Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Aug  5 01:53:04 fhem-rasp sshd[8781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Aug  5 01:53:05 fhem-rasp sshd[8781]: Failed password for root from 106.52.106.61 port 40134 ssh2
...
2020-08-05 08:02:32
attackbots
Bruteforce detected by fail2ban
2020-07-17 16:43:16
attackbots
SSH Invalid Login
2020-07-05 06:31:28
attackbots
Invalid user deploy from 106.52.106.61 port 53818
2020-06-27 07:21:16
attack
Brute-force attempt banned
2020-06-10 21:59:41
attackspambots
Automatic report BANNED IP
2020-06-09 15:31:01
attackbotsspam
May 11 14:30:59 OPSO sshd\[2504\]: Invalid user jett from 106.52.106.61 port 36292
May 11 14:30:59 OPSO sshd\[2504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
May 11 14:31:00 OPSO sshd\[2504\]: Failed password for invalid user jett from 106.52.106.61 port 36292 ssh2
May 11 14:32:40 OPSO sshd\[2613\]: Invalid user eam from 106.52.106.61 port 58014
May 11 14:32:40 OPSO sshd\[2613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
2020-05-11 23:39:52
attack
May 10 06:24:23 legacy sshd[3778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
May 10 06:24:25 legacy sshd[3778]: Failed password for invalid user tom from 106.52.106.61 port 46502 ssh2
May 10 06:28:08 legacy sshd[4074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
...
2020-05-10 12:39:16
attackspambots
Apr 20 17:56:21 lukav-desktop sshd\[5620\]: Invalid user ultra from 106.52.106.61
Apr 20 17:56:21 lukav-desktop sshd\[5620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Apr 20 17:56:24 lukav-desktop sshd\[5620\]: Failed password for invalid user ultra from 106.52.106.61 port 60604 ssh2
Apr 20 17:59:36 lukav-desktop sshd\[5723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Apr 20 17:59:38 lukav-desktop sshd\[5723\]: Failed password for root from 106.52.106.61 port 42292 ssh2
2020-04-21 02:03:35
attackbots
Apr  5 14:36:25 MainVPS sshd[32644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Apr  5 14:36:27 MainVPS sshd[32644]: Failed password for root from 106.52.106.61 port 52494 ssh2
Apr  5 14:38:31 MainVPS sshd[4303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Apr  5 14:38:33 MainVPS sshd[4303]: Failed password for root from 106.52.106.61 port 48000 ssh2
Apr  5 14:42:42 MainVPS sshd[12560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Apr  5 14:42:44 MainVPS sshd[12560]: Failed password for root from 106.52.106.61 port 39024 ssh2
...
2020-04-06 00:15:51
attackspambots
Mar 26 05:42:54 ns382633 sshd\[21559\]: Invalid user nc from 106.52.106.61 port 54108
Mar 26 05:42:54 ns382633 sshd\[21559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Mar 26 05:42:56 ns382633 sshd\[21559\]: Failed password for invalid user nc from 106.52.106.61 port 54108 ssh2
Mar 26 05:46:51 ns382633 sshd\[22410\]: Invalid user azure from 106.52.106.61 port 47626
Mar 26 05:46:51 ns382633 sshd\[22410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
2020-03-26 14:32:30
attack
invalid login attempt (support)
2020-02-20 20:04:11
attackbots
Invalid user student8 from 106.52.106.61 port 43540
2020-01-25 17:15:51
attack
Jan  1 15:51:03 vmanager6029 sshd\[2643\]: Invalid user kp from 106.52.106.61 port 50780
Jan  1 15:51:03 vmanager6029 sshd\[2643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Jan  1 15:51:05 vmanager6029 sshd\[2643\]: Failed password for invalid user kp from 106.52.106.61 port 50780 ssh2
2020-01-02 01:06:27
attack
Dec 25 16:49:54 MK-Soft-VM7 sshd[9394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 
Dec 25 16:49:56 MK-Soft-VM7 sshd[9394]: Failed password for invalid user jpmorgan from 106.52.106.61 port 53638 ssh2
...
2019-12-26 04:43:12
attackbots
Dec 20 05:06:40 hcbbdb sshd\[11440\]: Invalid user bison from 106.52.106.61
Dec 20 05:06:40 hcbbdb sshd\[11440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Dec 20 05:06:42 hcbbdb sshd\[11440\]: Failed password for invalid user bison from 106.52.106.61 port 49500 ssh2
Dec 20 05:12:01 hcbbdb sshd\[12044\]: Invalid user louie from 106.52.106.61
Dec 20 05:12:01 hcbbdb sshd\[12044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
2019-12-20 13:33:52
attack
Dec  6 17:42:25 icinga sshd[24523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 
Dec  6 17:42:27 icinga sshd[24523]: Failed password for invalid user cristina from 106.52.106.61 port 58532 ssh2
Dec  6 17:56:24 icinga sshd[40272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 
...
2019-12-07 01:08:39
attackspam
Dec  6 10:07:45 venus sshd\[27424\]: Invalid user amen from 106.52.106.61 port 56584
Dec  6 10:07:45 venus sshd\[27424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Dec  6 10:07:46 venus sshd\[27424\]: Failed password for invalid user amen from 106.52.106.61 port 56584 ssh2
...
2019-12-06 18:34:44
attackspambots
Dec  4 20:32:37 areeb-Workstation sshd[27406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 
Dec  4 20:32:40 areeb-Workstation sshd[27406]: Failed password for invalid user test from 106.52.106.61 port 38390 ssh2
...
2019-12-04 23:11:48
attackspam
Nov 19 15:09:13 meumeu sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 
Nov 19 15:09:14 meumeu sshd[26678]: Failed password for invalid user soifer from 106.52.106.61 port 35330 ssh2
Nov 19 15:14:21 meumeu sshd[27373]: Failed password for root from 106.52.106.61 port 40894 ssh2
...
2019-11-19 22:29:43
attackspam
Nov 13 13:45:00 ws24vmsma01 sshd[171508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Nov 13 13:45:02 ws24vmsma01 sshd[171508]: Failed password for invalid user guest from 106.52.106.61 port 53650 ssh2
...
2019-11-14 00:52:06
attackspambots
Oct 21 14:45:10 * sshd[11600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Oct 21 14:45:12 * sshd[11600]: Failed password for invalid user upload from 106.52.106.61 port 55512 ssh2
2019-10-21 21:25:14
attackbots
$f2bV_matches
2019-10-09 23:11:27
attackbotsspam
Oct  6 15:46:31 dedicated sshd[15638]: Invalid user P@55w0rd@2018 from 106.52.106.61 port 40242
2019-10-06 22:03:32
attackspam
Oct  6 07:02:12 www5 sshd\[47077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Oct  6 07:02:14 www5 sshd\[47077\]: Failed password for root from 106.52.106.61 port 37618 ssh2
Oct  6 07:06:32 www5 sshd\[47849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
...
2019-10-06 16:06:02
attackbots
Sep 14 23:09:51 ny01 sshd[21273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Sep 14 23:09:53 ny01 sshd[21273]: Failed password for invalid user mary from 106.52.106.61 port 52348 ssh2
Sep 14 23:14:59 ny01 sshd[22381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
2019-09-15 11:25:04
attackspambots
Aug 29 02:47:00 hiderm sshd\[20551\]: Invalid user marco from 106.52.106.61
Aug 29 02:47:00 hiderm sshd\[20551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
Aug 29 02:47:02 hiderm sshd\[20551\]: Failed password for invalid user marco from 106.52.106.61 port 56236 ssh2
Aug 29 02:49:56 hiderm sshd\[20802\]: Invalid user jessie from 106.52.106.61
Aug 29 02:49:56 hiderm sshd\[20802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
2019-08-29 21:11:42
attackspam
SSH Bruteforce attack
2019-08-16 12:06:30
attackspambots
Jul 14 16:24:51 animalibera sshd[17657]: Invalid user cc from 106.52.106.61 port 41474
...
2019-07-15 04:54:37
attackbotsspam
Jul 12 11:46:37 host sshd\[12806\]: Invalid user jie from 106.52.106.61 port 42042
Jul 12 11:46:37 host sshd\[12806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61
...
2019-07-12 18:34:14
Comments on same subnet:
IP Type Details Datetime
106.52.106.147 attackspambots
Apr  3 15:17:39 haigwepa sshd[13440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.147 
Apr  3 15:17:42 haigwepa sshd[13440]: Failed password for invalid user PAs$word123 from 106.52.106.147 port 48934 ssh2
...
2020-04-03 21:52:33
106.52.106.147 attackspam
Invalid user zic from 106.52.106.147 port 41824
2020-03-30 08:20:24
106.52.106.6 attackspambots
SSH login attempts with user root.
2019-11-30 06:48:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.106.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59428
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.106.61.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062202 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 23 09:18:54 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 61.106.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 61.106.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
89.238.154.125 attackbotsspam
(From s.castanier@emeraudes.net.bmw.fr) Dating site for sех with girls from Spain: https://klurl.nl/?u=Nh9cjTzt
2020-03-22 09:29:09
183.106.69.129 attackspambots
Mar 21 22:06:06 mout sshd[12118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.106.69.129  user=pi
Mar 21 22:06:08 mout sshd[12118]: Failed password for pi from 183.106.69.129 port 52028 ssh2
Mar 21 22:06:08 mout sshd[12118]: Connection reset by 183.106.69.129 port 52028 [preauth]
2020-03-22 09:20:12
77.247.108.77 attack
Mar 21 22:35:29 debian-2gb-nbg1-2 kernel: \[7085625.592256\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.108.77 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=3901 PROTO=TCP SPT=59617 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-22 09:05:31
27.155.83.174 attackbots
SSH brute-force attempt
2020-03-22 09:07:42
172.245.25.215 attackspam
Automatic report - XMLRPC Attack
2020-03-22 09:39:11
103.45.191.24 attackbots
SSH Brute Force
2020-03-22 09:25:01
37.248.154.16 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/37.248.154.16/ 
 
 PL - 1H : (33)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PL 
 NAME ASN : ASN8374 
 
 IP : 37.248.154.16 
 
 CIDR : 37.248.0.0/15 
 
 PREFIX COUNT : 30 
 
 UNIQUE IP COUNT : 1321472 
 
 
 ATTACKS DETECTED ASN8374 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2020-03-21 22:06:06 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2020-03-22 09:21:20
88.156.122.72 attack
Invalid user shoutcast from 88.156.122.72 port 39158
2020-03-22 09:04:59
35.227.35.222 attackbots
2020-03-22T01:06:13.473182struts4.enskede.local sshd\[24666\]: Invalid user ib from 35.227.35.222 port 33664
2020-03-22T01:06:13.480649struts4.enskede.local sshd\[24666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.35.227.35.bc.googleusercontent.com
2020-03-22T01:06:16.911194struts4.enskede.local sshd\[24666\]: Failed password for invalid user ib from 35.227.35.222 port 33664 ssh2
2020-03-22T01:09:09.004478struts4.enskede.local sshd\[24742\]: Invalid user emma from 35.227.35.222 port 58128
2020-03-22T01:09:09.010612struts4.enskede.local sshd\[24742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.35.227.35.bc.googleusercontent.com
...
2020-03-22 09:04:44
218.59.139.12 attack
$f2bV_matches
2020-03-22 09:26:04
14.160.24.32 attackspambots
Mar 22 02:12:46 ns381471 sshd[3219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.160.24.32
Mar 22 02:12:49 ns381471 sshd[3219]: Failed password for invalid user JimLin from 14.160.24.32 port 34432 ssh2
2020-03-22 09:25:34
193.29.15.169 attackspam
21.03.2020 21:05:54 Recursive DNS scan
2020-03-22 09:31:55
165.22.220.36 attackbotsspam
WordPress brute force
2020-03-22 09:24:38
185.165.118.54 attackspam
Mar 22 00:26:08 markkoudstaal sshd[22895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.165.118.54
Mar 22 00:26:11 markkoudstaal sshd[22895]: Failed password for invalid user spike from 185.165.118.54 port 39094 ssh2
Mar 22 00:29:27 markkoudstaal sshd[23363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.165.118.54
2020-03-22 09:43:36
222.186.15.10 attack
Mar 22 03:25:59 server2 sshd\[5908\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar 22 03:28:32 server2 sshd\[6001\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar 22 03:28:33 server2 sshd\[5999\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar 22 03:28:52 server2 sshd\[6006\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar 22 03:34:39 server2 sshd\[6394\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar 22 03:34:39 server2 sshd\[6396\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
2020-03-22 09:34:59

Recently Reported IPs

61.58.60.240 191.53.254.123 23.238.25.12 131.100.209.139
68.183.94.110 179.146.241.44 188.226.151.23 165.227.63.207
123.130.226.231 31.171.1.86 91.228.198.113 81.219.66.154
117.175.105.92 103.249.52.5 91.107.18.249 184.83.227.254
183.196.178.167 183.152.69.171 167.160.127.88 220.172.80.206