Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
SSH/22 MH Probe, BF, Hack -
2020-04-06 19:38:38
attack
Invalid user vismara from 106.54.13.244 port 54050
2020-03-28 15:24:28
attack
Mar 24 19:30:34 hosting180 sshd[31070]: Invalid user ts3bot from 106.54.13.244 port 36646
...
2020-03-25 04:23:19
attackbots
Mar 19 11:01:58 [host] sshd[12983]: pam_unix(sshd:
Mar 19 11:01:59 [host] sshd[12983]: Failed passwor
Mar 19 11:04:56 [host] sshd[13164]: Invalid user z
Mar 19 11:04:56 [host] sshd[13164]: pam_unix(sshd:
2020-03-19 19:41:15
attackspam
Feb  7 11:15:38 vmanager6029 sshd\[17455\]: Invalid user xus from 106.54.13.244 port 42338
Feb  7 11:15:38 vmanager6029 sshd\[17455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.13.244
Feb  7 11:15:40 vmanager6029 sshd\[17455\]: Failed password for invalid user xus from 106.54.13.244 port 42338 ssh2
2020-02-07 19:25:21
Comments on same subnet:
IP Type Details Datetime
106.54.139.117 attackbots
Oct  7 19:09:17 shivevps sshd[18291]: Failed password for root from 106.54.139.117 port 54830 ssh2
Oct  7 19:14:03 shivevps sshd[18464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Oct  7 19:14:05 shivevps sshd[18464]: Failed password for root from 106.54.139.117 port 54396 ssh2
...
2020-10-08 07:53:59
106.54.139.117 attack
2020-09-18 21:28:29 server sshd[51813]: Failed password for invalid user root from 106.54.139.117 port 36148 ssh2
2020-09-21 03:23:25
106.54.139.117 attackspambots
2020-09-18T03:34:36.034466dreamphreak.com sshd[324562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
2020-09-18T03:34:38.580633dreamphreak.com sshd[324562]: Failed password for root from 106.54.139.117 port 40012 ssh2
...
2020-09-18 23:57:04
106.54.139.117 attackbotsspam
$f2bV_matches
2020-09-18 16:04:46
106.54.139.117 attackbotsspam
2020-09-17T19:28:30.326079centos sshd[21755]: Failed password for root from 106.54.139.117 port 58822 ssh2
2020-09-17T19:31:02.056154centos sshd[21907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
2020-09-17T19:31:04.299253centos sshd[21907]: Failed password for root from 106.54.139.117 port 58128 ssh2
...
2020-09-18 06:20:13
106.54.133.103 attackspam
Invalid user prueba from 106.54.133.103 port 38544
2020-09-05 03:08:40
106.54.133.103 attackspam
Invalid user prueba from 106.54.133.103 port 38544
2020-09-04 18:36:28
106.54.139.117 attack
Aug 22 23:20:12 pixelmemory sshd[2950067]: Failed password for invalid user msmith from 106.54.139.117 port 57864 ssh2
Aug 22 23:21:18 pixelmemory sshd[2950403]: Invalid user sam from 106.54.139.117 port 40236
Aug 22 23:21:18 pixelmemory sshd[2950403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117 
Aug 22 23:21:18 pixelmemory sshd[2950403]: Invalid user sam from 106.54.139.117 port 40236
Aug 22 23:21:20 pixelmemory sshd[2950403]: Failed password for invalid user sam from 106.54.139.117 port 40236 ssh2
...
2020-08-23 15:49:07
106.54.139.117 attack
Aug 21 08:13:59 OPSO sshd\[21583\]: Invalid user happy from 106.54.139.117 port 57302
Aug 21 08:13:59 OPSO sshd\[21583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117
Aug 21 08:14:01 OPSO sshd\[21583\]: Failed password for invalid user happy from 106.54.139.117 port 57302 ssh2
Aug 21 08:18:38 OPSO sshd\[22967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug 21 08:18:40 OPSO sshd\[22967\]: Failed password for root from 106.54.139.117 port 51386 ssh2
2020-08-21 19:35:42
106.54.139.117 attackbotsspam
Aug 15 03:33:46 itv-usvr-01 sshd[19461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug 15 03:33:49 itv-usvr-01 sshd[19461]: Failed password for root from 106.54.139.117 port 33466 ssh2
Aug 15 03:39:47 itv-usvr-01 sshd[19854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug 15 03:39:49 itv-usvr-01 sshd[19854]: Failed password for root from 106.54.139.117 port 45596 ssh2
Aug 15 03:43:37 itv-usvr-01 sshd[19979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug 15 03:43:40 itv-usvr-01 sshd[19979]: Failed password for root from 106.54.139.117 port 59638 ssh2
2020-08-15 05:59:03
106.54.138.147 attackspambots
LAV,DEF GET /shell.php
2020-08-13 20:08:11
106.54.139.117 attackbots
Aug  9 18:49:59 Ubuntu-1404-trusty-64-minimal sshd\[1341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug  9 18:50:01 Ubuntu-1404-trusty-64-minimal sshd\[1341\]: Failed password for root from 106.54.139.117 port 56682 ssh2
Aug  9 18:58:31 Ubuntu-1404-trusty-64-minimal sshd\[7512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
Aug  9 18:58:33 Ubuntu-1404-trusty-64-minimal sshd\[7512\]: Failed password for root from 106.54.139.117 port 56928 ssh2
Aug  9 19:04:17 Ubuntu-1404-trusty-64-minimal sshd\[13839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117  user=root
2020-08-10 01:18:09
106.54.139.117 attackspam
fail2ban -- 106.54.139.117
...
2020-07-27 07:10:25
106.54.139.117 attackspam
Jul 23 04:55:32 dignus sshd[10367]: Failed password for invalid user ankesh from 106.54.139.117 port 38632 ssh2
Jul 23 04:59:41 dignus sshd[10942]: Invalid user openelec from 106.54.139.117 port 55964
Jul 23 04:59:41 dignus sshd[10942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.139.117
Jul 23 04:59:43 dignus sshd[10942]: Failed password for invalid user openelec from 106.54.139.117 port 55964 ssh2
Jul 23 05:03:46 dignus sshd[11448]: Invalid user admin from 106.54.139.117 port 45066
...
2020-07-23 20:37:17
106.54.139.117 attack
Bruteforce detected by fail2ban
2020-07-22 12:21:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.13.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47025
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.13.244.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020600 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 21:46:10 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 244.13.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 244.13.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
85.193.211.134 attackbotsspam
SS5,Magento Bruteforce Login Attack POST /index.php/admin/
2020-10-08 07:49:26
189.7.81.29 attack
Oct  8 01:43:33 vps1 sshd[12914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.81.29  user=root
Oct  8 01:43:35 vps1 sshd[12914]: Failed password for invalid user root from 189.7.81.29 port 39952 ssh2
Oct  8 01:46:15 vps1 sshd[12964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.81.29  user=root
Oct  8 01:46:17 vps1 sshd[12964]: Failed password for invalid user root from 189.7.81.29 port 44964 ssh2
Oct  8 01:49:04 vps1 sshd[13000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.81.29  user=root
Oct  8 01:49:06 vps1 sshd[13000]: Failed password for invalid user root from 189.7.81.29 port 49972 ssh2
Oct  8 01:51:54 vps1 sshd[13068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.81.29  user=root
...
2020-10-08 08:10:07
187.180.102.108 attackspam
Oct  8 01:15:04 journals sshd\[43794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108  user=root
Oct  8 01:15:06 journals sshd\[43794\]: Failed password for root from 187.180.102.108 port 57347 ssh2
Oct  8 01:18:48 journals sshd\[44318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108  user=root
Oct  8 01:18:50 journals sshd\[44318\]: Failed password for root from 187.180.102.108 port 50290 ssh2
Oct  8 01:22:35 journals sshd\[44690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.102.108  user=root
...
2020-10-08 08:04:05
37.221.179.46 attackspambots
Oct  7 22:46:43 icinga sshd[51116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.179.46 
Oct  7 22:46:45 icinga sshd[51116]: Failed password for invalid user admin from 37.221.179.46 port 44878 ssh2
Oct  7 22:46:48 icinga sshd[51303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.179.46 
...
2020-10-08 08:07:55
111.231.215.244 attackspam
$f2bV_matches
2020-10-08 08:16:09
203.56.24.180 attackbots
Oct  7 23:42:20 mout sshd[761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.56.24.180  user=root
Oct  7 23:42:21 mout sshd[761]: Failed password for root from 203.56.24.180 port 46348 ssh2
2020-10-08 08:05:45
106.13.98.59 attack
Oct  7 22:54:29 ip-172-31-61-156 sshd[2570]: Failed password for root from 106.13.98.59 port 43578 ssh2
Oct  7 22:57:07 ip-172-31-61-156 sshd[2748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.59  user=root
Oct  7 22:57:08 ip-172-31-61-156 sshd[2748]: Failed password for root from 106.13.98.59 port 56908 ssh2
Oct  7 22:57:07 ip-172-31-61-156 sshd[2748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.59  user=root
Oct  7 22:57:08 ip-172-31-61-156 sshd[2748]: Failed password for root from 106.13.98.59 port 56908 ssh2
...
2020-10-08 07:46:43
62.99.90.10 attackspam
Oct  7 23:51:37 fhem-rasp sshd[25699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.99.90.10  user=root
Oct  7 23:51:39 fhem-rasp sshd[25699]: Failed password for root from 62.99.90.10 port 37950 ssh2
...
2020-10-08 07:58:20
5.62.20.36 attack
(From carlota.colleano@googlemail.com) Looking for fresh buyers? Get thousands of people who are ready to buy sent directly to your website. Boost your profits super fast. Start seeing results in as little as 48 hours. To get details Check out: http://bit.ly/buy-website-visitors
2020-10-08 07:40:34
140.143.196.66 attackspam
Oct  8 00:38:36 journals sshd\[39821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.196.66  user=root
Oct  8 00:38:37 journals sshd\[39821\]: Failed password for root from 140.143.196.66 port 42938 ssh2
Oct  8 00:40:26 journals sshd\[40027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.196.66  user=root
Oct  8 00:40:28 journals sshd\[40027\]: Failed password for root from 140.143.196.66 port 34158 ssh2
Oct  8 00:43:48 journals sshd\[40327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.196.66  user=root
...
2020-10-08 07:51:10
167.172.201.94 attackspambots
Oct  8 01:18:27 PorscheCustomer sshd[16016]: Failed password for root from 167.172.201.94 port 33464 ssh2
Oct  8 01:22:09 PorscheCustomer sshd[16164]: Failed password for root from 167.172.201.94 port 39892 ssh2
...
2020-10-08 07:56:38
218.92.0.250 attackbots
Scanned 74 times in the last 24 hours on port 22
2020-10-08 08:13:47
112.140.185.246 attackspambots
Oct  8 02:14:46 mx sshd[1243029]: Failed password for root from 112.140.185.246 port 47012 ssh2
Oct  8 02:16:01 mx sshd[1243071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.246  user=root
Oct  8 02:16:03 mx sshd[1243071]: Failed password for root from 112.140.185.246 port 56294 ssh2
Oct  8 02:17:14 mx sshd[1243103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.246  user=root
Oct  8 02:17:16 mx sshd[1243103]: Failed password for root from 112.140.185.246 port 36198 ssh2
...
2020-10-08 07:55:25
103.110.89.148 attackbots
Oct  8 01:55:29 hosting sshd[26381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148  user=root
Oct  8 01:55:31 hosting sshd[26381]: Failed password for root from 103.110.89.148 port 57820 ssh2
...
2020-10-08 08:18:12
67.216.193.100 attack
Oct  7 23:47:25 santamaria sshd\[12472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.216.193.100  user=root
Oct  7 23:47:27 santamaria sshd\[12472\]: Failed password for root from 67.216.193.100 port 57100 ssh2
Oct  7 23:49:36 santamaria sshd\[12542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.216.193.100  user=root
...
2020-10-08 08:06:33

Recently Reported IPs

30.72.104.235 47.112.102.100 191.8.162.75 180.126.38.11
88.231.108.188 203.109.110.251 190.201.110.122 181.121.97.31
163.172.101.217 113.20.101.120 14.99.40.6 103.203.210.232
102.182.115.151 58.215.75.86 213.200.90.102 123.27.154.21
222.93.38.97 185.36.81.143 115.137.153.159 103.3.46.40