106.52.155.213

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 106.52.155.213 to port 23 [T]	2020-08-30 15:57:40
attack	[H1] Blocked by UFW	2020-07-07 02:30:52

Comments on same subnet:

IP	Type	Details	Datetime
106.52.155.37	attackspam	23.07.2019 13:42:55 - Wordpress fail Detected by ELinOX-ALM	2019-07-23 23:50:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.155.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7895
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.155.213.			IN	A

;; AUTHORITY SECTION:
.			276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070601 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 02:30:49 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 213.155.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.155.52.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
186.3.234.169	attackbotsspam	Sep 7 06:43:49 php2 sshd\[26328\]: Invalid user 654321 from 186.3.234.169 Sep 7 06:43:49 php2 sshd\[26328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-3-234-169.netlife.ec Sep 7 06:43:52 php2 sshd\[26328\]: Failed password for invalid user 654321 from 186.3.234.169 port 59453 ssh2 Sep 7 06:50:20 php2 sshd\[26963\]: Invalid user rodomantsev123 from 186.3.234.169 Sep 7 06:50:20 php2 sshd\[26963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-3-234-169.netlife.ec	2019-09-08 01:33:55
112.78.165.140	attackspambots	C1,DEF GET /shell.php	2019-09-08 02:21:16
5.62.41.170	attackbots	\[2019-09-07 18:30:38\] NOTICE\[603\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.170:13069' \(callid: 1035677388-256703499-63010709\) - Failed to authenticate \[2019-09-07 18:30:38\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-07T18:30:38.570+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1035677388-256703499-63010709",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.41.170/13069",Challenge="1567873838/e585215322fc2d45e8e6e61ead7d842f",Response="52bea22b59483ba08df50250ae5e0caa",ExpectedResponse="" \[2019-09-07 18:30:38\] NOTICE\[25634\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.170:13069' \(callid: 1035677388-256703499-63010709\) - Failed to authenticate \[2019-09-07 18:30:38\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",Eve	2019-09-08 01:18:06
47.74.219.129	attack	Sep 7 18:06:44 MK-Soft-VM7 sshd\[8558\]: Invalid user verdaccio from 47.74.219.129 port 47686 Sep 7 18:06:44 MK-Soft-VM7 sshd\[8558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.219.129 Sep 7 18:06:46 MK-Soft-VM7 sshd\[8558\]: Failed password for invalid user verdaccio from 47.74.219.129 port 47686 ssh2 ...	2019-09-08 02:13:01
159.89.53.222	attackspam	Sep 7 01:57:41 web9 sshd\[13439\]: Invalid user jenkins@321 from 159.89.53.222 Sep 7 01:57:41 web9 sshd\[13439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.53.222 Sep 7 01:57:44 web9 sshd\[13439\]: Failed password for invalid user jenkins@321 from 159.89.53.222 port 33246 ssh2 Sep 7 02:01:35 web9 sshd\[14125\]: Invalid user wwwadmin from 159.89.53.222 Sep 7 02:01:35 web9 sshd\[14125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.53.222	2019-09-08 02:16:09
51.89.153.213	attack	\[2019-09-07 18:00:29\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-07T18:00:29.249+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="468336627-2094504159-1076685137",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.89.153.213/53769",Challenge="1567872029/d29d6ddca5a95ab4d6e4906d656dbbbd",Response="9065798a802d7f5462264fda0dbc2e02",ExpectedResponse="" \[2019-09-07 18:00:29\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-07T18:00:29.295+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="468336627-2094504159-1076685137",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.89.153.213/53769",Challenge="1567872029/d29d6ddca5a95ab4d6e4906d656dbbbd",Response="58b5f230f2375976b448cbf8518af554",ExpectedResponse="" \[2019-09-07 18:00:29\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResp	2019-09-08 01:16:53
117.212.92.7	attackbotsspam	Automatic report - Port Scan Attack	2019-09-08 01:46:36
136.32.230.96	attack	F2B jail: sshd. Time: 2019-09-07 20:00:19, Reported by: VKReport	2019-09-08 02:02:46
37.59.53.22	attack	Sep 7 20:09:39 SilenceServices sshd[24920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.53.22 Sep 7 20:09:41 SilenceServices sshd[24920]: Failed password for invalid user ubuntu from 37.59.53.22 port 56574 ssh2 Sep 7 20:13:19 SilenceServices sshd[26237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.53.22	2019-09-08 02:24:12
167.88.10.229	attackspambots	Received: from shortedtim.kueller-koermani.biz (167.88.10.229) mike@hiketraffic.tech mailto:nisha.pims@gmail.com	2019-09-08 01:37:36
60.191.38.77	attackspambots	Probing for /login	2019-09-08 02:09:30
182.61.160.15	attack	Sep 7 17:50:35 meumeu sshd[31111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.160.15 Sep 7 17:50:37 meumeu sshd[31111]: Failed password for invalid user vmuser from 182.61.160.15 port 54872 ssh2 Sep 7 17:55:43 meumeu sshd[31652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.160.15 ...	2019-09-08 02:15:12
115.49.146.71	attackspam	Unauthorised access (Sep 7) SRC=115.49.146.71 LEN=40 TTL=50 ID=49107 TCP DPT=23 WINDOW=10911 SYN	2019-09-08 01:40:31
138.68.90.158	attackspam	Sep 7 21:21:19 server sshd\[6683\]: Invalid user teamspeak3-user from 138.68.90.158 port 35514 Sep 7 21:21:19 server sshd\[6683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.90.158 Sep 7 21:21:21 server sshd\[6683\]: Failed password for invalid user teamspeak3-user from 138.68.90.158 port 35514 ssh2 Sep 7 21:25:12 server sshd\[22158\]: Invalid user test from 138.68.90.158 port 51646 Sep 7 21:25:12 server sshd\[22158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.90.158	2019-09-08 02:25:56
82.99.196.134	attack	Unauthorized connection attempt from IP address 82.99.196.134 on Port 445(SMB)	2019-09-08 01:45:17

Recently Reported IPs

177.94.156.25	177.86.124.127	176.97.38.23	170.0.81.242
140.237.156.200	138.204.70.205	138.0.92.205	138.0.92.42
131.221.16.35	123.248.243.105	221.145.205.81	121.129.196.129
106.78.181.236	118.41.116.66	117.2.207.16	116.109.32.25
115.75.105.248	115.72.170.213	113.161.4.171	111.44.173.27