120.55.54.26 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Aliyun Computing Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Unauthorized connection attempt detected from IP address 120.55.54.26 to port 1433 [T]	2020-01-27 05:06:25
attack	Unauthorized connection attempt from IP address 120.55.54.26 on Port 445(SMB)	2020-01-06 22:08:14

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.55.54.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.55.54.26.			IN	A

;; AUTHORITY SECTION:
.			308	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010600 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 06 22:08:10 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 26.54.55.120.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 26.54.55.120.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.114.12.244	attack	Aug 27 14:53:02 vm1 sshd[7634]: Failed password for root from 167.114.12.244 port 56568 ssh2 ...	2020-08-27 23:42:53
94.102.51.95	attackbots	TCP (SYN) 94.102.51.95:59358 -> port 41104, len 44	2020-08-27 23:43:58
105.235.136.126	attackbotsspam	Unauthorized connection attempt from IP address 105.235.136.126 on Port 445(SMB)	2020-08-27 23:12:13
125.72.106.79	attackbotsspam	SSH BruteForce Attack	2020-08-27 23:32:37
185.112.32.239	attackspambots	2020-08-27T15:25:56.435592shield sshd\[12741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.112.32.239 user=root 2020-08-27T15:25:58.716738shield sshd\[12741\]: Failed password for root from 185.112.32.239 port 51940 ssh2 2020-08-27T15:30:03.608145shield sshd\[13877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.112.32.239 user=root 2020-08-27T15:30:05.462831shield sshd\[13877\]: Failed password for root from 185.112.32.239 port 57044 ssh2 2020-08-27T15:34:20.981567shield sshd\[14730\]: Invalid user mtk from 185.112.32.239 port 33912	2020-08-27 23:42:20
112.85.42.94	attackspam	Lots of Login attempts to root account	2020-08-27 23:17:01
58.247.111.70	attackspambots	27.08.2020 15:01:16 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F	2020-08-27 23:33:43
3.86.219.211	attackbotsspam	Wordpress-Fehler von ELinOX-ALM erkannt	2020-08-27 23:37:21
129.204.82.4	attack	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-08-27 23:13:29
175.24.100.238	attackbotsspam	Aug 27 13:34:04 plex-server sshd[437304]: Failed password for root from 175.24.100.238 port 38396 ssh2 Aug 27 13:37:49 plex-server sshd[438886]: Invalid user mph from 175.24.100.238 port 48100 Aug 27 13:37:49 plex-server sshd[438886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.100.238 Aug 27 13:37:49 plex-server sshd[438886]: Invalid user mph from 175.24.100.238 port 48100 Aug 27 13:37:51 plex-server sshd[438886]: Failed password for invalid user mph from 175.24.100.238 port 48100 ssh2 ...	2020-08-27 23:34:41
115.84.112.138	attackspam	Aug 25 23:36:40 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=115.84.112.138, lip=185.118.197.126, session= Aug 25 23:37:07 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=115.84.112.138, lip=185.118.197.126, session= Aug 25 23:37:11 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 1 attempts in 20 secs): user=, method=PLAIN, rip=115.84.112.138, lip=185.118.197.126, session= Aug 25 23:38:10 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=115.84.112.138, lip=185.118.197.126, session= Aug 25 23:43:27 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=115.84.112.138, li	2020-08-27 23:19:08
190.122.185.174	attack	Fail2Ban Ban Triggered HTTP Exploit Attempt	2020-08-27 23:11:53
156.146.41.129	attackbotsspam	Automatic report - Banned IP Access	2020-08-27 23:43:15
91.150.113.21	attackspambots	Unauthorized connection attempt from IP address 91.150.113.21 on Port 445(SMB)	2020-08-27 23:30:49
83.30.175.224	attackspambots	Attempts against non-existent wp-login	2020-08-27 23:03:16

Recently Reported IPs

90.178.26.64	36.153.0.229	113.180.106.24	49.232.153.51
24.64.3.69	95.58.93.26	190.125.185.167	187.81.87.203
189.5.45.61	3.127.220.17	113.220.18.7	32.253.222.214
132.161.91.242	36.2.183.25	252.235.250.31	225.74.173.174
63.100.56.43	133.235.44.32	123.30.50.67	16.164.223.114