Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
May 13 02:30:24 localhost sshd[215310]: Invalid user golflife from 106.54.114.164 port 38880
May 13 02:30:24 localhost sshd[215310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164 
May 13 02:30:24 localhost sshd[215310]: Invalid user golflife from 106.54.114.164 port 38880
May 13 02:30:26 localhost sshd[215310]: Failed password for invalid user golflife from 106.54.114.164 port 38880 ssh2
May 13 02:38:56 localhost sshd[216604]: Invalid user adminixxxr from 106.54.114.164 port 56714
May 13 02:38:56 localhost sshd[216604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164 
May 13 02:38:56 localhost sshd[216604]: Invalid user adminixxxr from 106.54.114.164 port 56714
May 13 02:38:59 localhost sshd[216604]: Failed password for invalid user adminixxxr from 106.54.114.164 port 56714 ssh2
May 13 02:40:51 localhost sshd[217789]: Invalid user vncuser from 106.54.114.164 po........
------------------------------
2020-05-26 23:52:08
attackbots
2020-05-16T02:55:31.034171shield sshd\[1088\]: Invalid user postgres from 106.54.114.164 port 40974
2020-05-16T02:55:31.043713shield sshd\[1088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164
2020-05-16T02:55:32.674643shield sshd\[1088\]: Failed password for invalid user postgres from 106.54.114.164 port 40974 ssh2
2020-05-16T02:57:41.077478shield sshd\[1590\]: Invalid user wocloud from 106.54.114.164 port 36258
2020-05-16T02:57:41.091622shield sshd\[1590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164
2020-05-16 19:53:41
attackspam
Lines containing failures of 106.54.114.164
May 11 12:44:04 *** sshd[113908]: Invalid user test from 106.54.114.164 port 44690
May 11 12:44:04 *** sshd[113908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164
May 11 12:44:06 *** sshd[113908]: Failed password for invalid user test from 106.54.114.164 port 44690 ssh2
May 11 12:44:07 *** sshd[113908]: Received disconnect from 106.54.114.164 port 44690:11: Bye Bye [preauth]
May 11 12:44:07 *** sshd[113908]: Disconnected from invalid user test 106.54.114.164 port 44690 [preauth]
May 11 12:48:55 *** sshd[114227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.164  user=r.r
May 11 12:48:57 *** sshd[114227]: Failed password for r.r from 106.54.114.164 port 56226 ssh2
May 11 12:48:58 *** sshd[114227]: Received disconnect from 106.54.114.164 port 56226:11: Bye Bye [preauth]
May 11 12:48:58 *** sshd[114227]: Disconnected from ........
------------------------------
2020-05-12 00:15:21
Comments on same subnet:
IP Type Details Datetime
106.54.114.208 attack
Sep  4 08:57:20 ns37 sshd[27183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208
2020-09-04 15:21:56
106.54.114.208 attack
Sep  4 01:14:43 vpn01 sshd[12925]: Failed password for root from 106.54.114.208 port 57816 ssh2
...
2020-09-04 07:45:03
106.54.114.208 attackbots
Aug 30 16:32:48 ny01 sshd[16736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208
Aug 30 16:32:50 ny01 sshd[16736]: Failed password for invalid user wangqiang from 106.54.114.208 port 52504 ssh2
Aug 30 16:37:57 ny01 sshd[17317]: Failed password for root from 106.54.114.208 port 52904 ssh2
2020-08-31 04:46:56
106.54.114.208 attackspambots
Tried sshing with brute force.
2020-08-22 02:52:10
106.54.114.248 attackbots
Ssh brute force
2020-08-18 08:03:23
106.54.114.208 attackbotsspam
Aug 16 18:21:19 marvibiene sshd[6301]: Invalid user liuhaoran from 106.54.114.208 port 56006
Aug 16 18:21:19 marvibiene sshd[6301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208
Aug 16 18:21:19 marvibiene sshd[6301]: Invalid user liuhaoran from 106.54.114.208 port 56006
Aug 16 18:21:22 marvibiene sshd[6301]: Failed password for invalid user liuhaoran from 106.54.114.208 port 56006 ssh2
2020-08-17 03:14:46
106.54.114.208 attack
Aug 13 07:21:34 eventyay sshd[16405]: Failed password for root from 106.54.114.208 port 41888 ssh2
Aug 13 07:28:05 eventyay sshd[16511]: Failed password for root from 106.54.114.208 port 55920 ssh2
...
2020-08-13 17:53:57
106.54.114.248 attack
detected by Fail2Ban
2020-08-04 23:13:35
106.54.114.208 attackspambots
(sshd) Failed SSH login from 106.54.114.208 (CN/China/-): 5 in the last 3600 secs
2020-07-23 05:38:09
106.54.114.248 attackspambots
Jul 18 01:19:21 journals sshd\[129174\]: Invalid user user from 106.54.114.248
Jul 18 01:19:21 journals sshd\[129174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.248
Jul 18 01:19:23 journals sshd\[129174\]: Failed password for invalid user user from 106.54.114.248 port 56320 ssh2
Jul 18 01:24:51 journals sshd\[129825\]: Invalid user testftp from 106.54.114.248
Jul 18 01:24:51 journals sshd\[129825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.248
...
2020-07-18 06:32:27
106.54.114.208 attackbotsspam
Jul 10 11:26:04 lnxmysql61 sshd[7521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208
2020-07-10 17:59:53
106.54.114.248 attackbotsspam
2020-07-05T05:56:14+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-07-05 12:25:31
106.54.114.248 attackbotsspam
Jun 30 07:53:38 vpn01 sshd[7809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.248
Jun 30 07:53:39 vpn01 sshd[7809]: Failed password for invalid user faxbox from 106.54.114.248 port 47062 ssh2
...
2020-06-30 16:56:53
106.54.114.208 attack
Jun 29 21:33:06 gestao sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208 
Jun 29 21:33:08 gestao sshd[5086]: Failed password for invalid user training from 106.54.114.208 port 33438 ssh2
Jun 29 21:36:49 gestao sshd[5353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.114.208 
...
2020-06-30 05:34:04
106.54.114.248 attackspam
Invalid user tam from 106.54.114.248 port 51336
2020-06-20 14:09:00
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.114.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2715
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.114.164.			IN	A

;; AUTHORITY SECTION:
.			480	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051100 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 00:15:16 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 164.114.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 164.114.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
182.52.136.16 attackbotsspam
Unauthorized connection attempt from IP address 182.52.136.16 on Port 445(SMB)
2020-10-08 13:27:58
62.171.162.136 attack
Oct  8 06:31:57 sip sshd[1859990]: Invalid user huangxuanxuan from 62.171.162.136 port 43332
Oct  8 06:31:59 sip sshd[1859990]: Failed password for invalid user huangxuanxuan from 62.171.162.136 port 43332 ssh2
Oct  8 06:36:09 sip sshd[1860022]: Invalid user hwanggs from 62.171.162.136 port 48858
...
2020-10-08 13:05:01
111.231.215.244 attackspam
Oct  8 04:17:26 ourumov-web sshd\[23786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.215.244  user=root
Oct  8 04:17:28 ourumov-web sshd\[23786\]: Failed password for root from 111.231.215.244 port 64321 ssh2
Oct  8 04:28:18 ourumov-web sshd\[24511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.215.244  user=root
...
2020-10-08 12:55:11
67.216.193.100 attackbots
Oct  8 04:06:41 vm1 sshd[5180]: Failed password for root from 67.216.193.100 port 34158 ssh2
...
2020-10-08 12:46:07
88.121.22.235 attackbotsspam
SSH Brute-Force reported by Fail2Ban
2020-10-08 13:13:01
191.7.33.150 attack
 TCP (SYN) 191.7.33.150:28818 -> port 23, len 44
2020-10-08 13:04:28
90.127.136.228 attackbotsspam
Oct  8 06:33:52 sso sshd[18279]: Failed password for root from 90.127.136.228 port 47864 ssh2
...
2020-10-08 12:45:37
111.121.78.79 attackspam
Oct  8 00:24:41 host sshd\[11086\]: Invalid user dnsadrc from 111.121.78.79
Oct  8 00:24:41 host sshd\[11086\]: Failed password for invalid user dnsadrc from 111.121.78.79 port 8595 ssh2
Oct  8 00:25:53 host sshd\[11966\]: Failed password for root from 111.121.78.79 port 7211 ssh2
...
2020-10-08 13:26:00
210.12.130.161 attackspam
IP 210.12.130.161 attacked honeypot on port: 1433 at 10/7/2020 1:46:22 PM
2020-10-08 12:51:26
186.216.69.151 attackspam
$f2bV_matches
2020-10-08 13:16:14
146.56.198.229 attackspam
(sshd) Failed SSH login from 146.56.198.229 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  8 00:23:46 optimus sshd[15894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.56.198.229  user=root
Oct  8 00:23:48 optimus sshd[15894]: Failed password for root from 146.56.198.229 port 53856 ssh2
Oct  8 00:29:30 optimus sshd[17628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.56.198.229  user=root
Oct  8 00:29:32 optimus sshd[17628]: Failed password for root from 146.56.198.229 port 59302 ssh2
Oct  8 00:35:26 optimus sshd[19669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.56.198.229  user=root
2020-10-08 12:53:32
60.245.29.43 attackspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-10-08 13:00:57
27.77.237.200 attack
1602103617 - 10/08/2020 03:46:57 Host: localhost/27.77.237.200 Port: 23 TCP Blocked
...
2020-10-08 12:55:43
47.100.203.120 attack
Oct  8 05:48:33 pornomens sshd\[32267\]: Invalid user db2fenc1 from 47.100.203.120 port 42580
Oct  8 05:48:33 pornomens sshd\[32267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.100.203.120
Oct  8 05:48:35 pornomens sshd\[32267\]: Failed password for invalid user db2fenc1 from 47.100.203.120 port 42580 ssh2
...
2020-10-08 12:54:17
112.85.42.200 attackspam
Oct  8 06:50:32 santamaria sshd\[20297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200  user=root
Oct  8 06:50:34 santamaria sshd\[20297\]: Failed password for root from 112.85.42.200 port 18468 ssh2
Oct  8 06:50:43 santamaria sshd\[20297\]: Failed password for root from 112.85.42.200 port 18468 ssh2
...
2020-10-08 13:09:15

Recently Reported IPs

181.30.99.114 92.187.128.26 93.171.100.234 185.243.89.98
3.249.232.175 81.39.143.180 114.33.83.207 18.216.174.157
87.35.52.211 110.54.205.202 212.224.113.196 171.80.97.227
77.41.123.213 52.148.135.232 187.196.108.185 116.230.188.239
91.132.139.195 204.159.87.95 103.103.58.221 217.182.54.198