106.52.16.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 10700	2020-05-31 20:35:54
attackbotsspam	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2580 [T]	2020-05-20 10:55:51
attackbots	Invalid user boss from 106.52.16.54 port 45012	2020-04-18 06:26:51
attackspambots	Apr 15 10:34:24 vps46666688 sshd[16979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.54 Apr 15 10:34:27 vps46666688 sshd[16979]: Failed password for invalid user user from 106.52.16.54 port 48920 ssh2 ...	2020-04-16 01:05:19
attackspambots	Apr 10 23:46:23 mail sshd\[10302\]: Invalid user akee from 106.52.16.54 Apr 10 23:46:23 mail sshd\[10302\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.54 ...	2020-04-11 19:17:21
attackspambots	Apr 5 08:00:49 dallas01 sshd[18905]: Failed password for root from 106.52.16.54 port 37520 ssh2 Apr 5 08:03:59 dallas01 sshd[19413]: Failed password for root from 106.52.16.54 port 39964 ssh2	2020-04-05 22:20:30
attack	Invalid user q from 106.52.16.54 port 53704	2020-02-22 16:00:42
attack	Automatic report - SSH Brute-Force Attack	2020-02-15 02:42:32
attack	Feb 8 11:36:46 haigwepa sshd[22192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.54 Feb 8 11:36:48 haigwepa sshd[22192]: Failed password for invalid user zfs from 106.52.16.54 port 36630 ssh2 ...	2020-02-08 21:06:55
attackspambots	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2220 [J]	2020-01-21 19:33:43
attackspambots	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2220 [J]	2020-01-20 23:03:40
attackbots	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2220 [J]	2020-01-20 00:37:33
attack	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2220 [J]	2020-01-19 04:00:07
attackspambots	Unauthorized connection attempt detected from IP address 106.52.16.54 to port 2220 [J]	2020-01-17 04:16:16
attackspam	" "	2020-01-11 00:47:14

Comments on same subnet:

IP	Type	Details	Datetime
106.52.169.18	attackspambots	"Unauthorized connection attempt on SSHD detected"	2020-08-20 06:44:30
106.52.16.23	attackspam	Aug 2 04:26:19 hgb10301 sshd[15042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.23 user=r.r Aug 2 04:26:21 hgb10301 sshd[15042]: Failed password for r.r from 106.52.16.23 port 55804 ssh2 Aug 2 04:26:21 hgb10301 sshd[15042]: Received disconnect from 106.52.16.23 port 55804:11: Bye Bye [preauth] Aug 2 04:26:21 hgb10301 sshd[15042]: Disconnected from authenticating user r.r 106.52.16.23 port 55804 [preauth] Aug 2 04:29:18 hgb10301 sshd[15164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.16.23 user=r.r Aug 2 04:29:20 hgb10301 sshd[15164]: Failed password for r.r from 106.52.16.23 port 55610 ssh2 Aug 2 04:29:22 hgb10301 sshd[15164]: Received disconnect from 106.52.16.23 port 55610:11: Bye Bye [preauth] Aug 2 04:29:22 hgb10301 sshd[15164]: Disconnected from authenticating user r.r 106.52.16.23 port 55610 [preauth] Aug 2 04:37:08 hgb10301 sshd[15355]: pam_unix(s........ -------------------------------	2020-08-03 04:33:11
106.52.169.18	attackspam	Jul 31 23:50:51 PorscheCustomer sshd[27472]: Failed password for root from 106.52.169.18 port 52796 ssh2 Jul 31 23:53:29 PorscheCustomer sshd[27490]: Failed password for root from 106.52.169.18 port 47264 ssh2 ...	2020-08-01 07:40:46
106.52.16.21	attack	Attempted connection to port 6379.	2020-07-25 02:04:53
106.52.169.18	attackspam	2020-06-26T17:21:43.358902lavrinenko.info sshd[9892]: Invalid user user from 106.52.169.18 port 54098 2020-06-26T17:21:45.352636lavrinenko.info sshd[9892]: Failed password for invalid user user from 106.52.169.18 port 54098 ssh2 2020-06-26T17:24:23.323979lavrinenko.info sshd[9956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18 user=root 2020-06-26T17:24:25.609615lavrinenko.info sshd[9956]: Failed password for root from 106.52.169.18 port 41698 ssh2 2020-06-26T17:26:46.467427lavrinenko.info sshd[10110]: Invalid user serge from 106.52.169.18 port 57526 ...	2020-06-26 22:26:56
106.52.169.18	attackspam	2020-04-11T00:56:05.112856linuxbox-skyline sshd[42512]: Invalid user jon from 106.52.169.18 port 56540 ...	2020-04-11 17:47:03
106.52.169.18	attackspam	Feb 20 11:58:50 sachi sshd\[11888\]: Invalid user support from 106.52.169.18 Feb 20 11:58:50 sachi sshd\[11888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18 Feb 20 11:58:52 sachi sshd\[11888\]: Failed password for invalid user support from 106.52.169.18 port 43062 ssh2 Feb 20 12:05:33 sachi sshd\[12388\]: Invalid user testuser from 106.52.169.18 Feb 20 12:05:33 sachi sshd\[12388\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18	2020-02-21 06:25:04
106.52.169.18	attackspam	Feb 8 07:16:51 markkoudstaal sshd[20434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18 Feb 8 07:16:52 markkoudstaal sshd[20434]: Failed password for invalid user yqa from 106.52.169.18 port 49906 ssh2 Feb 8 07:19:16 markkoudstaal sshd[20875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18	2020-02-08 16:51:16
106.52.169.18	attackspam	$f2bV_matches	2020-01-02 14:47:20
106.52.169.18	attackspam	$f2bV_matches	2019-12-27 06:18:21
106.52.169.18	attackspambots	$f2bV_matches_ltvn	2019-12-24 21:49:57
106.52.169.18	attack	Dec 18 09:33:23 ns41 sshd[7493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18	2019-12-18 16:53:51
106.52.169.18	attackbotsspam	Dec 5 11:54:22 vibhu-HP-Z238-Microtower-Workstation sshd\[17606\]: Invalid user egligeaud from 106.52.169.18 Dec 5 11:54:22 vibhu-HP-Z238-Microtower-Workstation sshd\[17606\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18 Dec 5 11:54:24 vibhu-HP-Z238-Microtower-Workstation sshd\[17606\]: Failed password for invalid user egligeaud from 106.52.169.18 port 58788 ssh2 Dec 5 12:01:49 vibhu-HP-Z238-Microtower-Workstation sshd\[18033\]: Invalid user gesco from 106.52.169.18 Dec 5 12:01:49 vibhu-HP-Z238-Microtower-Workstation sshd\[18033\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.169.18 ...	2019-12-05 15:06:56
106.52.169.18	attack	Nov 29 21:16:33 firewall sshd[25506]: Invalid user apache from 106.52.169.18 Nov 29 21:16:35 firewall sshd[25506]: Failed password for invalid user apache from 106.52.169.18 port 50592 ssh2 Nov 29 21:21:10 firewall sshd[25631]: Invalid user madhavi from 106.52.169.18 ...	2019-11-30 08:34:45
106.52.166.242	attackspam	Nov 9 01:51:21 ny01 sshd[1118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.166.242 Nov 9 01:51:23 ny01 sshd[1118]: Failed password for invalid user dtacplayapi from 106.52.166.242 port 50202 ssh2 Nov 9 01:55:59 ny01 sshd[2236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.166.242	2019-11-09 15:27:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.16.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.16.54.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011000 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 00:47:10 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 54.16.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.16.52.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.114.169.217	attack	Invalid user admin from 37.114.169.217 port 36549	2020-01-10 23:31:26
45.251.47.21	attack	Invalid user dell from 45.251.47.21 port 36124	2020-01-10 23:29:32
58.37.18.213	attackbots	Unauthorized connection attempt detected from IP address 58.37.18.213 to port 7822	2020-01-10 23:25:52
103.107.100.13	attackspam	Invalid user postgres from 103.107.100.13 port 34340	2020-01-10 23:47:40
185.253.241.110	attack	Jan 10 13:58:42 grey postfix/smtpd\[30256\]: NOQUEUE: reject: RCPT from unknown\[185.253.241.110\]: 554 5.7.1 Service unavailable\; Client host \[185.253.241.110\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?185.253.241.110\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-11 00:04:07
190.153.249.99	attackspambots	Jan 10 18:48:12 gw1 sshd[17838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.153.249.99 Jan 10 18:48:14 gw1 sshd[17838]: Failed password for invalid user 123 from 190.153.249.99 port 36375 ssh2 ...	2020-01-10 23:59:53
94.177.215.195	attackspambots	$f2bV_matches	2020-01-10 23:48:17
91.195.46.10	attackbots	Jan 6 20:29:30 vegas sshd[17471]: Invalid user elasticsearch from 91.195.46.10 port 41403 Jan 6 20:29:30 vegas sshd[17471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.195.46.10 Jan 6 20:29:32 vegas sshd[17471]: Failed password for invalid user elasticsearch from 91.195.46.10 port 41403 ssh2 Jan 6 20:36:27 vegas sshd[18726]: Invalid user python from 91.195.46.10 port 59172 Jan 6 20:36:27 vegas sshd[18726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.195.46.10 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.195.46.10	2020-01-10 23:48:50
213.238.166.18	attackspambots	from mail.addressablespaces.com (vpsnode22.webstudio38.com [213.238.166.18]); Fri, 10 Jan 2020 07:18:46 -0500 (EST) by mail.addressablespaces.com id h31lqc0001g1	2020-01-10 23:57:21
14.186.159.162	attackbotsspam	Invalid user admin from 14.186.159.162 port 36050	2020-01-10 23:35:48
222.186.15.166	attack	Unauthorized connection attempt detected from IP address 222.186.15.166 to port 22 [T]	2020-01-10 23:38:22
222.186.30.145	attackbotsspam	Jan 10 18:01:21 server2 sshd\[10729\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers Jan 10 18:01:22 server2 sshd\[10731\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers Jan 10 18:01:22 server2 sshd\[10734\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers Jan 10 18:04:45 server2 sshd\[10837\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers Jan 10 18:04:46 server2 sshd\[10840\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers Jan 10 18:04:46 server2 sshd\[10842\]: User root from 222.186.30.145 not allowed because not listed in AllowUsers	2020-01-11 00:09:59
91.212.150.147	attack	Invalid user test from 91.212.150.147 port 43876	2020-01-10 23:48:37
51.254.51.182	attackspam	...	2020-01-10 23:27:22
177.85.115.85	attackspambots	Invalid user admin from 177.85.115.85 port 40488	2020-01-10 23:41:14

Recently Reported IPs

171.100.62.42	123.21.82.183	116.96.89.69	180.215.213.178
116.103.227.10	84.91.113.175	178.188.73.170	142.93.125.73
221.124.105.24	78.97.155.225	113.23.31.22	114.225.253.188
59.56.62.29	189.135.128.129	125.83.105.199	151.11.179.58
152.32.100.110	113.177.123.219	47.247.53.165	52.109.51.58