106.52.39.121 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.52.39.63	attackbotsspam	$f2bV_matches	2020-05-29 17:03:51
106.52.39.63	attackspam	frenzy	2020-05-26 08:32:46
106.52.39.63	attackspambots	May 25 17:27:33 vlre-nyc-1 sshd\[28995\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.39.63 user=root May 25 17:27:34 vlre-nyc-1 sshd\[28995\]: Failed password for root from 106.52.39.63 port 56436 ssh2 May 25 17:31:53 vlre-nyc-1 sshd\[29090\]: Invalid user qqqqq from 106.52.39.63 May 25 17:31:53 vlre-nyc-1 sshd\[29090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.39.63 May 25 17:31:54 vlre-nyc-1 sshd\[29090\]: Failed password for invalid user qqqqq from 106.52.39.63 port 40398 ssh2 ...	2020-05-26 02:32:43
106.52.39.63	attackspambots	SSH Brute-Forcing (server2)	2020-05-25 01:21:24
106.52.39.157	attack	Oct 1 06:17:46 vps647732 sshd[909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.39.157 Oct 1 06:17:48 vps647732 sshd[909]: Failed password for invalid user administrator from 106.52.39.157 port 59332 ssh2 ...	2019-10-01 12:28:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.39.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29592
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.52.39.121.			IN	A

;; AUTHORITY SECTION:
.			81	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 12:30:15 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 121.39.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 121.39.52.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.248.112.28	attackbots	Jul1222:07:33server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin4secs$:user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1222:19:26server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin13secs$:user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1222:19:26server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin8secs$:user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\<5hsCoIGN6Olf HAc\>Jul1222:19:33server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin7secs$:user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS\,session=\Jul1222:14:11server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin3secs$:user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,	2019-07-13 06:12:47
31.173.123.11	attackbots	POP	2019-07-13 06:38:50
216.244.66.246	attackspam	login attempts	2019-07-13 06:09:18
137.59.56.155	attackspam	Jul 12 21:51:36 rigel postfix/smtpd[6019]: connect from unknown[137.59.56.155] Jul 12 21:51:38 rigel postfix/smtpd[6019]: warning: unknown[137.59.56.155]: SASL CRAM-MD5 authentication failed: authentication failure Jul 12 21:51:39 rigel postfix/smtpd[6019]: warning: unknown[137.59.56.155]: SASL PLAIN authentication failed: authentication failure Jul 12 21:51:40 rigel postfix/smtpd[6019]: warning: unknown[137.59.56.155]: SASL LOGIN authentication failed: authentication failure Jul 12 21:51:40 rigel postfix/smtpd[6019]: disconnect from unknown[137.59.56.155] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.59.56.155	2019-07-13 06:08:39
189.221.45.71	attack	Jul 12 21:55:52 h2034429 postfix/smtpd[8889]: connect from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] Jul x@x Jul 12 21:55:57 h2034429 postfix/smtpd[8889]: lost connection after DATA from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] Jul 12 21:55:57 h2034429 postfix/smtpd[8889]: disconnect from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 12 21:56:23 h2034429 postfix/smtpd[8889]: connect from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] Jul x@x Jul 12 21:56:33 h2034429 postfix/smtpd[8889]: lost connection after DATA from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] Jul 12 21:56:33 h2034429 postfix/smtpd[8889]: disconnect from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 12 21:56:46 h2034429 postfix/smtpd[8889]: connect from 189.221.45.71.cable.dyn.cableonline.com.mx[189.221.45.71] Jul x@x ........ ------------------------------------	2019-07-13 06:42:29
134.119.221.7	attackspambots	\[2019-07-12 17:28:46\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-12T17:28:46.316-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="004441519470391",SessionID="0x7f75440e1cc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/134.119.221.7/53238",ACLName="no_extension_match" \[2019-07-12 17:30:31\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-12T17:30:31.862-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="008441519470391",SessionID="0x7f75440de058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/134.119.221.7/60827",ACLName="no_extension_match" \[2019-07-12 17:32:30\] SECURITY\[22794\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-12T17:32:30.165-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="009441519470391",SessionID="0x7f754415c478",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/134.119.221.7/55553",ACLName="no_	2019-07-13 06:48:59
103.92.30.80	attack	fail2ban honeypot	2019-07-13 06:35:52
115.159.122.71	attack	port scan and connect, tcp 1433 (ms-sql-s)	2019-07-13 06:42:12
47.185.199.168	attackbots	Jul 13 00:22:53 mout sshd[5049]: Invalid user ssh123 from 47.185.199.168 port 53852 Jul 13 00:22:55 mout sshd[5049]: Failed password for invalid user ssh123 from 47.185.199.168 port 53852 ssh2 Jul 13 00:22:55 mout sshd[5049]: Connection closed by 47.185.199.168 port 53852 [preauth]	2019-07-13 06:40:35
5.11.24.196	attack	12.07.2019 22:06:29 - SMTP Spam without Auth on hMailserver Detected by ELinOX-hMail-A2F	2019-07-13 06:52:55
119.29.242.84	attack	frenzy	2019-07-13 06:54:33
197.204.45.110	attack	Jul 12 21:58:02 tux postfix/smtpd[31571]: connect from unknown[197.204.45.110] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.204.45.110	2019-07-13 06:46:02
159.89.104.243	attack	Invalid user nasser from 159.89.104.243 port 37165	2019-07-13 06:33:30
157.230.23.46	attackbotsspam	Jul 12 22:06:29 * sshd[31094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.23.46 Jul 12 22:06:31 * sshd[31094]: Failed password for invalid user deploy from 157.230.23.46 port 46966 ssh2	2019-07-13 06:50:12
36.89.209.22	attackspam	Invalid user wwwdata from 36.89.209.22 port 44364	2019-07-13 06:28:17

Recently Reported IPs

106.52.50.173	106.52.51.246	106.52.54.192	106.52.69.233
106.52.86.221	106.52.70.240	106.52.80.185	106.52.70.206
106.52.91.217	106.52.92.199	106.53.102.34	106.53.103.187
106.53.106.209	106.53.105.168	106.53.121.179	106.53.123.63
106.53.135.98	107.154.166.188	106.75.144.224	106.75.123.90