Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Invalid user maria from 106.54.117.51 port 58034
2020-09-19 16:06:20
attackspambots
Sep 18 18:57:33 haigwepa sshd[20387]: Failed password for root from 106.54.117.51 port 41798 ssh2
...
2020-09-19 07:41:00
attack
2020-08-29T18:26:14.111909abusebot-7.cloudsearch.cf sshd[10665]: Invalid user aneta from 106.54.117.51 port 32974
2020-08-29T18:26:14.119456abusebot-7.cloudsearch.cf sshd[10665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
2020-08-29T18:26:14.111909abusebot-7.cloudsearch.cf sshd[10665]: Invalid user aneta from 106.54.117.51 port 32974
2020-08-29T18:26:15.619863abusebot-7.cloudsearch.cf sshd[10665]: Failed password for invalid user aneta from 106.54.117.51 port 32974 ssh2
2020-08-29T18:33:08.116734abusebot-7.cloudsearch.cf sshd[10768]: Invalid user gwen from 106.54.117.51 port 60140
2020-08-29T18:33:08.120505abusebot-7.cloudsearch.cf sshd[10768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
2020-08-29T18:33:08.116734abusebot-7.cloudsearch.cf sshd[10768]: Invalid user gwen from 106.54.117.51 port 60140
2020-08-29T18:33:10.122609abusebot-7.cloudsearch.cf sshd[10768]: Failed p
...
2020-08-30 02:42:51
attackbots
Invalid user luan from 106.54.117.51 port 43464
2020-08-27 08:55:32
attack
Aug 25 05:25:54 serwer sshd\[5642\]: Invalid user zs from 106.54.117.51 port 34198
Aug 25 05:25:54 serwer sshd\[5642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Aug 25 05:25:57 serwer sshd\[5642\]: Failed password for invalid user zs from 106.54.117.51 port 34198 ssh2
...
2020-08-25 22:15:51
attackbots
Aug 18 10:29:19 ws24vmsma01 sshd[158421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Aug 18 10:29:21 ws24vmsma01 sshd[158421]: Failed password for invalid user ubuntu from 106.54.117.51 port 49728 ssh2
...
2020-08-19 00:14:33
attack
Aug 16 08:01:12 lukav-desktop sshd\[30223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51  user=root
Aug 16 08:01:14 lukav-desktop sshd\[30223\]: Failed password for root from 106.54.117.51 port 47616 ssh2
Aug 16 08:05:43 lukav-desktop sshd\[10768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51  user=root
Aug 16 08:05:45 lukav-desktop sshd\[10768\]: Failed password for root from 106.54.117.51 port 45824 ssh2
Aug 16 08:10:08 lukav-desktop sshd\[13735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51  user=root
2020-08-16 15:20:57
attackspam
Aug 13 08:01:36 * sshd[31419]: Failed password for root from 106.54.117.51 port 33266 ssh2
2020-08-13 15:29:36
attackspam
Aug  6 06:15:27 mockhub sshd[23851]: Failed password for root from 106.54.117.51 port 52638 ssh2
...
2020-08-07 04:40:24
attackbotsspam
2020-07-12T11:53:28.372854abusebot-8.cloudsearch.cf sshd[28249]: Invalid user tanx from 106.54.117.51 port 46030
2020-07-12T11:53:28.383259abusebot-8.cloudsearch.cf sshd[28249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
2020-07-12T11:53:28.372854abusebot-8.cloudsearch.cf sshd[28249]: Invalid user tanx from 106.54.117.51 port 46030
2020-07-12T11:53:30.686033abusebot-8.cloudsearch.cf sshd[28249]: Failed password for invalid user tanx from 106.54.117.51 port 46030 ssh2
2020-07-12T11:57:40.240018abusebot-8.cloudsearch.cf sshd[28297]: Invalid user paul from 106.54.117.51 port 33304
2020-07-12T11:57:40.249873abusebot-8.cloudsearch.cf sshd[28297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
2020-07-12T11:57:40.240018abusebot-8.cloudsearch.cf sshd[28297]: Invalid user paul from 106.54.117.51 port 33304
2020-07-12T11:57:41.478940abusebot-8.cloudsearch.cf sshd[28297]: Failed pass
...
2020-07-12 23:20:44
attackspam
Jul  7 14:09:41 plex-server sshd[526965]: Invalid user Jordan from 106.54.117.51 port 47894
Jul  7 14:09:41 plex-server sshd[526965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51 
Jul  7 14:09:41 plex-server sshd[526965]: Invalid user Jordan from 106.54.117.51 port 47894
Jul  7 14:09:42 plex-server sshd[526965]: Failed password for invalid user Jordan from 106.54.117.51 port 47894 ssh2
Jul  7 14:11:36 plex-server sshd[527069]: Invalid user jitendra from 106.54.117.51 port 35090
...
2020-07-07 23:12:34
attackspambots
Jun 26 18:55:41 ns392434 sshd[13394]: Invalid user appuser from 106.54.117.51 port 56136
Jun 26 18:55:41 ns392434 sshd[13394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Jun 26 18:55:41 ns392434 sshd[13394]: Invalid user appuser from 106.54.117.51 port 56136
Jun 26 18:55:44 ns392434 sshd[13394]: Failed password for invalid user appuser from 106.54.117.51 port 56136 ssh2
Jun 26 19:13:30 ns392434 sshd[13684]: Invalid user j from 106.54.117.51 port 51010
Jun 26 19:13:30 ns392434 sshd[13684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Jun 26 19:13:30 ns392434 sshd[13684]: Invalid user j from 106.54.117.51 port 51010
Jun 26 19:13:32 ns392434 sshd[13684]: Failed password for invalid user j from 106.54.117.51 port 51010 ssh2
Jun 26 19:21:14 ns392434 sshd[13828]: Invalid user jenkins from 106.54.117.51 port 38102
2020-06-27 03:26:03
attackbotsspam
$f2bV_matches
2020-06-21 23:00:07
attack
Jun 21 06:01:34 cdc sshd[6414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51 
Jun 21 06:01:36 cdc sshd[6414]: Failed password for invalid user xiaoxu from 106.54.117.51 port 47810 ssh2
2020-06-21 13:19:00
attackbots
Jun 20 07:51:48 [host] sshd[12549]: Invalid user s
Jun 20 07:51:49 [host] sshd[12549]: pam_unix(sshd:
Jun 20 07:51:51 [host] sshd[12549]: Failed passwor
2020-06-20 16:32:26
attackbots
May 11 02:28:58 server1 sshd\[16803\]: Failed password for invalid user robert1 from 106.54.117.51 port 60814 ssh2
May 11 02:32:58 server1 sshd\[19570\]: Invalid user common from 106.54.117.51
May 11 02:32:58 server1 sshd\[19570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51 
May 11 02:32:59 server1 sshd\[19570\]: Failed password for invalid user common from 106.54.117.51 port 33052 ssh2
May 11 02:37:05 server1 sshd\[22464\]: Invalid user admin from 106.54.117.51
...
2020-05-11 17:26:08
attackbots
$f2bV_matches
2020-04-23 17:43:53
attackspam
Mar 28 12:20:50 lanister sshd[12601]: Invalid user egc from 106.54.117.51
Mar 28 12:20:50 lanister sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Mar 28 12:20:50 lanister sshd[12601]: Invalid user egc from 106.54.117.51
Mar 28 12:20:53 lanister sshd[12601]: Failed password for invalid user egc from 106.54.117.51 port 58380 ssh2
2020-03-29 05:21:30
attackbotsspam
Invalid user rg from 106.54.117.51 port 43542
2020-03-25 17:02:48
attack
2020-03-07T16:10:39.155713linuxbox-skyline sshd[28914]: Invalid user newuser from 106.54.117.51 port 51206
...
2020-03-08 07:59:46
attack
Feb 22 05:48:53 srv-ubuntu-dev3 sshd[19846]: Invalid user zbl from 106.54.117.51
Feb 22 05:48:53 srv-ubuntu-dev3 sshd[19846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Feb 22 05:48:53 srv-ubuntu-dev3 sshd[19846]: Invalid user zbl from 106.54.117.51
Feb 22 05:48:56 srv-ubuntu-dev3 sshd[19846]: Failed password for invalid user zbl from 106.54.117.51 port 47096 ssh2
Feb 22 05:50:41 srv-ubuntu-dev3 sshd[20000]: Invalid user export from 106.54.117.51
Feb 22 05:50:41 srv-ubuntu-dev3 sshd[20000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.117.51
Feb 22 05:50:41 srv-ubuntu-dev3 sshd[20000]: Invalid user export from 106.54.117.51
Feb 22 05:50:43 srv-ubuntu-dev3 sshd[20000]: Failed password for invalid user export from 106.54.117.51 port 58004 ssh2
Feb 22 05:52:24 srv-ubuntu-dev3 sshd[20178]: Invalid user radio from 106.54.117.51
...
2020-02-22 14:46:32
attackspam
Unauthorized connection attempt detected from IP address 106.54.117.51 to port 2220 [J]
2020-02-02 08:02:21
Comments on same subnet:
IP Type Details Datetime
106.54.117.228 attack
scans once in preceeding hours on the ports (in chronological order) 6379 resulting in total of 2 scans from 106.52.0.0/15 - 106.54.0.0/16 block.
2020-05-07 02:51:42
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.117.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.117.51.			IN	A

;; AUTHORITY SECTION:
.			339	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020102 1800 900 604800 86400

;; Query time: 237 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 02 08:02:14 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 51.117.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.117.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
85.95.179.115 attackbotsspam
SSH Brute-Force attacks
2020-04-01 14:31:02
106.13.103.203 attack
Total attacks: 2
2020-04-01 14:39:42
13.82.194.95 attackbots
Suspicious access to SMTP/POP/IMAP services.
2020-04-01 15:13:37
67.205.183.158 attackspam
Lines containing failures of 67.205.183.158
Mar 31 19:23:48 shared02 sshd[23885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.183.158  user=r.r
Mar 31 19:23:49 shared02 sshd[23885]: Failed password for r.r from 67.205.183.158 port 35002 ssh2
Mar 31 19:23:50 shared02 sshd[23885]: Received disconnect from 67.205.183.158 port 35002:11: Bye Bye [preauth]
Mar 31 19:23:50 shared02 sshd[23885]: Disconnected from authenticating user r.r 67.205.183.158 port 35002 [preauth]
Mar 31 19:25:54 shared02 sshd[24877]: Invalid user test from 67.205.183.158 port 34566
Mar 31 19:25:54 shared02 sshd[24877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.183.158
Mar 31 19:25:56 shared02 sshd[24877]: Failed password for invalid user test from 67.205.183.158 port 34566 ssh2
Mar 31 19:25:56 shared02 sshd[24877]: Received disconnect from 67.205.183.158 port 34566:11: Bye Bye [preauth]
Mar 31 19:25:5........
------------------------------
2020-04-01 14:38:25
51.38.238.165 attackbots
Apr  1 06:55:05 vpn01 sshd[18762]: Failed password for root from 51.38.238.165 port 60650 ssh2
...
2020-04-01 14:44:11
222.252.30.117 attack
ssh brute force
2020-04-01 14:39:19
178.33.229.120 attackspambots
Apr  1 02:11:57 lanister sshd[29484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.229.120  user=root
Apr  1 02:11:58 lanister sshd[29484]: Failed password for root from 178.33.229.120 port 40340 ssh2
Apr  1 02:15:27 lanister sshd[29537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.229.120  user=root
Apr  1 02:15:29 lanister sshd[29537]: Failed password for root from 178.33.229.120 port 45265 ssh2
2020-04-01 15:12:56
139.199.74.92 attackbots
Apr  1 09:43:01 gw1 sshd[27603]: Failed password for root from 139.199.74.92 port 33186 ssh2
...
2020-04-01 14:50:23
203.162.13.68 attack
Apr  1 08:32:49 rotator sshd\[21227\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr  1 08:32:51 rotator sshd\[21227\]: Failed password for root from 203.162.13.68 port 60278 ssh2Apr  1 08:38:06 rotator sshd\[22048\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr  1 08:38:08 rotator sshd\[22048\]: Failed password for root from 203.162.13.68 port 41996 ssh2Apr  1 08:40:23 rotator sshd\[22843\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr  1 08:40:25 rotator sshd\[22843\]: Failed password for root from 203.162.13.68 port 45124 ssh2
...
2020-04-01 15:12:34
75.130.124.90 attack
Automatic report - SSH Brute-Force Attack
2020-04-01 15:07:06
188.166.251.156 attackspam
Apr  1 10:48:45 webhost01 sshd[16057]: Failed password for root from 188.166.251.156 port 54090 ssh2
...
2020-04-01 15:00:05
106.12.186.74 attack
Invalid user kaylei from 106.12.186.74 port 51568
2020-04-01 14:59:05
51.15.41.227 attackspambots
SSH auth scanning - multiple failed logins
2020-04-01 14:58:18
45.7.228.199 attack
2020-04-01T06:05:16.710080shield sshd\[26369\]: Invalid user shenjun from 45.7.228.199 port 54854
2020-04-01T06:05:16.714525shield sshd\[26369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.228.199
2020-04-01T06:05:18.624618shield sshd\[26369\]: Failed password for invalid user shenjun from 45.7.228.199 port 54854 ssh2
2020-04-01T06:10:16.703665shield sshd\[27895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.228.199  user=root
2020-04-01T06:10:18.131913shield sshd\[27895\]: Failed password for root from 45.7.228.199 port 38242 ssh2
2020-04-01 14:51:24
35.199.82.233 attackbots
Invalid user jis from 35.199.82.233 port 59322
2020-04-01 14:49:22

Recently Reported IPs

82.102.20.183 84.162.149.31 213.122.123.15 183.228.87.46
117.206.185.235 209.96.119.184 189.24.113.191 199.97.165.140
178.128.21.154 138.22.160.197 99.135.85.60 80.150.132.7
46.243.182.51 166.55.118.132 189.41.32.181 219.213.230.211
139.218.79.86 177.162.125.188 57.26.68.88 15.91.24.223