Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Invalid user upload from 106.54.83.45 port 51954
2020-08-25 23:17:23
attackspam
SSH Bruteforce attack
2020-08-21 12:46:26
attackbotsspam
Aug  2 23:17:29 PorscheCustomer sshd[2553]: Failed password for root from 106.54.83.45 port 43366 ssh2
Aug  2 23:22:21 PorscheCustomer sshd[2713]: Failed password for root from 106.54.83.45 port 38598 ssh2
...
2020-08-03 05:48:51
attackbotsspam
Jul 28 19:03:40 mail sshd[18341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Jul 28 19:03:42 mail sshd[18341]: Failed password for invalid user jike from 106.54.83.45 port 35514 ssh2
...
2020-07-29 01:45:15
attack
Jul 25 23:18:29 mockhub sshd[11387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Jul 25 23:18:31 mockhub sshd[11387]: Failed password for invalid user server from 106.54.83.45 port 50950 ssh2
...
2020-07-26 15:49:52
attackspambots
Invalid user ubuntu from 106.54.83.45 port 40492
2020-07-25 12:24:35
attack
Jul 12 04:59:07 dhoomketu sshd[1445117]: Invalid user jan from 106.54.83.45 port 45154
Jul 12 04:59:07 dhoomketu sshd[1445117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45 
Jul 12 04:59:07 dhoomketu sshd[1445117]: Invalid user jan from 106.54.83.45 port 45154
Jul 12 04:59:09 dhoomketu sshd[1445117]: Failed password for invalid user jan from 106.54.83.45 port 45154 ssh2
Jul 12 05:01:50 dhoomketu sshd[1445166]: Invalid user website from 106.54.83.45 port 45998
...
2020-07-12 07:41:29
attackbotsspam
Jun 24 13:14:43 itv-usvr-02 sshd[25901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45  user=root
Jun 24 13:14:45 itv-usvr-02 sshd[25901]: Failed password for root from 106.54.83.45 port 38206 ssh2
Jun 24 13:17:32 itv-usvr-02 sshd[26001]: Invalid user botmaster from 106.54.83.45 port 53386
Jun 24 13:17:32 itv-usvr-02 sshd[26001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Jun 24 13:17:32 itv-usvr-02 sshd[26001]: Invalid user botmaster from 106.54.83.45 port 53386
Jun 24 13:17:34 itv-usvr-02 sshd[26001]: Failed password for invalid user botmaster from 106.54.83.45 port 53386 ssh2
2020-06-24 17:31:32
attackbotsspam
Jun 15 22:40:14 web1 sshd\[10091\]: Invalid user ubuntu from 106.54.83.45
Jun 15 22:40:14 web1 sshd\[10091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Jun 15 22:40:15 web1 sshd\[10091\]: Failed password for invalid user ubuntu from 106.54.83.45 port 40582 ssh2
Jun 15 22:44:20 web1 sshd\[10235\]: Invalid user lzb from 106.54.83.45
Jun 15 22:44:20 web1 sshd\[10235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
2020-06-16 05:18:31
attack
Failed password for invalid user bliu from 106.54.83.45 port 55982 ssh2
2020-06-13 16:58:51
attackbots
May 23 14:18:27 webhost01 sshd[10265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
May 23 14:18:29 webhost01 sshd[10265]: Failed password for invalid user pathplan from 106.54.83.45 port 53874 ssh2
...
2020-05-23 19:10:20
attack
$f2bV_matches
2020-05-21 03:30:56
attackbotsspam
" "
2020-05-16 02:39:55
attack
2020-05-14T06:28:11.875513linuxbox-skyline sshd[164965]: Invalid user tacpro from 106.54.83.45 port 54512
...
2020-05-14 21:26:47
attack
May 10 06:39:28 OPSO sshd\[19744\]: Invalid user test from 106.54.83.45 port 52868
May 10 06:39:28 OPSO sshd\[19744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
May 10 06:39:31 OPSO sshd\[19744\]: Failed password for invalid user test from 106.54.83.45 port 52868 ssh2
May 10 06:44:28 OPSO sshd\[21068\]: Invalid user user from 106.54.83.45 port 50524
May 10 06:44:28 OPSO sshd\[21068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
2020-05-10 12:45:18
attack
Apr 27 16:26:28 localhost sshd\[28747\]: Invalid user marketing from 106.54.83.45 port 37628
Apr 27 16:26:28 localhost sshd\[28747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Apr 27 16:26:30 localhost sshd\[28747\]: Failed password for invalid user marketing from 106.54.83.45 port 37628 ssh2
...
2020-04-28 02:52:52
attack
Apr 21 11:32:44 ny01 sshd[32712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Apr 21 11:32:46 ny01 sshd[32712]: Failed password for invalid user jenkins from 106.54.83.45 port 48116 ssh2
Apr 21 11:35:44 ny01 sshd[586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
2020-04-22 01:19:15
attack
Apr 20 15:20:19 ovpn sshd\[18067\]: Invalid user ah from 106.54.83.45
Apr 20 15:20:19 ovpn sshd\[18067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
Apr 20 15:20:21 ovpn sshd\[18067\]: Failed password for invalid user ah from 106.54.83.45 port 37274 ssh2
Apr 20 15:40:28 ovpn sshd\[22765\]: Invalid user ftpuser from 106.54.83.45
Apr 20 15:40:28 ovpn sshd\[22765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45
2020-04-20 21:44:19
attackspambots
Triggered by Fail2Ban at Ares web server
2020-04-12 17:26:59
attackbotsspam
Mar 11 09:11:42 vps sshd[29810]: Failed password for root from 106.54.83.45 port 51734 ssh2
Mar 11 09:24:20 vps sshd[30367]: Failed password for root from 106.54.83.45 port 34018 ssh2
...
2020-03-11 17:26:20
attack
Mar  6 04:49:46 ip-172-31-62-245 sshd\[28515\]: Invalid user magda from 106.54.83.45\
Mar  6 04:49:48 ip-172-31-62-245 sshd\[28515\]: Failed password for invalid user magda from 106.54.83.45 port 41910 ssh2\
Mar  6 04:54:11 ip-172-31-62-245 sshd\[28542\]: Invalid user lishuoguo from 106.54.83.45\
Mar  6 04:54:13 ip-172-31-62-245 sshd\[28542\]: Failed password for invalid user lishuoguo from 106.54.83.45 port 35114 ssh2\
Mar  6 04:58:47 ip-172-31-62-245 sshd\[28572\]: Invalid user chef from 106.54.83.45\
2020-03-06 13:53:55
Comments on same subnet:
IP Type Details Datetime
106.54.83.152 attackbotsspam
SSH Brute Force
2020-04-08 14:07:14
106.54.83.66 attack
2020-02-25T08:38:57.793310shield sshd\[16076\]: Invalid user wp from 106.54.83.66 port 33200
2020-02-25T08:38:57.798494shield sshd\[16076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.66
2020-02-25T08:38:59.511531shield sshd\[16076\]: Failed password for invalid user wp from 106.54.83.66 port 33200 ssh2
2020-02-25T08:47:37.720826shield sshd\[18399\]: Invalid user kiran from 106.54.83.66 port 49246
2020-02-25T08:47:37.726725shield sshd\[18399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.66
2020-02-25 16:48:13
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.83.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19099
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.83.45.			IN	A

;; AUTHORITY SECTION:
.			574	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030600 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 06 13:53:49 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 45.83.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.83.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
113.28.141.247 attackbots
SMB Server BruteForce Attack
2019-09-14 16:13:05
91.205.168.56 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:32:46,578 INFO [amun_request_handler] PortScan Detected on Port: 445 (91.205.168.56)
2019-09-14 16:36:57
157.245.96.171 attack
ft-1848-basketball.de 157.245.96.171 \[14/Sep/2019:08:52:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2165 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
ft-1848-basketball.de 157.245.96.171 \[14/Sep/2019:08:52:25 +0200\] "POST /wp-login.php HTTP/1.1" 200 2125 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-09-14 16:32:01
106.75.132.200 attackbots
Sep 13 22:38:25 tdfoods sshd\[3037\]: Invalid user administrator from 106.75.132.200
Sep 13 22:38:25 tdfoods sshd\[3037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.132.200
Sep 13 22:38:28 tdfoods sshd\[3037\]: Failed password for invalid user administrator from 106.75.132.200 port 54890 ssh2
Sep 13 22:43:19 tdfoods sshd\[3569\]: Invalid user hadoop from 106.75.132.200
Sep 13 22:43:19 tdfoods sshd\[3569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.132.200
2019-09-14 16:48:16
183.89.9.42 attackspam
SMB Server BruteForce Attack
2019-09-14 16:06:34
5.143.117.138 attackspambots
2019-09-14T09:55:29.584118lon01.zurich-datacenter.net sshd\[8047\]: Invalid user wendy from 5.143.117.138 port 35928
2019-09-14T09:55:29.592378lon01.zurich-datacenter.net sshd\[8047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.143.117.138
2019-09-14T09:55:31.976488lon01.zurich-datacenter.net sshd\[8047\]: Failed password for invalid user wendy from 5.143.117.138 port 35928 ssh2
2019-09-14T10:00:22.813451lon01.zurich-datacenter.net sshd\[8141\]: Invalid user schmetterling from 5.143.117.138 port 51974
2019-09-14T10:00:22.822070lon01.zurich-datacenter.net sshd\[8141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.143.117.138
...
2019-09-14 16:15:20
51.83.23.214 attack
[ 🇺🇸 ] From return-leo=toptec.net.br@leadgeneration.we.bs Fri Sep 13 23:53:04 2019
 Received: from genelead-mx-13.leadgeneration.we.bs ([51.83.23.214]:57534)
2019-09-14 15:49:04
45.114.166.39 attackspam
Sep 14 09:24:29 our-server-hostname postfix/smtpd[31154]: connect from unknown[45.114.166.39]
Sep 14 09:24:30 our-server-hostname postfix/smtpd[31154]: NOQUEUE: reject: RCPT from unknown[45.114.166.39]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 14 09:24:30 our-server-hostname postfix/smtpd[31154]: disconnect from unknown[45.114.166.39]
Sep 14 09:24:30 our-server-hostname postfix/smtpd[21858]: connect from unknown[45.114.166.39]
Sep 14 09:24:31 our-server-hostname postfix/smtpd[21858]: NOQUEUE: reject: RCPT from unknown[45.114.166.39]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Sep 14 09:24:31 our-server-hostname postfix/smtpd[21858]: disconnect from unknown[45.114.166.39]
Sep 14 09:28:34 our-server-hostname postfix/smtpd[26338]: connect from unknown[45.114.166.39]
Sep 14 09:28:34 our-server-hostname postfix/smtpd[26338]: NOQUEUE: reject: RCPT from unk........
-------------------------------
2019-09-14 16:19:33
81.183.253.86 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-09-14 15:46:40
134.209.189.224 attack
Sep 14 10:13:21 SilenceServices sshd[22974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.189.224
Sep 14 10:13:22 SilenceServices sshd[22974]: Failed password for invalid user ij from 134.209.189.224 port 55986 ssh2
Sep 14 10:16:57 SilenceServices sshd[24359]: Failed password for root from 134.209.189.224 port 54252 ssh2
2019-09-14 16:24:46
189.108.10.99 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:35:34,086 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.108.10.99)
2019-09-14 16:23:26
177.139.182.211 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:35:49,114 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.139.182.211)
2019-09-14 16:18:55
94.191.108.176 attackspam
Sep 13 22:36:46 tdfoods sshd\[2874\]: Invalid user snjuguna from 94.191.108.176
Sep 13 22:36:46 tdfoods sshd\[2874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.108.176
Sep 13 22:36:48 tdfoods sshd\[2874\]: Failed password for invalid user snjuguna from 94.191.108.176 port 41408 ssh2
Sep 13 22:39:52 tdfoods sshd\[3268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.108.176  user=root
Sep 13 22:39:53 tdfoods sshd\[3268\]: Failed password for root from 94.191.108.176 port 36252 ssh2
2019-09-14 16:44:37
113.161.59.55 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:33:31,646 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.161.59.55)
2019-09-14 16:26:59
153.35.93.7 attackspambots
Sep 14 03:57:37 ny01 sshd[20833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.35.93.7
Sep 14 03:57:39 ny01 sshd[20833]: Failed password for invalid user pc123 from 153.35.93.7 port 40045 ssh2
Sep 14 04:03:03 ny01 sshd[22009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.35.93.7
2019-09-14 16:18:27

Recently Reported IPs

156.136.146.80 53.117.60.158 200.138.150.28 17.230.24.15
105.159.115.164 118.69.37.51 210.78.216.79 27.73.107.69
180.253.215.247 87.71.55.233 151.173.248.32 117.4.240.104
147.68.153.129 184.103.159.208 19.81.147.195 40.161.252.87
136.61.15.155 106.13.167.62 45.181.232.20 254.230.195.217