51.161.54.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: OVH Hosting Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-06-01 17:10:26

Comments on same subnet:

IP	Type	Details	Datetime
51.161.54.149	attack	25565/tcp 25565/tcp 25565/tcp... [2020-08-02/28]16pkt,1pt.(tcp)	2020-08-28 19:17:21
51.161.54.19	attackbotsspam	Unauthorized connection attempt from IP address 51.161.54.19 on Port 445(SMB)	2020-07-16 22:52:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.161.54.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47967
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;51.161.54.11.			IN	A

;; AUTHORITY SECTION:
.			544	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060100 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 01 17:10:22 CST 2020
;; MSG SIZE  rcvd: 116

Host info

11.54.161.51.in-addr.arpa domain name pointer ip11.ip-51-161-54.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.54.161.51.in-addr.arpa	name = ip11.ip-51-161-54.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.220.102.8	attackspam	(sshd) Failed SSH login from 185.220.102.8 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 15 10:38:25 ubnt-55d23 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.8 user=root Jun 15 10:38:27 ubnt-55d23 sshd[17393]: Failed password for root from 185.220.102.8 port 39317 ssh2	2020-06-15 17:53:06
106.12.19.1	attack	web-1 [ssh] SSH Attack	2020-06-15 17:35:20
167.71.210.171	attackbots	fail2ban -- 167.71.210.171 ...	2020-06-15 17:36:38
125.27.179.222	attackspam	Unauthorized IMAP connection attempt	2020-06-15 17:54:23
212.64.7.134	attackspambots	IP blocked	2020-06-15 17:23:56
112.85.42.89	attackspambots	SSH Brute-Force attacks	2020-06-15 17:37:02
222.186.175.163	attackbots	Jun 15 11:23:12 vmi345603 sshd[19149]: Failed password for root from 222.186.175.163 port 29812 ssh2 Jun 15 11:23:16 vmi345603 sshd[19149]: Failed password for root from 222.186.175.163 port 29812 ssh2 ...	2020-06-15 17:35:52
106.12.110.157	attackbotsspam	(sshd) Failed SSH login from 106.12.110.157 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 15 06:51:26 s1 sshd[26121]: Invalid user administrator from 106.12.110.157 port 51708 Jun 15 06:51:28 s1 sshd[26121]: Failed password for invalid user administrator from 106.12.110.157 port 51708 ssh2 Jun 15 07:26:41 s1 sshd[26908]: Invalid user scanner from 106.12.110.157 port 63947 Jun 15 07:26:43 s1 sshd[26908]: Failed password for invalid user scanner from 106.12.110.157 port 63947 ssh2 Jun 15 07:30:47 s1 sshd[26990]: Invalid user francis from 106.12.110.157 port 49264	2020-06-15 17:39:42
89.248.168.2	attackspam	Jun 15 11:14:29 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.2, lip=172.104.140.148, session=<9YqG2huoZjZZ+KgC> Jun 15 11:15:47 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.2, lip=172.104.140.148, session= Jun 15 11:17:20 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.2, lip=172.104.140.148, session= Jun 15 11:19:37 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.2, lip=172.104.140.148, session= Jun 15 11:21:58 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.2, lip=172.104.140.148, ses ...	2020-06-15 17:45:38
219.145.2.18	attack	firewall-block, port(s): 1433/tcp	2020-06-15 17:53:32
103.36.102.244	attack	2020-06-15T10:46:06.350925+02:00 sshd[26022]: Failed password for invalid user admin from 103.36.102.244 port 40329 ssh2	2020-06-15 17:45:17
124.158.3.197	attackbots	Port Scanner	2020-06-15 17:52:02
94.50.162.191	attackspambots	RU_MFIST-MNT_<177>1592206445 [1:2403488:57977] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 95 [Classification: Misc Attack] [Priority: 2]: {TCP} 94.50.162.191:50071	2020-06-15 17:55:14
132.232.5.125	attackbots	Jun 15 10:55:37 * sshd[27613]: Failed password for root from 132.232.5.125 port 47482 ssh2 Jun 15 10:58:41 * sshd[27889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.5.125	2020-06-15 17:17:57
206.189.199.48	attack	Jun 15 10:00:13 ns382633 sshd\[7604\]: Invalid user sinusbot from 206.189.199.48 port 53118 Jun 15 10:00:13 ns382633 sshd\[7604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.199.48 Jun 15 10:00:15 ns382633 sshd\[7604\]: Failed password for invalid user sinusbot from 206.189.199.48 port 53118 ssh2 Jun 15 10:05:42 ns382633 sshd\[8563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.199.48 user=root Jun 15 10:05:44 ns382633 sshd\[8563\]: Failed password for root from 206.189.199.48 port 43184 ssh2	2020-06-15 17:24:38

Recently Reported IPs

222.215.158.39	8.109.243.199	152.217.196.45	187.95.149.82
3.142.29.218	48.201.229.186	77.198.218.88	204.120.100.36
79.137.40.206	165.217.118.212	46.69.113.43	249.187.143.160
199.144.57.119	180.183.221.180	128.72.57.194	154.76.31.108
183.70.36.61	149.127.80.1	102.145.137.215	181.196.147.230