Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Aug 12 09:55:37 pornomens sshd\[18535\]: Invalid user jboss from 106.52.116.138 port 39086
Aug 12 09:55:37 pornomens sshd\[18535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.138
Aug 12 09:55:38 pornomens sshd\[18535\]: Failed password for invalid user jboss from 106.52.116.138 port 39086 ssh2
...
2019-08-12 16:26:31
attackspambots
Aug 11 21:59:29 fr01 sshd[12047]: Invalid user bender from 106.52.116.138
Aug 11 21:59:29 fr01 sshd[12047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.138
Aug 11 21:59:29 fr01 sshd[12047]: Invalid user bender from 106.52.116.138
Aug 11 21:59:31 fr01 sshd[12047]: Failed password for invalid user bender from 106.52.116.138 port 35030 ssh2
...
2019-08-12 04:03:35
attack
Aug  8 06:27:07 pornomens sshd\[2607\]: Invalid user testuser from 106.52.116.138 port 36469
Aug  8 06:27:07 pornomens sshd\[2607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.138
Aug  8 06:27:09 pornomens sshd\[2607\]: Failed password for invalid user testuser from 106.52.116.138 port 36469 ssh2
...
2019-08-08 12:27:14
Comments on same subnet:
IP Type Details Datetime
106.52.116.101 attackbots
May  9 01:58:27 home sshd[4396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
May  9 01:58:29 home sshd[4396]: Failed password for invalid user pcguest from 106.52.116.101 port 42693 ssh2
May  9 02:03:18 home sshd[5083]: Failed password for root from 106.52.116.101 port 36698 ssh2
...
2020-05-09 08:13:58
106.52.116.101 attackspambots
May  7 07:30:08 server1 sshd\[14377\]: Failed password for invalid user ftpuser from 106.52.116.101 port 65187 ssh2
May  7 07:34:51 server1 sshd\[15819\]: Invalid user vova from 106.52.116.101
May  7 07:34:51 server1 sshd\[15819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101 
May  7 07:34:53 server1 sshd\[15819\]: Failed password for invalid user vova from 106.52.116.101 port 60876 ssh2
May  7 07:39:26 server1 sshd\[17334\]: Invalid user vinay from 106.52.116.101
...
2020-05-07 23:07:59
106.52.116.101 attackbotsspam
Apr 22 22:13:57 srv206 sshd[8389]: Invalid user admin from 106.52.116.101
...
2020-04-23 06:33:15
106.52.116.101 attack
21 attempts against mh-ssh on cloud
2020-04-13 12:11:52
106.52.116.101 attackspambots
Mar 31 23:28:30 srv01 sshd[9028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101  user=root
Mar 31 23:28:32 srv01 sshd[9028]: Failed password for root from 106.52.116.101 port 60591 ssh2
Mar 31 23:29:56 srv01 sshd[9136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101  user=root
Mar 31 23:29:58 srv01 sshd[9136]: Failed password for root from 106.52.116.101 port 19702 ssh2
Mar 31 23:31:23 srv01 sshd[9256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101  user=root
Mar 31 23:31:24 srv01 sshd[9256]: Failed password for root from 106.52.116.101 port 35306 ssh2
...
2020-04-01 05:54:31
106.52.116.101 attack
2019-12-05T13:20:45.450344suse-nuc sshd[17606]: Invalid user webmaster from 106.52.116.101 port 52254
...
2020-02-25 13:48:06
106.52.116.101 attack
Feb  6 07:55:59 lnxmysql61 sshd[29621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
2020-02-06 17:41:23
106.52.116.101 attackspambots
Nov 16 20:25:15 web1 sshd\[27894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101  user=root
Nov 16 20:25:17 web1 sshd\[27894\]: Failed password for root from 106.52.116.101 port 37892 ssh2
Nov 16 20:29:58 web1 sshd\[28288\]: Invalid user com from 106.52.116.101
Nov 16 20:29:58 web1 sshd\[28288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
Nov 16 20:30:00 web1 sshd\[28288\]: Failed password for invalid user com from 106.52.116.101 port 15381 ssh2
2019-11-17 14:42:38
106.52.116.101 attackspam
Nov 16 01:41:52 v22018086721571380 sshd[32366]: Failed password for invalid user www from 106.52.116.101 port 32703 ssh2
2019-11-16 09:18:49
106.52.116.101 attackbotsspam
Oct 23 13:14:02 tdfoods sshd\[2139\]: Invalid user ftpuser from 106.52.116.101
Oct 23 13:14:02 tdfoods sshd\[2139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
Oct 23 13:14:04 tdfoods sshd\[2139\]: Failed password for invalid user ftpuser from 106.52.116.101 port 64016 ssh2
Oct 23 13:18:55 tdfoods sshd\[2533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101  user=root
Oct 23 13:18:58 tdfoods sshd\[2533\]: Failed password for root from 106.52.116.101 port 46167 ssh2
2019-10-24 07:26:56
106.52.116.101 attackspam
Oct 15 20:56:26 work-partkepr sshd\[9421\]: Invalid user marvin from 106.52.116.101 port 40816
Oct 15 20:56:26 work-partkepr sshd\[9421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
...
2019-10-16 07:58:51
106.52.116.101 attackspambots
Automatic report - SSH Brute-Force Attack
2019-10-02 16:16:56
106.52.116.101 attack
Sep 27 05:49:09 dedicated sshd[6395]: Invalid user abc123 from 106.52.116.101 port 15439
2019-09-27 17:23:07
106.52.116.101 attackspambots
2019-08-16T19:16:25.846516abusebot-2.cloudsearch.cf sshd\[4356\]: Invalid user prueba1 from 106.52.116.101 port 9190
2019-08-17 03:37:06
106.52.116.101 attack
Aug 14 05:14:25 eventyay sshd[1644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
Aug 14 05:14:27 eventyay sshd[1644]: Failed password for invalid user designer from 106.52.116.101 port 19563 ssh2
Aug 14 05:19:35 eventyay sshd[2903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.101
...
2019-08-14 11:55:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.116.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56658
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.116.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080702 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 08 12:27:07 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 138.116.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 138.116.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
81.183.253.86 attackspam
2019-08-23T18:06:58.795922abusebot-6.cloudsearch.cf sshd\[1484\]: Invalid user edineide from 81.183.253.86 port 32325
2019-08-24 02:37:28
221.202.203.192 attack
2019-08-23T17:41:44.330668hub.schaetter.us sshd\[21247\]: Invalid user sham from 221.202.203.192
2019-08-23T17:41:44.372311hub.schaetter.us sshd\[21247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.203.192
2019-08-23T17:41:46.606160hub.schaetter.us sshd\[21247\]: Failed password for invalid user sham from 221.202.203.192 port 45987 ssh2
2019-08-23T17:46:53.328405hub.schaetter.us sshd\[21282\]: Invalid user craft from 221.202.203.192
2019-08-23T17:46:53.373425hub.schaetter.us sshd\[21282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.202.203.192
...
2019-08-24 02:49:35
209.97.128.177 attack
Aug 23 08:42:15 wbs sshd\[6642\]: Invalid user jquery from 209.97.128.177
Aug 23 08:42:15 wbs sshd\[6642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.128.177
Aug 23 08:42:17 wbs sshd\[6642\]: Failed password for invalid user jquery from 209.97.128.177 port 47308 ssh2
Aug 23 08:46:15 wbs sshd\[6963\]: Invalid user mmy from 209.97.128.177
Aug 23 08:46:15 wbs sshd\[6963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.128.177
2019-08-24 02:53:29
61.152.171.44 attackbotsspam
Aug 23 18:43:31 dev0-dcde-rnet sshd[8262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.152.171.44
Aug 23 18:43:34 dev0-dcde-rnet sshd[8262]: Failed password for invalid user admin from 61.152.171.44 port 58821 ssh2
Aug 23 18:43:35 dev0-dcde-rnet sshd[8262]: Failed password for invalid user admin from 61.152.171.44 port 58821 ssh2
Aug 23 18:43:37 dev0-dcde-rnet sshd[8262]: Failed password for invalid user admin from 61.152.171.44 port 58821 ssh2
2019-08-24 02:57:25
95.180.235.205 attack
60001/tcp 23/tcp...
[2019-08-07/23]6pkt,2pt.(tcp)
2019-08-24 02:31:21
113.160.244.144 attackbots
Aug 23 08:49:32 hiderm sshd\[4176\]: Invalid user msql from 113.160.244.144
Aug 23 08:49:32 hiderm sshd\[4176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.160.244.144
Aug 23 08:49:34 hiderm sshd\[4176\]: Failed password for invalid user msql from 113.160.244.144 port 59108 ssh2
Aug 23 08:55:14 hiderm sshd\[4670\]: Invalid user debian-tor from 113.160.244.144
Aug 23 08:55:14 hiderm sshd\[4670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.160.244.144
2019-08-24 03:00:03
107.173.175.135 attackspam
22/tcp 8088/tcp...
[2019-08-16/23]6pkt,2pt.(tcp)
2019-08-24 02:33:49
192.99.152.121 attackspam
$f2bV_matches
2019-08-24 02:57:51
213.91.181.165 attackbotsspam
445/tcp 445/tcp 445/tcp...
[2019-06-29/08-23]5pkt,1pt.(tcp)
2019-08-24 02:37:59
106.39.78.4 attackspambots
Unauthorized SSH login attempts
2019-08-24 02:42:30
119.178.155.182 attackspam
$f2bV_matches
2019-08-24 02:37:12
31.154.16.105 attackbots
2019-08-23T16:53:52.013940abusebot.cloudsearch.cf sshd\[9031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.154.16.105  user=root
2019-08-24 02:45:57
167.71.217.110 attackbots
Aug 23 08:48:29 friendsofhawaii sshd\[9036\]: Invalid user customer from 167.71.217.110
Aug 23 08:48:29 friendsofhawaii sshd\[9036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.110
Aug 23 08:48:32 friendsofhawaii sshd\[9036\]: Failed password for invalid user customer from 167.71.217.110 port 45322 ssh2
Aug 23 08:53:13 friendsofhawaii sshd\[9440\]: Invalid user jeni from 167.71.217.110
Aug 23 08:53:13 friendsofhawaii sshd\[9440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.110
2019-08-24 02:56:58
157.230.178.211 attackbotsspam
Aug 23 20:06:03 legacy sshd[7949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211
Aug 23 20:06:05 legacy sshd[7949]: Failed password for invalid user 1 from 157.230.178.211 port 59096 ssh2
Aug 23 20:10:00 legacy sshd[8035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211
...
2019-08-24 02:25:43
195.84.49.20 attack
SSH Brute Force, server-1 sshd[2827]: Failed password for invalid user debby from 195.84.49.20 port 48464 ssh2
2019-08-24 02:17:02

Recently Reported IPs

81.154.227.239 179.179.236.238 115.206.219.154 93.119.179.99
178.137.163.120 87.149.159.82 118.24.194.103 211.187.169.79
65.229.158.128 60.168.51.241 120.151.29.128 212.41.20.10
124.229.5.176 59.45.99.99 103.231.146.5 187.101.186.61
175.140.220.129 149.129.136.113 180.183.225.52 159.255.163.158