106.55.62.135 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.55.62.175	attack	2020-07-05T20:35:35+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-07-06 04:00:06
106.55.62.175	attack	Jun 30 06:22:06 ip-172-31-62-245 sshd\[5166\]: Failed password for root from 106.55.62.175 port 34566 ssh2\ Jun 30 06:24:23 ip-172-31-62-245 sshd\[5168\]: Invalid user charis from 106.55.62.175\ Jun 30 06:24:25 ip-172-31-62-245 sshd\[5168\]: Failed password for invalid user charis from 106.55.62.175 port 36060 ssh2\ Jun 30 06:26:51 ip-172-31-62-245 sshd\[5227\]: Failed password for root from 106.55.62.175 port 37586 ssh2\ Jun 30 06:29:14 ip-172-31-62-245 sshd\[5235\]: Invalid user test from 106.55.62.175\	2020-06-30 15:33:50

Type

Details

Datetime

106.55.62.175

attack

2020-07-05T20:35:35+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)

2020-07-06 04:00:06

106.55.62.175

attack

Jun 30 06:22:06 ip-172-31-62-245 sshd\[5166\]: Failed password for root from 106.55.62.175 port 34566 ssh2\
Jun 30 06:24:23 ip-172-31-62-245 sshd\[5168\]: Invalid user charis from 106.55.62.175\
Jun 30 06:24:25 ip-172-31-62-245 sshd\[5168\]: Failed password for invalid user charis from 106.55.62.175 port 36060 ssh2\
Jun 30 06:26:51 ip-172-31-62-245 sshd\[5227\]: Failed password for root from 106.55.62.175 port 37586 ssh2\
Jun 30 06:29:14 ip-172-31-62-245 sshd\[5235\]: Invalid user test from 106.55.62.175\

2020-06-30 15:33:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.55.62.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40939
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.55.62.135.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 03:33:16 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 135.62.55.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 135.62.55.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.90.226.219	attackspam	[Thu Jan 16 06:08:14.490899 2020] [access_compat:error] [pid 1775] [client 103.90.226.219:59918] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php, referer: http://learnargentinianspanish.com/wp-login.php ...	2020-03-04 01:25:58
103.21.163.84	attackspambots	Dec 31 23:21:08 mercury wordpress(www.learnargentinianspanish.com)[8643]: XML-RPC authentication attempt for unknown user chris from 103.21.163.84 ...	2020-03-04 01:59:36
107.189.11.193	attackspambots	Port 22 (SSH) access denied	2020-03-04 02:01:56
106.105.70.125	attack	Dec 22 23:12:19 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=106.105.70.125 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 ...	2020-03-04 01:23:44
162.241.211.155	attackspam	suspicious action Tue, 03 Mar 2020 10:23:37 -0300	2020-03-04 01:22:55
165.22.48.169	attackspam	Mar 3 18:34:00 debian-2gb-nbg1-2 kernel: \[5516018.577747\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.48.169 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=46650 PROTO=TCP SPT=56832 DPT=2377 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-04 01:43:41
36.90.63.37	attackbots	REQUESTED PAGE: /wp-admin/admin.php?page=newsletters-history&wpmlmethod=exportdownload&file=../wp-config.php	2020-03-04 01:47:37
203.229.246.118	attackbots	Mar 4 00:08:56 webhost01 sshd[29842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.229.246.118 Mar 4 00:08:59 webhost01 sshd[29842]: Failed password for invalid user ftpuser from 203.229.246.118 port 12010 ssh2 ...	2020-03-04 01:43:20
140.246.162.109	attackspambots	Feb 13 16:20:16 mercury smtpd[17355]: 4ea54c97762d92ea smtp event=failed-command address=140.246.162.109 host=140.246.162.109 command="AUTH LOGIN" result="503 5.5.1 Invalid command: Command not supported" ...	2020-03-04 01:36:10
138.201.199.113	attackspambots	Jan 29 16:11:46 mercury smtpd[1170]: edb6daf5c4fbdf12 smtp event=failed-command address=138.201.199.113 host=ts02.dc-haus.com command="RCPT to:" result="550 Invalid recipient" ...	2020-03-04 01:38:50
181.48.7.146	attackspam	REQUESTED PAGE: /wp-admin/admin.php?page=miwoftp&option=com_miwoftp&action=download&item=../wp-config.php&order=name&srt=yes	2020-03-04 01:55:22
123.148.211.146	attackbots	123.148.211.146 - - [13/Dec/2019:07:24:05 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 123.148.211.146 - - [13/Dec/2019:07:24:06 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" ...	2020-03-04 01:41:02
2.133.198.97	attackbots	Email rejected due to spam filtering	2020-03-04 01:28:51
2.135.222.2	attackspambots	20/3/3@08:23:30: FAIL: Alarm-Network address from=2.135.222.2 ...	2020-03-04 01:37:14
159.192.121.240	attackspam	Nov 28 05:18:49 mercury auth[24656]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=159.192.121.240 ...	2020-03-04 01:53:15

Recently Reported IPs

190.92.82.126	223.89.38.76	190.210.166.140	94.142.51.44
50.39.102.158	187.220.96.126	114.33.68.41	123.9.87.122
42.192.206.111	77.104.110.2	201.156.22.67	217.255.161.150
177.38.153.96	47.97.215.94	204.62.60.234	42.122.20.95
95.216.181.107	120.86.253.178	144.178.141.152	103.94.133.93