Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Oct  7 16:03:01 scw-6657dc sshd[1843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
Oct  7 16:03:01 scw-6657dc sshd[1843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
Oct  7 16:03:03 scw-6657dc sshd[1843]: Failed password for root from 106.52.139.223 port 57736 ssh2
...
2020-10-08 02:41:06
attackspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-07 18:54:53
attack
Sep  9 05:15:49  sshd\[16905\]: User root from 106.52.139.223 not allowed because not listed in AllowUsersSep  9 05:15:50  sshd\[16905\]: Failed password for invalid user root from 106.52.139.223 port 54846 ssh2
...
2020-09-09 23:01:37
attack
Sep  9 05:15:49  sshd\[16905\]: User root from 106.52.139.223 not allowed because not listed in AllowUsersSep  9 05:15:50  sshd\[16905\]: Failed password for invalid user root from 106.52.139.223 port 54846 ssh2
...
2020-09-09 16:43:31
attackbots
Sep  6 18:52:30 mailserver sshd\[4324\]: Invalid user maill from 106.52.139.223
...
2020-09-07 22:39:06
attackbotsspam
Sep  6 18:52:30 mailserver sshd\[4324\]: Invalid user maill from 106.52.139.223
...
2020-09-07 14:19:12
attackspambots
Sep  6 18:52:30 mailserver sshd\[4324\]: Invalid user maill from 106.52.139.223
...
2020-09-07 06:51:38
attackspam
2020-08-30T23:35:17.772024hostname sshd[24813]: Failed password for invalid user wlp from 106.52.139.223 port 49072 ssh2
2020-08-30T23:40:22.133435hostname sshd[26431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
2020-08-30T23:40:23.835233hostname sshd[26431]: Failed password for root from 106.52.139.223 port 43202 ssh2
...
2020-08-31 03:53:33
attack
2020-08-23T05:41:54.0214561495-001 sshd[43423]: Invalid user deploy from 106.52.139.223 port 38770
2020-08-23T05:41:55.9890941495-001 sshd[43423]: Failed password for invalid user deploy from 106.52.139.223 port 38770 ssh2
2020-08-23T05:47:27.5040411495-001 sshd[43665]: Invalid user cdo from 106.52.139.223 port 37842
2020-08-23T05:47:27.5075161495-001 sshd[43665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223
2020-08-23T05:47:27.5040411495-001 sshd[43665]: Invalid user cdo from 106.52.139.223 port 37842
2020-08-23T05:47:29.5219541495-001 sshd[43665]: Failed password for invalid user cdo from 106.52.139.223 port 37842 ssh2
...
2020-08-23 18:22:19
attackspam
Aug 17 22:11:15 rocket sshd[6685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223
Aug 17 22:11:16 rocket sshd[6685]: Failed password for invalid user liupeng from 106.52.139.223 port 32794 ssh2
...
2020-08-18 05:22:53
attackbotsspam
Aug 15 04:22:08 serwer sshd\[20837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
Aug 15 04:22:10 serwer sshd\[20837\]: Failed password for root from 106.52.139.223 port 54090 ssh2
Aug 15 04:25:36 serwer sshd\[22870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
...
2020-08-15 12:18:20
attackbotsspam
Jul 31 16:08:09 marvibiene sshd[20231]: Failed password for root from 106.52.139.223 port 48114 ssh2
Jul 31 16:13:34 marvibiene sshd[20500]: Failed password for root from 106.52.139.223 port 46346 ssh2
2020-08-01 02:22:06
attackspambots
Multiple SSH authentication failures from 106.52.139.223
2020-07-30 04:50:32
attackbotsspam
prod8
...
2020-06-28 00:40:24
attackbotsspam
$f2bV_matches
2020-06-23 13:58:34
attack
2020-06-01T03:21:32.275924ionos.janbro.de sshd[22094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
2020-06-01T03:21:34.323966ionos.janbro.de sshd[22094]: Failed password for root from 106.52.139.223 port 47146 ssh2
2020-06-01T03:30:06.948341ionos.janbro.de sshd[22154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
2020-06-01T03:30:08.886298ionos.janbro.de sshd[22154]: Failed password for root from 106.52.139.223 port 57232 ssh2
2020-06-01T03:34:20.802741ionos.janbro.de sshd[22184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223  user=root
2020-06-01T03:34:22.610472ionos.janbro.de sshd[22184]: Failed password for root from 106.52.139.223 port 48160 ssh2
2020-06-01T03:42:43.346162ionos.janbro.de sshd[22216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10
...
2020-06-01 18:03:00
attack
SSH Brute Force
2020-05-29 12:08:39
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.139.223
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.139.223.			IN	A

;; AUTHORITY SECTION:
.			455	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052802 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 29 12:08:34 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 223.139.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 223.139.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
223.238.220.245 attack
Unauthorised access (May 26) SRC=223.238.220.245 LEN=52 TOS=0x18 PREC=0x20 TTL=112 ID=29248 DF TCP DPT=445 WINDOW=8192 SYN
2020-05-26 20:56:42
118.25.8.234 attackbots
May 26 11:47:50 sip sshd[413448]: Invalid user supervisor from 118.25.8.234 port 52032
May 26 11:47:53 sip sshd[413448]: Failed password for invalid user supervisor from 118.25.8.234 port 52032 ssh2
May 26 11:57:04 sip sshd[413558]: Invalid user fabian from 118.25.8.234 port 39756
...
2020-05-26 20:26:23
37.70.217.215 attackbots
$f2bV_matches
2020-05-26 20:21:22
202.90.154.22 attack
Spammer
2020-05-26 20:38:54
186.215.197.15 attackspambots
(imapd) Failed IMAP login from 186.215.197.15 (BR/Brazil/projelmec.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 26 11:59:47 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=186.215.197.15, lip=5.63.12.44, TLS, session=
2020-05-26 20:54:52
64.227.107.24 attack
Invalid user admin from 64.227.107.24 port 57164
2020-05-26 20:45:23
104.236.230.184 attackbotsspam
May 26 11:34:47 web01 sshd[26989]: Failed password for root from 104.236.230.184 port 51580 ssh2
May 26 11:38:00 web01 sshd[27039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.230.184 
...
2020-05-26 20:23:51
122.51.60.39 attack
Invalid user lorianne from 122.51.60.39 port 32864
2020-05-26 21:02:28
121.229.14.66 attackbots
Invalid user ircd from 121.229.14.66 port 48302
2020-05-26 20:43:02
122.51.68.196 attackspam
May 26 09:30:08 debian-2gb-nbg1-2 kernel: \[12737008.099560\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.51.68.196 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=46746 PROTO=TCP SPT=53878 DPT=32187 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-26 20:23:30
123.172.249.170 attackspam
ICMP MH Probe, Scan /Distributed -
2020-05-26 20:58:20
101.51.157.154 attack
Unauthorized connection attempt from IP address 101.51.157.154 on Port 445(SMB)
2020-05-26 20:46:55
125.231.16.131 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-26 20:56:57
209.17.97.42 attackbots
IP 209.17.97.42 attacked honeypot on port: 8000 at 5/26/2020 1:13:11 PM
2020-05-26 20:32:46
118.70.72.161 attack
firewall-block, port(s): 445/tcp
2020-05-26 20:34:44

Recently Reported IPs

168.197.226.235 144.91.106.71 52.247.115.98 125.161.129.130
46.99.139.76 61.91.57.134 45.140.174.86 70.36.114.239
213.142.27.139 106.52.187.48 45.143.223.187 60.219.171.134
83.26.105.135 186.190.183.2 106.53.102.196 46.4.74.194
31.13.191.72 140.249.30.188 212.56.198.38 45.89.197.110