from 106.54.97.214 port 53054 ssh2 ...	2020-02-27 17:40:47
106.54.97.214	attack	Unauthorized connection attempt detected from IP address 106.54.97.214 to port 2220 [J]	2020-02-02 15:47:57
106.54.97.214	attackbots	Unauthorized connection attempt detected from IP address 106.54.97.214 to port 2220 [J]	2020-01-23 00:01:00
106.54.97.214	attackbotsspam	Jan 21 19:24:31 server sshd\[20045\]: Invalid user ubuntu from 106.54.97.214 Jan 21 19:24:31 server sshd\[20045\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Jan 21 19:24:33 server sshd\[20045\]: Failed password for invalid user ubuntu from 106.54.97.214 port 57566 ssh2 Jan 21 19:36:45 server sshd\[23361\]: Invalid user send from 106.54.97.214 Jan 21 19:36:45 server sshd\[23361\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 ...	2020-01-22 02:40:27
106.54.97.214	attackspambots	Jan 10 13:42:27 server sshd\[25745\]: Invalid user pf from 106.54.97.214 Jan 10 13:42:27 server sshd\[25745\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Jan 10 13:42:29 server sshd\[25745\]: Failed password for invalid user pf from 106.54.97.214 port 42958 ssh2 Jan 10 15:52:46 server sshd\[26173\]: Invalid user foz from 106.54.97.214 Jan 10 15:52:46 server sshd\[26173\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 ...	2020-01-11 03:50:31
106.54.97.214	attackspambots	Jan 3 14:31:14 localhost sshd\[3252\]: Invalid user pruebas from 106.54.97.214 port 39706 Jan 3 14:31:14 localhost sshd\[3252\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Jan 3 14:31:16 localhost sshd\[3252\]: Failed password for invalid user pruebas from 106.54.97.214 port 39706 ssh2	2020-01-04 03:07:46
106.54.97.214	attack	Dec 27 09:36:12 h2177944 sshd\[21338\]: Invalid user beque from 106.54.97.214 port 33698 Dec 27 09:36:12 h2177944 sshd\[21338\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Dec 27 09:36:14 h2177944 sshd\[21338\]: Failed password for invalid user beque from 106.54.97.214 port 33698 ssh2 Dec 27 09:40:01 h2177944 sshd\[21466\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 user=root ...	2019-12-27 16:54:13
106.54.97.237	attackbotsspam	Dec 26 09:49:17 ns382633 sshd\[30760\]: Invalid user padula from 106.54.97.237 port 38402 Dec 26 09:49:17 ns382633 sshd\[30760\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.237 Dec 26 09:49:18 ns382633 sshd\[30760\]: Failed password for invalid user padula from 106.54.97.237 port 38402 ssh2 Dec 26 10:05:13 ns382633 sshd\[1639\]: Invalid user ko from 106.54.97.237 port 57892 Dec 26 10:05:13 ns382633 sshd\[1639\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.237	2019-12-26 21:24:37
106.54.97.214	attack	Dec 23 01:57:13 ns381471 sshd[2146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Dec 23 01:57:14 ns381471 sshd[2146]: Failed password for invalid user wwwrun from 106.54.97.214 port 54564 ssh2	2019-12-23 08:57:37
106.54.97.237	attackbotsspam	$f2bV_matches	2019-12-22 17:12:39
106.54.97.214	attackspambots	Dec 20 05:51:12 kapalua sshd\[32475\]: Invalid user hatmaker from 106.54.97.214 Dec 20 05:51:12 kapalua sshd\[32475\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Dec 20 05:51:14 kapalua sshd\[32475\]: Failed password for invalid user hatmaker from 106.54.97.214 port 60102 ssh2 Dec 20 05:56:13 kapalua sshd\[471\]: Invalid user nkinyanjui from 106.54.97.214 Dec 20 05:56:13 kapalua sshd\[471\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214	2019-12-21 02:39:05
106.54.97.214	attackspam	Dec 13 18:48:12 hanapaa sshd\[14034\]: Invalid user rodica from 106.54.97.214 Dec 13 18:48:12 hanapaa sshd\[14034\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214 Dec 13 18:48:14 hanapaa sshd\[14034\]: Failed password for invalid user rodica from 106.54.97.214 port 33800 ssh2 Dec 13 18:56:12 hanapaa sshd\[14716\]: Invalid user branscombe from 106.54.97.214 Dec 13 18:56:12 hanapaa sshd\[14716\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.97.214	2019-12-14 13:10:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.97.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31598
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.97.55.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032801 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 28 15:45:30 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 55.97.54.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.97.54.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.168.142.29	attack	Time: Mon Sep 21 16:16:30 2020 +0200 IP: 68.168.142.29 (US/United States/68.168.142.29.16clouds.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 21 15:59:59 3-1 sshd[45536]: Failed password for root from 68.168.142.29 port 33232 ssh2 Sep 21 16:10:43 3-1 sshd[46595]: Invalid user user from 68.168.142.29 port 38250 Sep 21 16:10:45 3-1 sshd[46595]: Failed password for invalid user user from 68.168.142.29 port 38250 ssh2 Sep 21 16:16:25 3-1 sshd[46969]: Invalid user nagios from 68.168.142.29 port 52066 Sep 21 16:16:27 3-1 sshd[46969]: Failed password for invalid user nagios from 68.168.142.29 port 52066 ssh2	2020-09-22 00:50:18
81.213.243.217	attackbots	Unauthorized connection attempt from IP address 81.213.243.217 on Port 445(SMB)	2020-09-22 00:36:56
119.190.64.150	attack	Port probing on unauthorized port 23	2020-09-22 00:43:35
122.117.211.102	attackbots	Port Scan detected! ...	2020-09-22 00:40:00
111.206.250.203	attackbotsspam	IP 111.206.250.203 attacked honeypot on port: 8000 at 9/20/2020 10:11:44 PM	2020-09-22 00:53:06
42.2.180.83	attackspambots	Sep 20 17:00:08 scw-focused-cartwright sshd[23177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.2.180.83 Sep 20 17:00:10 scw-focused-cartwright sshd[23177]: Failed password for invalid user user from 42.2.180.83 port 36855 ssh2	2020-09-22 01:01:50
185.176.27.34	attack	scans 13 times in preceeding hours on the ports (in chronological order) 17298 17392 17392 17393 17582 17581 17580 17597 17595 17596 17690 17691 17689 resulting in total of 105 scans from 185.176.27.0/24 block.	2020-09-22 00:48:59
68.183.23.6	attackbots	Invalid user ubnt from 68.183.23.6 port 51594	2020-09-22 00:44:03
179.32.174.213	attack	Sep 20 19:00:18 mellenthin postfix/smtpd[11972]: NOQUEUE: reject: RCPT from unknown[179.32.174.213]: 554 5.7.1 Service unavailable; Client host [179.32.174.213] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/179.32.174.213 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[179.32.174.213]>	2020-09-22 00:49:24
212.87.173.34	attack	Auto Detect Rule! proto TCP (SYN), 212.87.173.34:29532->gjan.info:23, len 40	2020-09-22 00:36:10
218.249.73.161	attackbotsspam	Automatic report - Banned IP Access	2020-09-22 00:34:01
64.90.40.100	attackbotsspam	64.90.40.100 - - [21/Sep/2020:05:04:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2307 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.90.40.100 - - [21/Sep/2020:05:04:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 64.90.40.100 - - [21/Sep/2020:05:04:42 +0100] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-22 00:33:30
218.58.146.35	attack	Auto Detect Rule! proto TCP (SYN), 218.58.146.35:13883->gjan.info:23, len 40	2020-09-22 00:21:48
31.31.19.141	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-22 00:59:23
103.199.136.48	attackspam	Unauthorized connection attempt from IP address 103.199.136.48 on Port 445(SMB)	2020-09-22 00:55:23

Recently Reported IPs

178.77.243.2	188.166.34.207	106.13.82.151	40.73.26.241
111.42.67.49	52.90.79.15	178.92.46.18	181.115.249.180
183.82.57.143	103.63.2.211	14.253.232.205	62.234.187.137
106.76.85.156	181.48.68.238	220.161.81.131	113.183.105.146
197.248.16.155	49.151.206.73	180.150.230.254	178.165.130.73