Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: CNISP-Union Technology (Beijing) Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Aug 19 19:42:03 OPSO sshd\[23893\]: Invalid user Compaq123 from 106.3.130.53 port 46620
Aug 19 19:42:03 OPSO sshd\[23893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Aug 19 19:42:05 OPSO sshd\[23893\]: Failed password for invalid user Compaq123 from 106.3.130.53 port 46620 ssh2
Aug 19 19:44:56 OPSO sshd\[24279\]: Invalid user jyothi@123 from 106.3.130.53 port 41704
Aug 19 19:44:56 OPSO sshd\[24279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
2020-08-20 02:06:25
attack
Jul 26 18:04:00 rtr-mst-350 sshd[16797]: Failed password for invalid user ps from 106.3.130.53 port 45424 ssh2
Jul 26 20:06:51 rtr-mst-350 sshd[19004]: Failed password for invalid user deamon from 106.3.130.53 port 45752 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.3.130.53
2020-07-27 19:01:59
attack
Invalid user sharan from 106.3.130.53 port 49628
2020-07-12 01:24:14
attackspam
Jun 12 17:50:38 ajax sshd[22989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 
Jun 12 17:50:39 ajax sshd[22989]: Failed password for invalid user ts from 106.3.130.53 port 33508 ssh2
2020-06-13 01:35:16
attackbots
3x Failed Password
2020-06-04 06:59:51
attackspambots
May 26 18:18:33 vps647732 sshd[25972]: Failed password for root from 106.3.130.53 port 33562 ssh2
...
2020-05-27 02:21:12
attackspam
2020-04-13T05:56:22.191878vps773228.ovh.net sshd[24800]: Invalid user gasiago from 106.3.130.53 port 47588
2020-04-13T05:56:22.206238vps773228.ovh.net sshd[24800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
2020-04-13T05:56:22.191878vps773228.ovh.net sshd[24800]: Invalid user gasiago from 106.3.130.53 port 47588
2020-04-13T05:56:24.291124vps773228.ovh.net sshd[24800]: Failed password for invalid user gasiago from 106.3.130.53 port 47588 ssh2
2020-04-13T05:59:30.701781vps773228.ovh.net sshd[25931]: Invalid user test from 106.3.130.53 port 40336
...
2020-04-13 12:30:07
attackspam
Mar  8 01:25:43 MK-Soft-VM3 sshd[7614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 
Mar  8 01:25:45 MK-Soft-VM3 sshd[7614]: Failed password for invalid user student from 106.3.130.53 port 47052 ssh2
...
2020-03-08 08:57:28
attack
Feb  7 11:42:53 plusreed sshd[27790]: Invalid user mzt from 106.3.130.53
...
2020-02-08 05:10:25
attackspambots
$f2bV_matches
2020-01-14 04:02:50
attackbotsspam
Unauthorized connection attempt detected from IP address 106.3.130.53 to port 2220 [J]
2020-01-05 06:02:30
attackbots
Dec 21 09:00:24 localhost sshd\[20246\]: Invalid user jackal from 106.3.130.53 port 38226
Dec 21 09:00:24 localhost sshd\[20246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Dec 21 09:00:26 localhost sshd\[20246\]: Failed password for invalid user jackal from 106.3.130.53 port 38226 ssh2
2019-12-21 16:08:52
attackspambots
2019-12-18T16:37:59.111860abusebot-6.cloudsearch.cf sshd\[17417\]: Invalid user kristi from 106.3.130.53 port 39454
2019-12-18T16:37:59.118738abusebot-6.cloudsearch.cf sshd\[17417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
2019-12-18T16:38:01.092358abusebot-6.cloudsearch.cf sshd\[17417\]: Failed password for invalid user kristi from 106.3.130.53 port 39454 ssh2
2019-12-18T16:47:09.013403abusebot-6.cloudsearch.cf sshd\[17457\]: Invalid user videolan from 106.3.130.53 port 55880
2019-12-19 02:16:15
attack
2019-12-10T08:42:18.704027centos sshd\[23450\]: Invalid user thangasamy from 106.3.130.53 port 50798
2019-12-10T08:42:18.710325centos sshd\[23450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
2019-12-10T08:42:20.898710centos sshd\[23450\]: Failed password for invalid user thangasamy from 106.3.130.53 port 50798 ssh2
2019-12-10 19:23:41
attackspam
Dec  6 17:30:09 mail sshd[24504]: Invalid user vij from 106.3.130.53
Dec  6 17:30:09 mail sshd[24504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Dec  6 17:30:09 mail sshd[24504]: Invalid user vij from 106.3.130.53
Dec  6 17:30:11 mail sshd[24504]: Failed password for invalid user vij from 106.3.130.53 port 35630 ssh2
Dec  6 17:42:52 mail sshd[11619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53  user=root
Dec  6 17:42:54 mail sshd[11619]: Failed password for root from 106.3.130.53 port 40496 ssh2
...
2019-12-07 06:31:49
attackbots
SSH Brute-Forcing (ownc)
2019-12-04 02:39:12
attackbotsspam
Nov 26 10:55:11 Ubuntu-1404-trusty-64-minimal sshd\[27071\]: Invalid user server01 from 106.3.130.53
Nov 26 10:55:11 Ubuntu-1404-trusty-64-minimal sshd\[27071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Nov 26 10:55:13 Ubuntu-1404-trusty-64-minimal sshd\[27071\]: Failed password for invalid user server01 from 106.3.130.53 port 53886 ssh2
Nov 26 10:59:56 Ubuntu-1404-trusty-64-minimal sshd\[30737\]: Invalid user shea from 106.3.130.53
Nov 26 10:59:57 Ubuntu-1404-trusty-64-minimal sshd\[30737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
2019-11-26 22:32:42
attack
Nov 25 07:26:26 meumeu sshd[25414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 
Nov 25 07:26:28 meumeu sshd[25414]: Failed password for invalid user home from 106.3.130.53 port 46736 ssh2
Nov 25 07:33:16 meumeu sshd[26145]: Failed password for root from 106.3.130.53 port 47226 ssh2
...
2019-11-25 14:48:16
attack
Oct 29 13:47:03 localhost sshd\[28569\]: Invalid user kristian1 from 106.3.130.53 port 46172
Oct 29 13:47:03 localhost sshd\[28569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Oct 29 13:47:05 localhost sshd\[28569\]: Failed password for invalid user kristian1 from 106.3.130.53 port 46172 ssh2
2019-10-29 23:03:09
attack
SSH bruteforce
2019-10-17 07:36:06
attack
Sep 30 15:26:11 vps647732 sshd[8760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53
Sep 30 15:26:13 vps647732 sshd[8760]: Failed password for invalid user fld from 106.3.130.53 port 32836 ssh2
...
2019-09-30 21:33:47
attack
Sep 29 11:29:21 root sshd[4467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 
Sep 29 11:29:23 root sshd[4467]: Failed password for invalid user gpadmin from 106.3.130.53 port 46624 ssh2
Sep 29 11:35:15 root sshd[4592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 
...
2019-09-29 17:42:05
attack
2019-09-27T14:11:25.634203abusebot-8.cloudsearch.cf sshd\[8764\]: Invalid user david from 106.3.130.53 port 47664
2019-09-28 03:47:10
Comments on same subnet:
IP Type Details Datetime
106.3.130.99 attackbots
Failed password for invalid user from 106.3.130.99 port 41046 ssh2
2020-10-02 06:36:02
106.3.130.99 attackspam
IP 106.3.130.99 attacked honeypot on port: 22 at 10/1/2020 5:27:10 AM
2020-10-01 23:05:49
106.3.130.99 attack
SSH Honeypot -> SSH Bruteforce / Login
2020-09-30 04:32:21
106.3.130.99 attackspam
Sep 29 04:53:29 propaganda sshd[97132]: Disconnected from 106.3.130.99 port 34626 [preauth]
2020-09-29 20:40:47
106.3.130.99 attackspam
Brute forcing email accounts
2020-09-29 12:49:44
106.3.130.99 attackbots
mail auth brute force
2020-02-03 16:03:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.3.130.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55580
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.3.130.53.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092701 1800 900 604800 86400

;; Query time: 401 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 28 03:47:06 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 53.130.3.106.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.82.98, trying next server
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.130.3.106.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
51.83.75.97 attackspambots
Invalid user runner from 51.83.75.97 port 32868
2020-06-18 16:26:39
165.22.61.82 attackbotsspam
21 attempts against mh-ssh on echoip
2020-06-18 16:19:02
170.0.48.177 attackspam
Jun 18 05:31:52 mail.srvfarm.net postfix/smtps/smtpd[1340853]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: 
Jun 18 05:31:52 mail.srvfarm.net postfix/smtps/smtpd[1340853]: lost connection after AUTH from unknown[170.0.48.177]
Jun 18 05:36:58 mail.srvfarm.net postfix/smtpd[1342867]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: 
Jun 18 05:36:58 mail.srvfarm.net postfix/smtpd[1342867]: lost connection after AUTH from unknown[170.0.48.177]
Jun 18 05:41:29 mail.srvfarm.net postfix/smtps/smtpd[1343122]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed:
2020-06-18 16:34:09
51.91.250.197 attackspambots
Jun 18 08:00:36 scw-tender-jepsen sshd[1197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.250.197
Jun 18 08:00:38 scw-tender-jepsen sshd[1197]: Failed password for invalid user postgres from 51.91.250.197 port 55932 ssh2
2020-06-18 16:06:08
74.84.150.75 attackspambots
Lines containing failures of 74.84.150.75 (max 1000)
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3059]: Connection from 74.84.150.75 port 50931 on 64.137.176.96 port 22
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3059]: Bad protocol version identification 'CONNECT 45.33.35.141:80 HTTP/1.0' from 74.84.150.75 port 50931
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3060]: Connection from 74.84.150.75 port 50980 on 64.137.176.96 port 22
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3060]: Did not receive identification string from 74.84.150.75 port 50980
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3061]: Connection from 74.84.150.75 port 51008 on 64.137.176.96 port 22
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3061]: Did not receive identification string from 74.84.150.75 port 51008
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3062]: Connection from 74.84.150.75 port 51030 on 64.137.176.96 port 22
Jun 18 03:51:19 UTC__SANYALnet-Labs__cac12 sshd[3062]........
------------------------------
2020-06-18 16:13:53
168.197.31.14 attackbotsspam
Jun 18 10:10:42 abendstille sshd\[25262\]: Invalid user vitalina from 168.197.31.14
Jun 18 10:10:42 abendstille sshd\[25262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.14
Jun 18 10:10:44 abendstille sshd\[25262\]: Failed password for invalid user vitalina from 168.197.31.14 port 34861 ssh2
Jun 18 10:11:58 abendstille sshd\[26291\]: Invalid user ftp_test from 168.197.31.14
Jun 18 10:11:58 abendstille sshd\[26291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.14
...
2020-06-18 16:14:53
104.248.22.250 attackspam
104.248.22.250 - - [18/Jun/2020:09:56:25 +0200] "GET /wp-login.php HTTP/1.1" 200 5983 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.22.250 - - [18/Jun/2020:09:56:28 +0200] "POST /wp-login.php HTTP/1.1" 200 6213 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.22.250 - - [18/Jun/2020:09:56:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-18 16:35:12
195.54.167.190 attackbotsspam
xmlrpc attack
2020-06-18 15:48:22
222.186.30.218 attackspam
Tried sshing with brute force.
2020-06-18 15:53:41
62.122.156.79 attack
Jun 18 10:22:03 gw1 sshd[29481]: Failed password for root from 62.122.156.79 port 34498 ssh2
Jun 18 10:25:33 gw1 sshd[29564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.156.79
...
2020-06-18 15:46:31
200.66.123.187 attack
Jun 18 05:41:19 mail.srvfarm.net postfix/smtps/smtpd[1342981]: warning: unknown[200.66.123.187]: SASL PLAIN authentication failed: 
Jun 18 05:41:19 mail.srvfarm.net postfix/smtps/smtpd[1342981]: lost connection after AUTH from unknown[200.66.123.187]
Jun 18 05:41:41 mail.srvfarm.net postfix/smtps/smtpd[1343122]: warning: unknown[200.66.123.187]: SASL PLAIN authentication failed: 
Jun 18 05:41:42 mail.srvfarm.net postfix/smtps/smtpd[1343122]: lost connection after AUTH from unknown[200.66.123.187]
Jun 18 05:46:00 mail.srvfarm.net postfix/smtpd[1342867]: warning: unknown[200.66.123.187]: SASL PLAIN authentication failed:
2020-06-18 15:59:28
217.112.142.60 attackbots
Jun 18 05:12:02 mail.srvfarm.net postfix/smtpd[1339036]: NOQUEUE: reject: RCPT from unknown[217.112.142.60]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 18 05:12:47 mail.srvfarm.net postfix/smtpd[1337038]: NOQUEUE: reject: RCPT from sown.wokoro.com[217.112.142.60]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 18 05:17:39 mail.srvfarm.net postfix/smtpd[1338957]: NOQUEUE: reject: RCPT from unknown[217.112.142.60]: 554 5.7.1 Service unavailable; Client host [217.112.142.60] blocked using zen.spamhaus.org; from= to= proto=ESMTP helo=
Jun 18 05:18:38 mail.srvfarm.net postfix/smtpd[1339651]: NOQUEUE: reject: RCPT from unknown[217.112.142.60]: 450 4.1.8 
2020-06-18 16:29:16
43.240.103.194 attackspambots
Automatic report - Windows Brute-Force Attack
2020-06-18 15:48:05
79.6.210.116 attackspambots
Automatic report - Banned IP Access
2020-06-18 15:54:03
210.183.46.232 attackspambots
Invalid user gaurav from 210.183.46.232 port 65330
2020-06-18 16:10:06

Recently Reported IPs

78.194.218.146 36.72.213.26 37.132.124.235 31.23.70.223
35.239.20.175 27.3.89.223 223.225.131.237 12.3.247.159
219.74.16.149 50.67.30.151 68.163.84.52 115.197.208.23
166.146.61.75 18.28.63.62 103.45.154.215 90.188.50.63
54.36.126.112 97.55.209.127 59.50.168.232 60.46.137.102