Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: OVH Hosting Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Dec 21 14:27:55 SilenceServices sshd[6639]: Failed password for root from 54.39.107.119 port 48106 ssh2
Dec 21 14:33:43 SilenceServices sshd[8243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
Dec 21 14:33:45 SilenceServices sshd[8243]: Failed password for invalid user wwwrun from 54.39.107.119 port 55628 ssh2
2019-12-21 21:43:34
attackspambots
Invalid user amaude from 54.39.107.119 port 52950
2019-12-21 08:09:37
attackbots
2019-12-13T11:29:50.797998ns547587 sshd\[24487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net  user=root
2019-12-13T11:29:52.564282ns547587 sshd\[24487\]: Failed password for root from 54.39.107.119 port 41426 ssh2
2019-12-13T11:35:29.967488ns547587 sshd\[920\]: Invalid user kassey from 54.39.107.119 port 50554
2019-12-13T11:35:29.973190ns547587 sshd\[920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
...
2019-12-14 02:20:45
attackbots
$f2bV_matches
2019-12-13 03:24:12
attackspambots
Dec 12 03:26:20 hanapaa sshd\[5088\]: Invalid user bevington from 54.39.107.119
Dec 12 03:26:20 hanapaa sshd\[5088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
Dec 12 03:26:22 hanapaa sshd\[5088\]: Failed password for invalid user bevington from 54.39.107.119 port 34508 ssh2
Dec 12 03:31:45 hanapaa sshd\[5576\]: Invalid user liwl from 54.39.107.119
Dec 12 03:31:45 hanapaa sshd\[5576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
2019-12-12 21:34:30
attack
Invalid user browser from 54.39.107.119 port 43098
2019-11-01 19:34:17
attack
Invalid user thvmxmrkwhr from 54.39.107.119 port 37534
2019-10-30 07:20:19
attackbotsspam
Oct 29 07:36:22 DAAP sshd[5491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119  user=root
Oct 29 07:36:24 DAAP sshd[5491]: Failed password for root from 54.39.107.119 port 60492 ssh2
Oct 29 07:40:03 DAAP sshd[5599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119  user=root
Oct 29 07:40:05 DAAP sshd[5599]: Failed password for root from 54.39.107.119 port 43406 ssh2
Oct 29 07:43:46 DAAP sshd[5634]: Invalid user com from 54.39.107.119 port 54554
...
2019-10-29 17:22:17
attackspambots
Oct 21 04:51:43 hcbbdb sshd\[15611\]: Invalid user iitd from 54.39.107.119
Oct 21 04:51:43 hcbbdb sshd\[15611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
Oct 21 04:51:45 hcbbdb sshd\[15611\]: Failed password for invalid user iitd from 54.39.107.119 port 37928 ssh2
Oct 21 04:55:31 hcbbdb sshd\[16010\]: Invalid user andre from 54.39.107.119
Oct 21 04:55:31 hcbbdb sshd\[16010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
2019-10-21 12:59:44
attackspam
2019-10-02T11:28:33.932105suse-nuc sshd[11208]: Invalid user mah from 54.39.107.119 port 44274
...
2019-10-20 15:28:41
attack
Oct 18 13:36:23 SilenceServices sshd[18549]: Failed password for root from 54.39.107.119 port 54224 ssh2
Oct 18 13:40:07 SilenceServices sshd[19568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
Oct 18 13:40:09 SilenceServices sshd[19568]: Failed password for invalid user benjamin from 54.39.107.119 port 36998 ssh2
2019-10-18 23:04:40
attackbotsspam
Oct 17 16:40:24 dedicated sshd[7091]: Invalid user struts2 from 54.39.107.119 port 60182
2019-10-18 01:45:23
attack
ssh intrusion attempt
2019-10-16 18:22:29
attackspam
Oct 12 06:42:45 localhost sshd\[89455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119  user=root
Oct 12 06:42:47 localhost sshd\[89455\]: Failed password for root from 54.39.107.119 port 56062 ssh2
Oct 12 06:46:45 localhost sshd\[89575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119  user=root
Oct 12 06:46:47 localhost sshd\[89575\]: Failed password for root from 54.39.107.119 port 39428 ssh2
Oct 12 06:50:39 localhost sshd\[89704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119  user=root
...
2019-10-12 15:10:51
attackspambots
Oct 12 00:07:01 MK-Soft-VM3 sshd[24569]: Failed password for root from 54.39.107.119 port 39892 ssh2
...
2019-10-12 10:03:37
attackbotsspam
k+ssh-bruteforce
2019-10-11 06:36:33
attackspam
Oct  6 17:36:09 kapalua sshd\[3998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net  user=root
Oct  6 17:36:11 kapalua sshd\[3998\]: Failed password for root from 54.39.107.119 port 59182 ssh2
Oct  6 17:39:55 kapalua sshd\[4456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net  user=root
Oct  6 17:39:57 kapalua sshd\[4456\]: Failed password for root from 54.39.107.119 port 41358 ssh2
Oct  6 17:43:45 kapalua sshd\[4817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net  user=root
2019-10-07 18:45:17
attackspambots
'Fail2Ban'
2019-10-01 07:23:15
attack
Sep 30 20:21:24 game-panel sshd[25120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
Sep 30 20:21:26 game-panel sshd[25120]: Failed password for invalid user bash from 54.39.107.119 port 60038 ssh2
Sep 30 20:25:22 game-panel sshd[25283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
2019-10-01 04:29:13
attack
Sep 29 11:22:10 auw2 sshd\[4922\]: Invalid user ovhuser from 54.39.107.119
Sep 29 11:22:10 auw2 sshd\[4922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
Sep 29 11:22:12 auw2 sshd\[4922\]: Failed password for invalid user ovhuser from 54.39.107.119 port 56228 ssh2
Sep 29 11:25:50 auw2 sshd\[5210\]: Invalid user svetlana from 54.39.107.119
Sep 29 11:25:50 auw2 sshd\[5210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
2019-09-30 05:28:02
attack
2019-09-27T00:25:21.658813enmeeting.mahidol.ac.th sshd\[19798\]: Invalid user teamspeak3 from 54.39.107.119 port 48246
2019-09-27T00:25:21.677704enmeeting.mahidol.ac.th sshd\[19798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
2019-09-27T00:25:23.550231enmeeting.mahidol.ac.th sshd\[19798\]: Failed password for invalid user teamspeak3 from 54.39.107.119 port 48246 ssh2
...
2019-09-27 01:29:52
attack
2019-08-26 22:54:16,268 fail2ban.actions        [804]: NOTICE  [sshd] Ban 54.39.107.119
2019-08-27 01:58:28,547 fail2ban.actions        [804]: NOTICE  [sshd] Ban 54.39.107.119
2019-08-27 05:06:14,039 fail2ban.actions        [804]: NOTICE  [sshd] Ban 54.39.107.119
...
2019-08-27 21:18:29
attack
Aug 25 21:25:36 php1 sshd\[26040\]: Invalid user ip from 54.39.107.119
Aug 25 21:25:36 php1 sshd\[26040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
Aug 25 21:25:38 php1 sshd\[26040\]: Failed password for invalid user ip from 54.39.107.119 port 59648 ssh2
Aug 25 21:29:42 php1 sshd\[26395\]: Invalid user bserver from 54.39.107.119
Aug 25 21:29:42 php1 sshd\[26395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
2019-08-26 16:07:30
attackspambots
Fail2Ban Ban Triggered
2019-08-19 23:33:30
attack
Aug 19 00:11:26 lnxweb61 sshd[24865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
2019-08-19 06:47:28
attackspam
Aug 17 08:54:56 hcbbdb sshd\[867\]: Invalid user a from 54.39.107.119
Aug 17 08:54:56 hcbbdb sshd\[867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
Aug 17 08:54:58 hcbbdb sshd\[867\]: Failed password for invalid user a from 54.39.107.119 port 49708 ssh2
Aug 17 08:59:04 hcbbdb sshd\[1356\]: Invalid user resident from 54.39.107.119
Aug 17 08:59:04 hcbbdb sshd\[1356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
2019-08-17 16:59:27
attackbots
Automatic report - Banned IP Access
2019-08-10 14:00:58
attackspambots
(sshd) Failed SSH login from 54.39.107.119 (ns561359.ip-54-39-107.net): 5 in the last 3600 secs
2019-08-07 12:48:21
attackbots
Jul 31 12:03:00 localhost sshd\[49920\]: Invalid user maryl from 54.39.107.119 port 58538
Jul 31 12:03:00 localhost sshd\[49920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.107.119
...
2019-07-31 19:04:39
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.39.107.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38953
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.39.107.119.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 19:04:33 CST 2019
;; MSG SIZE  rcvd: 117
Host info
119.107.39.54.in-addr.arpa domain name pointer ns561359.ip-54-39-107.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
119.107.39.54.in-addr.arpa	name = ns561359.ip-54-39-107.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
106.12.174.111 attack
2020-06-03T12:04:49.053666shield sshd\[3525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.111  user=root
2020-06-03T12:04:50.785839shield sshd\[3525\]: Failed password for root from 106.12.174.111 port 53802 ssh2
2020-06-03T12:09:30.210484shield sshd\[3951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.111  user=root
2020-06-03T12:09:32.519534shield sshd\[3951\]: Failed password for root from 106.12.174.111 port 40992 ssh2
2020-06-03T12:13:57.937035shield sshd\[4593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.111  user=root
2020-06-04 01:40:36
92.63.197.99 attackbotsspam
 TCP (SYN) 92.63.197.99:53422 -> port 16888, len 44
2020-06-04 01:29:04
83.70.176.239 attack
Automatic report - Banned IP Access
2020-06-04 01:47:17
63.83.75.75 attackspam
SpamScore above: 10.0
2020-06-04 02:05:40
192.99.15.15 attackbots
[03/Jun/2020:19:03:14 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
2020-06-04 01:30:30
43.225.151.252 attack
Jun  3 19:28:47 srv sshd[21104]: Failed password for root from 43.225.151.252 port 44098 ssh2
2020-06-04 02:02:40
66.249.64.166 attackspambots
404 NOT FOUND
2020-06-04 01:52:04
172.245.52.30 attackspambots
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-06-04 01:55:47
67.216.206.250 attackspam
Jun  3 13:02:49 sip sshd[22066]: Failed password for root from 67.216.206.250 port 55946 ssh2
Jun  3 13:34:31 sip sshd[1339]: Failed password for root from 67.216.206.250 port 35006 ssh2
2020-06-04 01:22:56
72.52.216.50 attack
Automatic report - XMLRPC Attack
2020-06-04 01:23:55
14.160.52.58 attackspam
...
2020-06-04 01:56:32
50.53.179.3 attack
Jun  3 09:41:04 Tower sshd[1879]: Connection from 50.53.179.3 port 33956 on 192.168.10.220 port 22 rdomain ""
Jun  3 09:41:06 Tower sshd[1879]: Failed password for root from 50.53.179.3 port 33956 ssh2
Jun  3 09:41:06 Tower sshd[1879]: Received disconnect from 50.53.179.3 port 33956:11: Bye Bye [preauth]
Jun  3 09:41:06 Tower sshd[1879]: Disconnected from authenticating user root 50.53.179.3 port 33956 [preauth]
2020-06-04 01:48:14
148.223.120.122 attackbots
2020-06-03T18:54:10.153664tekno.at sshd[7122]: Failed password for root from 148.223.120.122 port 60333 ssh2
2020-06-03T18:57:52.882238tekno.at sshd[7567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.223.120.122  user=root
2020-06-03T18:57:55.123782tekno.at sshd[7567]: Failed password for root from 148.223.120.122 port 58691 ssh2
...
2020-06-04 01:57:06
185.156.73.67 attackbots
06/03/2020-11:00:44.099781 185.156.73.67 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-04 01:59:27
186.235.254.139 attackbots
xmlrpc attack
2020-06-04 01:23:15

Recently Reported IPs

24.152.223.193 2403:6200:8830:91d1:f556:d520:5f2a:6084 7.219.114.68 91.195.130.119
223.30.41.146 113.160.245.223 117.3.36.148 211.93.7.46
123.21.238.11 14.248.83.214 41.89.186.2 41.34.169.175
129.228.26.121 85.235.186.10 58.57.4.67 210.212.65.149
222.254.7.26 128.201.66.106 14.168.29.24 116.68.120.240