City: Shanghai
Region: Shanghai
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.124.250 | attack | Jan 18 06:20:23 localhost sshd\[26460\]: Invalid user casa from 106.54.124.250 Jan 18 06:20:23 localhost sshd\[26460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 Jan 18 06:20:25 localhost sshd\[26460\]: Failed password for invalid user casa from 106.54.124.250 port 51334 ssh2 Jan 18 06:22:10 localhost sshd\[26507\]: Invalid user gerrard from 106.54.124.250 Jan 18 06:22:10 localhost sshd\[26507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 ... |
2020-01-18 13:59:59 |
| 106.54.124.250 | attackbotsspam | Unauthorized connection attempt detected from IP address 106.54.124.250 to port 2220 [J] |
2020-01-14 02:52:44 |
| 106.54.124.250 | attackbots | 2020-01-12T23:52:31.981081shield sshd\[4029\]: Invalid user roshan from 106.54.124.250 port 59188 2020-01-12T23:52:31.986101shield sshd\[4029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 2020-01-12T23:52:33.571070shield sshd\[4029\]: Failed password for invalid user roshan from 106.54.124.250 port 59188 ssh2 2020-01-12T23:55:21.148732shield sshd\[5168\]: Invalid user miao from 106.54.124.250 port 55234 2020-01-12T23:55:21.152591shield sshd\[5168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 |
2020-01-13 08:10:44 |
| 106.54.124.250 | attackbots | Jan 5 21:44:29 ip-172-31-62-245 sshd\[18927\]: Invalid user vgk from 106.54.124.250\ Jan 5 21:44:31 ip-172-31-62-245 sshd\[18927\]: Failed password for invalid user vgk from 106.54.124.250 port 57572 ssh2\ Jan 5 21:48:21 ip-172-31-62-245 sshd\[19004\]: Invalid user jvr from 106.54.124.250\ Jan 5 21:48:23 ip-172-31-62-245 sshd\[19004\]: Failed password for invalid user jvr from 106.54.124.250 port 56594 ssh2\ Jan 5 21:51:41 ip-172-31-62-245 sshd\[19051\]: Invalid user eb from 106.54.124.250\ |
2020-01-06 05:57:33 |
| 106.54.124.250 | attackspambots | Unauthorized connection attempt detected from IP address 106.54.124.250 to port 2220 [J] |
2020-01-05 18:52:01 |
| 106.54.124.250 | attack | $f2bV_matches |
2020-01-02 08:33:19 |
| 106.54.124.250 | attackbots | Invalid user guest from 106.54.124.250 port 38778 |
2019-12-27 21:35:16 |
| 106.54.124.250 | attack | Dec 26 17:02:43 dedicated sshd[18373]: Invalid user edrip from 106.54.124.250 port 54690 |
2019-12-27 03:12:59 |
| 106.54.124.250 | attackbots | Dec 18 17:07:37 server sshd\[20402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 user=mysql Dec 18 17:07:39 server sshd\[20402\]: Failed password for mysql from 106.54.124.250 port 34090 ssh2 Dec 18 17:34:31 server sshd\[28008\]: Invalid user yawn from 106.54.124.250 Dec 18 17:34:31 server sshd\[28008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 Dec 18 17:34:33 server sshd\[28008\]: Failed password for invalid user yawn from 106.54.124.250 port 54448 ssh2 ... |
2019-12-19 02:08:31 |
| 106.54.124.250 | attackbotsspam | $f2bV_matches |
2019-12-16 20:37:37 |
| 106.54.124.250 | attackspam | 2019-12-09T10:05:16.753368scmdmz1 sshd\[20471\]: Invalid user bercomp from 106.54.124.250 port 56416 2019-12-09T10:05:16.756345scmdmz1 sshd\[20471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 2019-12-09T10:05:19.119451scmdmz1 sshd\[20471\]: Failed password for invalid user bercomp from 106.54.124.250 port 56416 ssh2 ... |
2019-12-09 17:10:33 |
| 106.54.124.250 | attackspam | Dec 8 01:18:10 tdfoods sshd\[21318\]: Invalid user test222 from 106.54.124.250 Dec 8 01:18:10 tdfoods sshd\[21318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 Dec 8 01:18:12 tdfoods sshd\[21318\]: Failed password for invalid user test222 from 106.54.124.250 port 56966 ssh2 Dec 8 01:24:54 tdfoods sshd\[21895\]: Invalid user p@ssword from 106.54.124.250 Dec 8 01:24:54 tdfoods sshd\[21895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 |
2019-12-08 19:25:41 |
| 106.54.124.250 | attackspambots | $f2bV_matches |
2019-12-01 22:11:09 |
| 106.54.124.250 | attackbotsspam | Invalid user ortiz from 106.54.124.250 port 56466 |
2019-11-20 02:47:43 |
| 106.54.124.250 | attackspambots | ... |
2019-11-05 05:20:42 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '106.52.0.0 - 106.54.255.255'
% Abuse contact for '106.52.0.0 - 106.54.255.255' is 'abuse@tencent.com'
inetnum: 106.52.0.0 - 106.54.255.255
netname: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
descr: Floor 6, Yinke Building,38 Haidian St,
descr: Haidian District Beijing
country: CN
admin-c: JT1125-AP
tech-c: JX1747-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-TencentCloud-CN
last-modified: 2022-01-17T08:58:21Z
source: APNIC
irt: IRT-TencentCloud-CN
address: 9F, FIYTA Building, Gaoxinnanyi Road, Southern
address: District of Hi-tech Park, Shenzhen
e-mail: tencent_noc@tencent.com
admin-c: JT1125-AP
tech-c: JX1747-AP
abuse-mailbox: abuse@tencent.com
remarks: abuse@tencent.com was validated on 2025-10-29
remarks: tencent_noc@tencent.com was validated on 2025-10-29
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:34:40Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: James Tian
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-84952
e-mail: johnsonqu@tencent.com
nic-hdl: JT1125-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2024-03-19T08:21:31Z
source: APNIC
person: Jimmy Xiao
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-80224
e-mail: klayliang@tencent.com
nic-hdl: JX1747-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2021-09-17T00:38:09Z
source: APNIC
% Information related to '106.52.0.0/14AS45090'
route: 106.52.0.0/14
descr: Shenzhen Tencent Computer Systems Company Limited
country: CN
origin: AS45090
notify: jimmyxiao@tencent.com
mnt-by: MAINT-CNNIC-AP
last-modified: 2019-04-18T03:50:02Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.124.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62078
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.54.124.78. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041802 1800 900 604800 86400
;; Query time: 263 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 09:00:05 CST 2026
;; MSG SIZE rcvd: 106Host 78.124.54.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 78.124.54.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.190.153.246 | attackspam | Feb 19 12:22:01 auw2 sshd\[4428\]: Invalid user odoo from 92.190.153.246 Feb 19 12:22:01 auw2 sshd\[4428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.190.153.246 Feb 19 12:22:04 auw2 sshd\[4428\]: Failed password for invalid user odoo from 92.190.153.246 port 56906 ssh2 Feb 19 12:24:15 auw2 sshd\[4790\]: Invalid user centos from 92.190.153.246 Feb 19 12:24:15 auw2 sshd\[4790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.190.153.246 |
2020-02-20 06:28:28 |
| 185.175.93.3 | attack | firewall-block, port(s): 3391/tcp |
2020-02-20 06:30:25 |
| 176.113.115.43 | attackbotsspam | 02/19/2020-16:58:32.659719 176.113.115.43 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-02-20 06:19:45 |
| 187.86.200.34 | attackspambots | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-02-20 06:49:08 |
| 92.63.194.7 | attackspambots | 2020-02-19T22:13:30.990528shield sshd\[9927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.7 user=operator 2020-02-19T22:13:33.157541shield sshd\[9927\]: Failed password for operator from 92.63.194.7 port 51830 ssh2 2020-02-19T22:13:57.795464shield sshd\[9983\]: Invalid user support from 92.63.194.7 port 36768 2020-02-19T22:13:57.802821shield sshd\[9983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.7 2020-02-19T22:13:59.342718shield sshd\[9983\]: Failed password for invalid user support from 92.63.194.7 port 36768 ssh2 |
2020-02-20 06:39:25 |
| 144.76.71.176 | attack | 20 attempts against mh-misbehave-ban on milky |
2020-02-20 06:23:02 |
| 183.56.211.38 | attackbotsspam | Feb 19 23:23:25 silence02 sshd[25556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.56.211.38 Feb 19 23:23:28 silence02 sshd[25556]: Failed password for invalid user minecraft from 183.56.211.38 port 38051 ssh2 Feb 19 23:25:23 silence02 sshd[26340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.56.211.38 |
2020-02-20 06:40:58 |
| 69.165.70.248 | attackspam | Automatic report - SSH Brute-Force Attack |
2020-02-20 06:18:38 |
| 222.186.15.158 | attack | Feb 20 03:46:12 areeb-Workstation sshd[11524]: Failed password for root from 222.186.15.158 port 18815 ssh2 Feb 20 03:46:15 areeb-Workstation sshd[11524]: Failed password for root from 222.186.15.158 port 18815 ssh2 ... |
2020-02-20 06:22:29 |
| 117.80.212.113 | attackspam | Feb 19 23:14:02 MK-Soft-VM4 sshd[24665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.80.212.113 Feb 19 23:14:03 MK-Soft-VM4 sshd[24665]: Failed password for invalid user odoo from 117.80.212.113 port 48414 ssh2 ... |
2020-02-20 06:42:22 |
| 79.117.48.102 | attackbotsspam | DATE:2020-02-19 22:56:29, IP:79.117.48.102, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-02-20 06:25:32 |
| 170.231.199.243 | attackspam | Automatic report - Port Scan Attack |
2020-02-20 06:52:43 |
| 111.229.246.61 | attack | Feb 19 11:52:46 sachi sshd\[26978\]: Invalid user ubuntu from 111.229.246.61 Feb 19 11:52:46 sachi sshd\[26978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.246.61 Feb 19 11:52:47 sachi sshd\[26978\]: Failed password for invalid user ubuntu from 111.229.246.61 port 42440 ssh2 Feb 19 11:58:01 sachi sshd\[27439\]: Invalid user user from 111.229.246.61 Feb 19 11:58:01 sachi sshd\[27439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.246.61 |
2020-02-20 06:35:15 |
| 222.186.15.166 | attackbotsspam | Feb 19 12:34:06 auw2 sshd\[5651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root Feb 19 12:34:08 auw2 sshd\[5651\]: Failed password for root from 222.186.15.166 port 28433 ssh2 Feb 19 12:43:34 auw2 sshd\[6622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root Feb 19 12:43:36 auw2 sshd\[6622\]: Failed password for root from 222.186.15.166 port 26404 ssh2 Feb 19 12:43:38 auw2 sshd\[6622\]: Failed password for root from 222.186.15.166 port 26404 ssh2 |
2020-02-20 06:45:08 |
| 185.202.1.23 | attackbotsspam | Brute forcing RDP port 3389 |
2020-02-20 06:38:46 |