Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
k+ssh-bruteforce
2020-08-07 04:27:47
attackbotsspam
Invalid user hyh from 106.55.4.113 port 46138
2020-08-02 15:26:28
attack
SSH Brute Force
2020-07-29 16:42:12
attackspambots
2020-07-17T16:07:22.751063hostname sshd[105874]: Failed password for invalid user deploy from 106.55.4.113 port 53968 ssh2
...
2020-07-18 03:22:34
attack
Jul  5 06:28:29 lnxmysql61 sshd[26054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
Jul  5 06:28:29 lnxmysql61 sshd[26054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
2020-07-05 12:51:10
attack
2020-06-25T05:49:44.600561shield sshd\[18858\]: Invalid user hl from 106.55.4.113 port 33158
2020-06-25T05:49:44.604202shield sshd\[18858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
2020-06-25T05:49:46.858916shield sshd\[18858\]: Failed password for invalid user hl from 106.55.4.113 port 33158 ssh2
2020-06-25T05:51:18.000701shield sshd\[19000\]: Invalid user testftp from 106.55.4.113 port 51226
2020-06-25T05:51:18.004857shield sshd\[19000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
2020-06-25 17:29:17
attackbots
Jun 12 08:14:46 journals sshd\[94182\]: Invalid user zhuangzhenhua123 from 106.55.4.113
Jun 12 08:14:46 journals sshd\[94182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
Jun 12 08:14:49 journals sshd\[94182\]: Failed password for invalid user zhuangzhenhua123 from 106.55.4.113 port 44338 ssh2
Jun 12 08:19:12 journals sshd\[94594\]: Invalid user 123+456+789 from 106.55.4.113
Jun 12 08:19:12 journals sshd\[94594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.113
...
2020-06-12 15:57:51
Comments on same subnet:
IP Type Details Datetime
106.55.41.76 attackspambots
Sep  9 10:09:26 vm0 sshd[2417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.41.76
Sep  9 10:09:28 vm0 sshd[2417]: Failed password for invalid user ingrid from 106.55.41.76 port 36898 ssh2
...
2020-09-09 19:52:00
106.55.41.76 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-09-09 13:50:20
106.55.41.76 attack
Sep  8 19:01:52 vps333114 sshd[17986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.41.76
Sep  8 19:01:54 vps333114 sshd[17986]: Failed password for invalid user oracle from 106.55.41.76 port 36586 ssh2
...
2020-09-09 06:01:55
106.55.47.184 attackspambots
Aug 29 22:28:17 ncomp sshd[18224]: Invalid user jeffrey from 106.55.47.184
Aug 29 22:28:17 ncomp sshd[18224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.47.184
Aug 29 22:28:17 ncomp sshd[18224]: Invalid user jeffrey from 106.55.47.184
Aug 29 22:28:19 ncomp sshd[18224]: Failed password for invalid user jeffrey from 106.55.47.184 port 60358 ssh2
2020-08-30 04:58:08
106.55.47.184 attackspambots
Brute force SMTP login attempted.
...
2020-08-25 14:28:00
106.55.47.184 attack
Aug 21 09:58:09 *hidden* sshd[7852]: Failed password for invalid user arkserver from 106.55.47.184 port 33492 ssh2 Aug 21 10:09:24 *hidden* sshd[10029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.47.184 user=root Aug 21 10:09:26 *hidden* sshd[10029]: Failed password for *hidden* from 106.55.47.184 port 49334 ssh2
2020-08-23 05:30:04
106.55.47.184 attackbots
Aug 18 06:20:19 ws24vmsma01 sshd[142117]: Failed password for root from 106.55.47.184 port 52196 ssh2
...
2020-08-18 19:09:32
106.55.4.103 attack
Aug 12 23:49:01 cosmoit sshd[26431]: Failed password for root from 106.55.4.103 port 38772 ssh2
2020-08-13 07:16:19
106.55.4.103 attack
Aug 10 20:52:27 abendstille sshd\[20787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.103  user=root
Aug 10 20:52:29 abendstille sshd\[20787\]: Failed password for root from 106.55.4.103 port 57564 ssh2
Aug 10 20:55:54 abendstille sshd\[23884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.103  user=root
Aug 10 20:55:56 abendstille sshd\[23884\]: Failed password for root from 106.55.4.103 port 34924 ssh2
Aug 10 20:59:19 abendstille sshd\[27348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.4.103  user=root
...
2020-08-11 03:00:38
106.55.41.76 attackspam
Aug  3 08:08:02 vps46666688 sshd[22095]: Failed password for root from 106.55.41.76 port 49538 ssh2
...
2020-08-03 19:20:20
106.55.4.103 attackbotsspam
Invalid user vbx from 106.55.4.103 port 59576
2020-07-19 03:33:57
106.55.4.103 attackspambots
$f2bV_matches
2020-07-11 06:22:38
106.55.45.75 attack
port scan and connect, tcp 6379 (redis)
2020-07-08 14:46:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.55.4.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.55.4.113.			IN	A

;; AUTHORITY SECTION:
.			480	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061200 1800 900 604800 86400

;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 12 15:57:45 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 113.4.55.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.4.55.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
107.171.212.176 attackbotsspam
$f2bV_matches
2019-10-21 22:41:32
181.10.210.99 attackbots
2019-10-21 06:42:22 H=host99.181-10-210.telecom.net.ar [181.10.210.99]:42451 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-10-21 06:42:22 H=host99.181-10-210.telecom.net.ar [181.10.210.99]:42451 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-10-21 06:42:22 H=host99.181-10-210.telecom.net.ar [181.10.210.99]:42451 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...
2019-10-21 23:05:03
124.156.172.11 attackspambots
Oct 21 16:43:25 SilenceServices sshd[11494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.172.11
Oct 21 16:43:27 SilenceServices sshd[11494]: Failed password for invalid user admin from 124.156.172.11 port 41918 ssh2
Oct 21 16:48:06 SilenceServices sshd[12683]: Failed password for root from 124.156.172.11 port 54070 ssh2
2019-10-21 23:04:10
134.255.31.150 attackspam
Automatic report - Port Scan Attack
2019-10-21 23:01:53
134.209.4.129 attack
RDP_Brute_Force
2019-10-21 23:08:06
222.186.173.215 attackspambots
Oct 21 10:06:44 TORMINT sshd\[23999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
Oct 21 10:06:45 TORMINT sshd\[23999\]: Failed password for root from 222.186.173.215 port 53026 ssh2
Oct 21 10:07:17 TORMINT sshd\[24009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
...
2019-10-21 22:23:52
125.26.247.170 attackbotsspam
LGS,WP GET /wp-login.php
2019-10-21 22:48:58
111.231.94.138 attackbotsspam
Repeated brute force against a port
2019-10-21 22:49:16
5.44.37.211 attack
2019-10-21 x@x
2019-10-21 12:52:56 unexpected disconnection while reading SMTP command from ([5.44.37.211]) [5.44.37.211]:37320 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=5.44.37.211
2019-10-21 22:50:02
173.230.149.181 attackspam
Lines containing failures of 173.230.149.181
Oct 21 13:36:13 MAKserver06 sshd[28443]: Invalid user ubuntu from 173.230.149.181 port 55368
Oct 21 13:36:13 MAKserver06 sshd[28443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.230.149.181 
Oct 21 13:36:16 MAKserver06 sshd[28443]: Failed password for invalid user ubuntu from 173.230.149.181 port 55368 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=173.230.149.181
2019-10-21 22:58:51
146.185.25.171 attackspam
Port Scan
2019-10-21 22:36:54
45.12.204.42 attackbotsspam
45.12.204.42 has been banned for [spam]
...
2019-10-21 22:56:07
51.68.139.151 attack
Oct 21 16:18:29 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2Oct 21 16:18:32 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2Oct 21 16:18:34 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2Oct 21 16:18:38 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2Oct 21 16:18:40 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2Oct 21 16:18:43 rotator sshd\[21098\]: Failed password for root from 51.68.139.151 port 43152 ssh2
...
2019-10-21 22:43:18
222.186.180.17 attack
Oct 21 17:35:54 server sshd\[13513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
Oct 21 17:35:55 server sshd\[13513\]: Failed password for root from 222.186.180.17 port 55258 ssh2
Oct 21 17:36:00 server sshd\[13513\]: Failed password for root from 222.186.180.17 port 55258 ssh2
Oct 21 17:36:04 server sshd\[13513\]: Failed password for root from 222.186.180.17 port 55258 ssh2
Oct 21 17:36:09 server sshd\[13513\]: Failed password for root from 222.186.180.17 port 55258 ssh2
...
2019-10-21 22:36:27
66.70.189.209 attackspam
Oct 21 10:45:15 xtremcommunity sshd\[746923\]: Invalid user mice123 from 66.70.189.209 port 48347
Oct 21 10:45:15 xtremcommunity sshd\[746923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.189.209
Oct 21 10:45:17 xtremcommunity sshd\[746923\]: Failed password for invalid user mice123 from 66.70.189.209 port 48347 ssh2
Oct 21 10:49:22 xtremcommunity sshd\[746975\]: Invalid user Cent0s1234 from 66.70.189.209 port 39674
Oct 21 10:49:22 xtremcommunity sshd\[746975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.189.209
...
2019-10-21 23:09:12

Recently Reported IPs

169.149.210.150 202.137.141.109 95.7.239.172 49.235.196.250
37.152.183.18 188.230.241.13 5.253.86.187 40.85.206.253
124.196.11.6 13.233.91.146 183.105.115.204 122.117.11.140
182.75.133.108 34.204.189.232 123.203.177.229 171.103.37.114
176.240.187.59 34.239.166.25 23.24.132.13 54.153.84.168