Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Dec 15 19:43:17 ws19vmsma01 sshd[136539]: Failed password for root from 106.54.54.224 port 47876 ssh2
...
2019-12-16 06:58:20
attack
Dec 13 22:19:14 srv206 sshd[1118]: Invalid user www from 106.54.54.224
...
2019-12-14 05:29:11
attackspam
Dec  7 09:55:08 h2177944 sshd\[12914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
Dec  7 09:55:10 h2177944 sshd\[12914\]: Failed password for root from 106.54.54.224 port 55250 ssh2
Dec  7 10:02:43 h2177944 sshd\[13656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
Dec  7 10:02:45 h2177944 sshd\[13656\]: Failed password for root from 106.54.54.224 port 33468 ssh2
...
2019-12-07 18:14:52
attackspam
Dec  3 22:45:43 srv01 sshd[13701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
Dec  3 22:45:45 srv01 sshd[13701]: Failed password for root from 106.54.54.224 port 49982 ssh2
Dec  3 22:52:12 srv01 sshd[14171]: Invalid user vcsa from 106.54.54.224 port 58402
Dec  3 22:52:12 srv01 sshd[14171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224
Dec  3 22:52:12 srv01 sshd[14171]: Invalid user vcsa from 106.54.54.224 port 58402
Dec  3 22:52:15 srv01 sshd[14171]: Failed password for invalid user vcsa from 106.54.54.224 port 58402 ssh2
...
2019-12-04 06:10:31
attackbots
2019-12-03T11:38:25.506356abusebot-2.cloudsearch.cf sshd\[4413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
2019-12-03 19:47:12
attackbotsspam
Invalid user fbsd from 106.54.54.224 port 47642
2019-11-13 02:44:17
attack
Nov  7 16:39:08 localhost sshd\[16201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
Nov  7 16:39:10 localhost sshd\[16201\]: Failed password for root from 106.54.54.224 port 50860 ssh2
Nov  7 16:43:10 localhost sshd\[16459\]: Invalid user wilma from 106.54.54.224
Nov  7 16:43:10 localhost sshd\[16459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224
Nov  7 16:43:12 localhost sshd\[16459\]: Failed password for invalid user wilma from 106.54.54.224 port 52280 ssh2
...
2019-11-08 01:42:18
attack
Nov  4 07:05:05 ovpn sshd\[10054\]: Invalid user ansible from 106.54.54.224
Nov  4 07:05:05 ovpn sshd\[10054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224
Nov  4 07:05:06 ovpn sshd\[10054\]: Failed password for invalid user ansible from 106.54.54.224 port 49440 ssh2
Nov  4 07:30:25 ovpn sshd\[15251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root
Nov  4 07:30:28 ovpn sshd\[15251\]: Failed password for root from 106.54.54.224 port 36134 ssh2
2019-11-04 15:51:23
attackbots
detected by Fail2Ban
2019-11-02 14:53:03
attack
$f2bV_matches
2019-10-31 15:01:32
Comments on same subnet:
IP Type Details Datetime
106.54.54.254 attackspam
5x Failed Password
2020-05-23 17:00:21
106.54.54.254 attackbots
Apr 27 12:54:46 l03 sshd[24394]: Invalid user super from 106.54.54.254 port 33694
...
2020-04-27 23:35:34
106.54.54.254 attackbotsspam
Automatic report - SSH Brute-Force Attack
2020-01-27 19:41:41
106.54.54.254 attackbots
" "
2020-01-27 13:21:08
106.54.54.219 attack
Jan 12 14:19:06 vps46666688 sshd[28605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.219
Jan 12 14:19:07 vps46666688 sshd[28605]: Failed password for invalid user gaming from 106.54.54.219 port 37182 ssh2
...
2020-01-13 02:01:52
106.54.54.219 attackspambots
Invalid user rachid from 106.54.54.219 port 50764
2020-01-03 14:42:41
106.54.54.219 attackspambots
Dec 22 15:55:08 ws26vmsma01 sshd[145148]: Failed password for root from 106.54.54.219 port 49726 ssh2
...
2019-12-23 02:15:14
106.54.54.219 attackbotsspam
Dec 20 09:14:12 server sshd\[1230\]: Invalid user brewington from 106.54.54.219
Dec 20 09:14:12 server sshd\[1230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.219 
Dec 20 09:14:13 server sshd\[1230\]: Failed password for invalid user brewington from 106.54.54.219 port 46882 ssh2
Dec 20 09:28:32 server sshd\[4900\]: Invalid user satya from 106.54.54.219
Dec 20 09:28:32 server sshd\[4900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.219 
...
2019-12-20 16:46:40
106.54.54.219 attackbotsspam
Dec  7 13:15:52 localhost sshd\[5531\]: Invalid user galcher from 106.54.54.219 port 44504
Dec  7 13:15:52 localhost sshd\[5531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.219
Dec  7 13:15:54 localhost sshd\[5531\]: Failed password for invalid user galcher from 106.54.54.219 port 44504 ssh2
2019-12-07 20:45:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.54.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.54.224.			IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019103100 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 31 15:01:26 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 224.54.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 224.54.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
124.118.129.5 attack
Invalid user user1 from 124.118.129.5 port 55944
2019-07-13 22:48:02
179.99.15.190 attack
Automatic report - Port Scan Attack
2019-07-13 23:44:57
138.68.17.96 attackbotsspam
Invalid user vagrant from 138.68.17.96 port 39050
2019-07-13 22:46:17
220.141.65.105 attackbotsspam
Automatic report - Port Scan Attack
2019-07-13 23:39:55
136.61.133.189 attack
Jul 13 16:07:20 Ubuntu-1404-trusty-64-minimal sshd\[28145\]: Invalid user ronan from 136.61.133.189
Jul 13 16:39:37 Ubuntu-1404-trusty-64-minimal sshd\[19332\]: Invalid user manolo from 136.61.133.189
Jul 13 17:01:15 Ubuntu-1404-trusty-64-minimal sshd\[4265\]: Invalid user jakob from 136.61.133.189
Jul 13 17:05:29 Ubuntu-1404-trusty-64-minimal sshd\[6184\]: Invalid user fenix from 136.61.133.189
Jul 13 17:16:59 Ubuntu-1404-trusty-64-minimal sshd\[14770\]: Invalid user couchpotato from 136.61.133.189
2019-07-13 23:32:15
160.153.234.236 attackbots
Invalid user wl from 160.153.234.236 port 50976
2019-07-13 22:36:29
159.65.175.37 attackbots
Jul 13 15:22:09 nextcloud sshd\[16002\]: Invalid user kevin from 159.65.175.37
Jul 13 15:22:09 nextcloud sshd\[16002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.175.37
Jul 13 15:22:11 nextcloud sshd\[16002\]: Failed password for invalid user kevin from 159.65.175.37 port 51376 ssh2
...
2019-07-13 22:38:29
51.75.243.22 attackspambots
Invalid user cos from 51.75.243.22 port 44070
2019-07-13 23:11:06
181.55.188.187 attackspambots
Jul 13 17:08:39 mail sshd\[24163\]: Invalid user jts3 from 181.55.188.187 port 49880
Jul 13 17:08:39 mail sshd\[24163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.187
Jul 13 17:08:41 mail sshd\[24163\]: Failed password for invalid user jts3 from 181.55.188.187 port 49880 ssh2
Jul 13 17:14:45 mail sshd\[25258\]: Invalid user budi from 181.55.188.187 port 51568
Jul 13 17:14:45 mail sshd\[25258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.187
2019-07-13 23:34:31
58.119.3.77 attack
Invalid user app from 58.119.3.77 port 33383
2019-07-13 23:09:05
62.234.34.186 attackspam
DATE:2019-07-13 17:16:54, IP:62.234.34.186, PORT:ssh brute force auth on SSH service (patata)
2019-07-13 23:39:11
111.231.87.204 attackbotsspam
Invalid user redis from 111.231.87.204 port 37360
2019-07-13 22:54:34
81.66.89.42 attackbots
Jul 13 17:12:16 SilenceServices sshd[18479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.66.89.42
Jul 13 17:12:18 SilenceServices sshd[18479]: Failed password for invalid user music from 81.66.89.42 port 47004 ssh2
Jul 13 17:17:03 SilenceServices sshd[21334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.66.89.42
2019-07-13 23:29:21
78.45.6.45 attackbots
Invalid user ubuntu from 78.45.6.45 port 56579
2019-07-13 23:05:35
54.38.188.34 attack
Jul 13 16:48:34 icinga sshd[20945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.188.34
Jul 13 16:48:35 icinga sshd[20945]: Failed password for invalid user scott from 54.38.188.34 port 52898 ssh2
...
2019-07-13 23:09:43

Recently Reported IPs

230.100.88.97 133.209.22.150 30.208.253.113 167.73.79.169
181.74.73.110 26.85.66.61 6.78.147.9 192.112.211.179
60.162.189.83 64.128.119.122 8.17.24.10 253.181.9.130
0.246.158.127 175.94.107.24 26.29.41.235 255.5.160.250
151.161.7.250 3.134.202.186 187.205.195.147 8.174.187.105