106.52.22.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Aug 22 08:48:29 vps333114 sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.64 Aug 22 08:48:31 vps333114 sshd[28709]: Failed password for invalid user olga from 106.52.22.64 port 44548 ssh2 ...	2020-08-22 16:04:37
attack	Aug 21 21:39:53 XXX sshd[11792]: Invalid user apache2 from 106.52.22.64 port 39258	2020-08-22 08:18:21
attack	Aug 20 08:30:05 pkdns2 sshd\[7513\]: Invalid user operatore from 106.52.22.64Aug 20 08:30:07 pkdns2 sshd\[7513\]: Failed password for invalid user operatore from 106.52.22.64 port 57702 ssh2Aug 20 08:33:55 pkdns2 sshd\[7654\]: Invalid user user2 from 106.52.22.64Aug 20 08:33:57 pkdns2 sshd\[7654\]: Failed password for invalid user user2 from 106.52.22.64 port 41970 ssh2Aug 20 08:37:37 pkdns2 sshd\[7841\]: Invalid user nancy from 106.52.22.64Aug 20 08:37:39 pkdns2 sshd\[7841\]: Failed password for invalid user nancy from 106.52.22.64 port 54468 ssh2 ...	2020-08-20 15:28:05
attackspam	Aug 13 05:46:50 cosmoit sshd[24783]: Failed password for root from 106.52.22.64 port 59824 ssh2	2020-08-13 19:41:26
attack	Invalid user zywu from 106.52.22.64 port 52218	2020-08-02 18:46:39
attack	Unauthorized connection attempt detected from IP address 106.52.22.64 to port 4445	2020-06-11 18:55:46

Comments on same subnet:

IP	Type	Details	Datetime
106.52.22.129	attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-29 04:11:59
106.52.22.129	attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-28 20:25:54
106.52.22.129	attackspam	1601239219 - 09/27/2020 22:40:19 Host: 106.52.22.129/106.52.22.129 Port: 23 TCP Blocked ...	2020-09-28 12:31:35
106.52.221.48	attackbots	1590378948 - 05/25/2020 05:55:48 Host: 106.52.221.48/106.52.221.48 Port: 23 TCP Blocked	2020-05-25 12:31:52
106.52.221.48	attack	" "	2020-05-24 15:02:20
106.52.221.140	attackbots	Invalid user student from 106.52.221.140 port 43286	2020-05-15 01:21:02
106.52.229.254	attackspambots	Apr 19 06:55:40 mailserver sshd\[8052\]: Invalid user admin from 106.52.229.254 ...	2020-04-19 19:12:56
106.52.229.254	attack	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-12 20:34:43
106.52.22.131	attackbots	5x Failed Password	2020-02-13 13:09:25
106.52.222.170	attackspambots	Unauthorized connection attempt detected from IP address 106.52.222.170 to port 2220 [J]	2020-01-31 17:31:42
106.52.22.202	attack	Dec 5 09:36:58 vpn01 sshd[25368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 5 09:37:00 vpn01 sshd[25368]: Failed password for invalid user hyka from 106.52.22.202 port 46022 ssh2 ...	2019-12-05 17:48:59
106.52.22.202	attack	Dec 4 21:10:34 eventyay sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 4 21:10:36 eventyay sshd[28709]: Failed password for invalid user nancyp from 106.52.22.202 port 44848 ssh2 Dec 4 21:16:41 eventyay sshd[29005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 ...	2019-12-05 04:32:19
106.52.22.202	attack	Dec 3 14:21:16 yesfletchmain sshd\[24084\]: Invalid user guest from 106.52.22.202 port 51978 Dec 3 14:21:16 yesfletchmain sshd\[24084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 3 14:21:19 yesfletchmain sshd\[24084\]: Failed password for invalid user guest from 106.52.22.202 port 51978 ssh2 Dec 3 14:28:22 yesfletchmain sshd\[24217\]: Invalid user rudziah from 106.52.22.202 port 54602 Dec 3 14:28:22 yesfletchmain sshd\[24217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 ...	2019-12-04 01:17:58
106.52.22.202	attackbotsspam	Dec 2 20:12:33 areeb-Workstation sshd[9392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 2 20:12:34 areeb-Workstation sshd[9392]: Failed password for invalid user anna1 from 106.52.22.202 port 48476 ssh2 ...	2019-12-02 23:43:31
106.52.22.202	attackbotsspam	Dec 1 12:31:20 server sshd\[5293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 user=root Dec 1 12:31:22 server sshd\[5293\]: Failed password for root from 106.52.22.202 port 55054 ssh2 Dec 1 12:43:16 server sshd\[7826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 user=root Dec 1 12:43:19 server sshd\[7826\]: Failed password for root from 106.52.22.202 port 44260 ssh2 Dec 1 12:46:46 server sshd\[8755\]: Invalid user hubey from 106.52.22.202 Dec 1 12:46:46 server sshd\[8755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 ...	2019-12-01 21:57:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.22.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10284
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.22.64.			IN	A

;; AUTHORITY SECTION:
.			212	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061100 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 11 18:55:39 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 64.22.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.22.52.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.173.215	attack	Jul 26 11:14:17 dignus sshd[24588]: Failed password for root from 222.186.173.215 port 49304 ssh2 Jul 26 11:14:19 dignus sshd[24588]: Failed password for root from 222.186.173.215 port 49304 ssh2 Jul 26 11:14:23 dignus sshd[24588]: Failed password for root from 222.186.173.215 port 49304 ssh2 Jul 26 11:14:26 dignus sshd[24588]: Failed password for root from 222.186.173.215 port 49304 ssh2 Jul 26 11:14:29 dignus sshd[24588]: Failed password for root from 222.186.173.215 port 49304 ssh2 ...	2020-07-27 02:22:48
104.131.13.199	attack	Port scan: Attack repeated for 24 hours	2020-07-27 02:08:07
218.85.119.92	attackbotsspam	2020-07-26T17:35:27.705043dmca.cloudsearch.cf sshd[31293]: Invalid user getmail from 218.85.119.92 port 19617 2020-07-26T17:35:27.710757dmca.cloudsearch.cf sshd[31293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.85.119.92 2020-07-26T17:35:27.705043dmca.cloudsearch.cf sshd[31293]: Invalid user getmail from 218.85.119.92 port 19617 2020-07-26T17:35:29.927875dmca.cloudsearch.cf sshd[31293]: Failed password for invalid user getmail from 218.85.119.92 port 19617 ssh2 2020-07-26T17:43:05.002800dmca.cloudsearch.cf sshd[31426]: Invalid user amartinez from 218.85.119.92 port 45870 2020-07-26T17:43:05.006691dmca.cloudsearch.cf sshd[31426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.85.119.92 2020-07-26T17:43:05.002800dmca.cloudsearch.cf sshd[31426]: Invalid user amartinez from 218.85.119.92 port 45870 2020-07-26T17:43:07.098449dmca.cloudsearch.cf sshd[31426]: Failed password for invalid user amartin ...	2020-07-27 02:08:42
157.37.240.70	attack	Port scan on 1 port(s): 445	2020-07-27 02:05:46
186.145.254.158	attackbots	2020-07-25 13:54:37 server sshd[73894]: Failed password for invalid user guest from 186.145.254.158 port 55336 ssh2	2020-07-27 02:05:07
60.251.146.67	attackbots	Unauthorized connection attempt from IP address 60.251.146.67 on Port 445(SMB)	2020-07-27 02:07:53
188.225.78.249	attackbotsspam	Jul 26 14:01:15 vbuntu sshd[11266]: refused connect from 313758-cc79339.tmweb.ru (188.225.78.249) Jul 26 14:02:17 vbuntu sshd[11328]: refused connect from 313758-cc79339.tmweb.ru (188.225.78.249) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=188.225.78.249	2020-07-27 02:00:02
13.76.227.5	attack	Invalid user roc from 13.76.227.5 port 45698	2020-07-27 02:10:24
106.52.212.117	attackspam	Jul 26 17:17:21 ncomp sshd[29927]: Invalid user zsl from 106.52.212.117 Jul 26 17:17:21 ncomp sshd[29927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.212.117 Jul 26 17:17:21 ncomp sshd[29927]: Invalid user zsl from 106.52.212.117 Jul 26 17:17:23 ncomp sshd[29927]: Failed password for invalid user zsl from 106.52.212.117 port 57360 ssh2	2020-07-27 01:45:22
178.62.252.206	attackbots	178.62.252.206 - - [26/Jul/2020:19:29:51 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.62.252.206 - - [26/Jul/2020:19:29:51 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.62.252.206 - - [26/Jul/2020:19:29:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-27 01:47:26
49.88.112.111	attack	Jul 26 10:57:08 dignus sshd[22263]: Failed password for root from 49.88.112.111 port 18263 ssh2 Jul 26 10:57:10 dignus sshd[22263]: Failed password for root from 49.88.112.111 port 18263 ssh2 Jul 26 11:07:02 dignus sshd[23601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.111 user=root Jul 26 11:07:04 dignus sshd[23601]: Failed password for root from 49.88.112.111 port 23146 ssh2 Jul 26 11:07:06 dignus sshd[23601]: Failed password for root from 49.88.112.111 port 23146 ssh2 ...	2020-07-27 02:13:25
50.101.182.201	attackspam	SSH/22 MH Probe, BF, Hack -	2020-07-27 02:06:36
58.186.64.189	attack	Unauthorized connection attempt from IP address 58.186.64.189 on Port 445(SMB)	2020-07-27 02:08:25
101.251.197.238	attack	SSH invalid-user multiple login try	2020-07-27 02:15:28
49.235.153.220	attack	Jul 26 19:35:19 webhost01 sshd[13656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.153.220 Jul 26 19:35:21 webhost01 sshd[13656]: Failed password for invalid user xiaofei from 49.235.153.220 port 56390 ssh2 ...	2020-07-27 02:21:52

Recently Reported IPs

213.100.216.156	37.6.45.70	105.235.112.20	2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762
1.52.237.9	171.249.44.65	57.180.240.65	166.11.12.229
176.38.39.245	142.93.240.192	135.66.137.232	108.172.70.214
137.183.172.179	223.22.90.3	105.55.127.203	255.43.15.38
201.114.137.249	113.53.145.21	56.220.230.115	50.131.238.73