Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jun  7 16:00:14 hell sshd[14344]: Failed password for root from 106.52.107.94 port 52576 ssh2
...
2020-06-08 01:57:27
attackspambots
May 21 21:11:06 onepixel sshd[751765]: Invalid user gaw from 106.52.107.94 port 56010
May 21 21:11:06 onepixel sshd[751765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.107.94 
May 21 21:11:06 onepixel sshd[751765]: Invalid user gaw from 106.52.107.94 port 56010
May 21 21:11:09 onepixel sshd[751765]: Failed password for invalid user gaw from 106.52.107.94 port 56010 ssh2
May 21 21:13:46 onepixel sshd[752013]: Invalid user ojv from 106.52.107.94 port 51138
2020-05-22 05:31:36
Comments on same subnet:
IP Type Details Datetime
106.52.107.70 attackbots
Jun 18 14:31:54 srv1 sshd[30248]: Invalid user moodle from 106.52.107.70
Jun 18 14:31:56 srv1 sshd[30248]: Failed password for invalid user moodle from 106.52.107.70 port 59612 ssh2
Jun 18 15:06:04 srv1 sshd[25974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.107.70  user=r.r
Jun 18 15:06:06 srv1 sshd[25974]: Failed password for r.r from 106.52.107.70 port 58944 ssh2
Jun 18 15:07:55 srv1 sshd[27999]: Invalid user abi from 106.52.107.70


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.52.107.70
2020-06-18 23:43:45
106.52.107.81 attack
Unauthorized connection attempt detected from IP address 106.52.107.81 to port 80 [J]
2020-02-01 10:50:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.107.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.107.94.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052102 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 22 05:31:32 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 94.107.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.107.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
177.87.255.96 attack
lfd: (smtpauth) Failed SMTP AUTH login from 177.87.255.96 (BR/Brazil/client-ngranada-177-87-255-96.atinformatica.inf.br): 5 in the last 3600 secs - Thu May  3 18:10:42 2018
2020-02-07 06:44:09
185.234.216.129 attack
lfd: (smtpauth) Failed SMTP AUTH login from 185.234.216.129 (IE/Ireland/-): 5 in the last 3600 secs - Wed May 16 08:26:25 2018
2020-02-07 06:39:09
164.39.10.153 attack
lfd: (smtpauth) Failed SMTP AUTH login from 164.39.10.153 (GB/United Kingdom/no-reverse-dns.metronet-uk.com): 5 in the last 3600 secs - Sat Apr 28 11:41:57 2018
2020-02-07 06:47:41
109.50.174.45 attackspam
Feb  6 17:31:13 plusreed sshd[17087]: Invalid user kp from 109.50.174.45
...
2020-02-07 06:48:03
177.221.99.163 attackspam
lfd: (smtpauth) Failed SMTP AUTH login from 177.221.99.163 (BR/Brazil/bilink-163-bgp99.bilink.com.br): 5 in the last 3600 secs - Sat Apr 14 07:00:08 2018
2020-02-07 06:58:18
92.118.38.57 attackbots
2020-02-06 23:26:51 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daegu@no-server.de\)
2020-02-06 23:26:51 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daegu@no-server.de\)
2020-02-06 23:26:56 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daegu@no-server.de\)
2020-02-06 23:27:00 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daegu@no-server.de\)
2020-02-06 23:27:23 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daemon@no-server.de\)
2020-02-06 23:27:23 dovecot_login authenticator failed for \(User\) \[92.118.38.57\]: 535 Incorrect authentication data \(set_id=daemon@no-server.de\)
...
2020-02-07 06:48:32
124.13.44.145 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 124.13.44.145 (MY/Malaysia/-): 5 in the last 3600 secs - Thu May  3 22:18:44 2018
2020-02-07 06:44:52
110.87.202.39 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 110.87.202.39 (CN/China/39.202.87.110.broad.np.fj.dynamic.163data.com.cn): 5 in the last 3600 secs - Sat May 19 03:34:35 2018
2020-02-07 06:40:11
103.207.36.50 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 103.207.36.50 (VN/Vietnam/-): 5 in the last 3600 secs - Thu Apr 12 23:11:13 2018
2020-02-07 07:05:12
37.239.28.244 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 37.239.28.244 (IQ/Iraq/-): 5 in the last 3600 secs - Wed Apr 25 01:10:03 2018
2020-02-07 06:49:38
14.18.118.64 attackspam
2020-02-06T16:30:25.3096831495-001 sshd[1783]: Invalid user zgr from 14.18.118.64 port 37998
2020-02-06T16:30:25.3144261495-001 sshd[1783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.64
2020-02-06T16:30:25.3096831495-001 sshd[1783]: Invalid user zgr from 14.18.118.64 port 37998
2020-02-06T16:30:27.8103421495-001 sshd[1783]: Failed password for invalid user zgr from 14.18.118.64 port 37998 ssh2
2020-02-06T16:36:48.9140841495-001 sshd[2073]: Invalid user ckn from 14.18.118.64 port 52146
2020-02-06T16:36:48.9216441495-001 sshd[2073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.118.64
2020-02-06T16:36:48.9140841495-001 sshd[2073]: Invalid user ckn from 14.18.118.64 port 52146
2020-02-06T16:36:50.3287521495-001 sshd[2073]: Failed password for invalid user ckn from 14.18.118.64 port 52146 ssh2
2020-02-06T16:39:08.0829321495-001 sshd[2185]: Invalid user cag from 14.18.118.64 port 41380
202
...
2020-02-07 06:51:30
173.95.164.186 attackbots
Feb  6 12:16:24 hpm sshd\[29901\]: Invalid user uql from 173.95.164.186
Feb  6 12:16:24 hpm sshd\[29901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-173-95-164-186.nc.res.rr.com
Feb  6 12:16:26 hpm sshd\[29901\]: Failed password for invalid user uql from 173.95.164.186 port 57118 ssh2
Feb  6 12:19:35 hpm sshd\[30345\]: Invalid user iec from 173.95.164.186
Feb  6 12:19:35 hpm sshd\[30345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-173-95-164-186.nc.res.rr.com
2020-02-07 06:39:38
60.189.37.255 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 60.189.37.255 (CN/China/255.37.189.60.broad.tz.zj.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu Apr 12 01:20:27 2018
2020-02-07 07:14:21
115.213.232.64 attackspam
lfd: (smtpauth) Failed SMTP AUTH login from 115.213.232.64 (CN/China/-): 5 in the last 3600 secs - Fri Apr 13 00:59:24 2018
2020-02-07 07:04:53
42.59.110.48 attack
lfd: (smtpauth) Failed SMTP AUTH login from 42.59.110.48 (CN/China/-): 5 in the last 3600 secs - Mon May 21 13:47:44 2018
2020-02-07 06:41:27

Recently Reported IPs

183.48.88.28 179.117.242.48 12.102.82.184 83.178.239.231
162.216.102.130 60.27.8.242 96.241.127.195 186.183.248.121
115.31.63.181 23.121.35.136 220.152.113.137 44.205.209.169
125.100.243.69 170.29.70.165 194.197.223.83 36.22.145.108
63.145.169.143 174.110.165.31 94.255.122.239 137.84.90.145