Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Sep  3 01:06:07 tux-35-217 sshd\[30925\]: Invalid user cluster from 106.52.75.242 port 48754
Sep  3 01:06:07 tux-35-217 sshd\[30925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.242
Sep  3 01:06:09 tux-35-217 sshd\[30925\]: Failed password for invalid user cluster from 106.52.75.242 port 48754 ssh2
Sep  3 01:09:37 tux-35-217 sshd\[30950\]: Invalid user mcc from 106.52.75.242 port 55274
Sep  3 01:09:37 tux-35-217 sshd\[30950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.242
...
2019-09-03 07:32:30
attackspambots
$f2bV_matches_ltvn
2019-09-02 08:05:14
attackbots
Aug 11 00:01:40 db sshd\[18804\]: Invalid user horia from 106.52.75.242
Aug 11 00:01:40 db sshd\[18804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.242 
Aug 11 00:01:42 db sshd\[18804\]: Failed password for invalid user horia from 106.52.75.242 port 43282 ssh2
Aug 11 00:04:10 db sshd\[18832\]: Invalid user us from 106.52.75.242
Aug 11 00:04:10 db sshd\[18832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.242 
...
2019-08-11 12:53:15
attackspam
Aug  7 11:54:55 docs sshd\[25515\]: Invalid user ks from 106.52.75.242Aug  7 11:54:56 docs sshd\[25515\]: Failed password for invalid user ks from 106.52.75.242 port 43636 ssh2Aug  7 11:56:53 docs sshd\[25604\]: Invalid user sanvirk from 106.52.75.242Aug  7 11:56:55 docs sshd\[25604\]: Failed password for invalid user sanvirk from 106.52.75.242 port 38138 ssh2Aug  7 11:58:54 docs sshd\[25693\]: Invalid user newton from 106.52.75.242Aug  7 11:58:56 docs sshd\[25693\]: Failed password for invalid user newton from 106.52.75.242 port 60806 ssh2
...
2019-08-07 19:25:15
Comments on same subnet:
IP Type Details Datetime
106.52.75.91 attackspambots
Jun 10 05:45:28 xeon sshd[28702]: Failed password for invalid user exx from 106.52.75.91 port 44042 ssh2
2020-06-10 16:35:22
106.52.75.91 attackbotsspam
May 27 23:34:31 odroid64 sshd\[21324\]: User root from 106.52.75.91 not allowed because not listed in AllowUsers
May 27 23:34:31 odroid64 sshd\[21324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.91  user=root
...
2020-05-28 07:56:21
106.52.75.91 attackbots
May 25 11:06:09 vserver sshd\[19246\]: Failed password for root from 106.52.75.91 port 59598 ssh2May 25 11:09:01 vserver sshd\[19290\]: Invalid user tonel from 106.52.75.91May 25 11:09:03 vserver sshd\[19290\]: Failed password for invalid user tonel from 106.52.75.91 port 36578 ssh2May 25 11:11:57 vserver sshd\[19380\]: Failed password for root from 106.52.75.91 port 41802 ssh2
...
2020-05-25 19:28:35
106.52.75.91 attackspam
$f2bV_matches
2020-04-30 00:19:28
106.52.75.91 attackspam
Apr  6 19:45:22 lanister sshd[7551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.75.91
Apr  6 19:45:22 lanister sshd[7551]: Invalid user tom from 106.52.75.91
Apr  6 19:45:24 lanister sshd[7551]: Failed password for invalid user tom from 106.52.75.91 port 40458 ssh2
Apr  6 19:48:09 lanister sshd[7587]: Invalid user admin from 106.52.75.91
2020-04-07 08:21:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.75.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63151
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.75.242.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 19:25:08 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 242.75.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 242.75.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
81.130.138.156 attackspam
Oct 24 13:59:46 MK-Soft-VM3 sshd[15496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.130.138.156 
Oct 24 13:59:47 MK-Soft-VM3 sshd[15496]: Failed password for invalid user mc from 81.130.138.156 port 57580 ssh2
...
2019-10-24 20:27:57
51.68.70.142 attackspam
Oct 24 13:59:54 srv206 sshd[26643]: Invalid user kcs from 51.68.70.142
Oct 24 13:59:54 srv206 sshd[26643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.ip-51-68-70.eu
Oct 24 13:59:54 srv206 sshd[26643]: Invalid user kcs from 51.68.70.142
Oct 24 13:59:56 srv206 sshd[26643]: Failed password for invalid user kcs from 51.68.70.142 port 37664 ssh2
...
2019-10-24 20:14:05
114.225.63.103 attack
Oct 23 23:24:30 esmtp postfix/smtpd[19939]: lost connection after AUTH from unknown[114.225.63.103]
Oct 23 23:24:31 esmtp postfix/smtpd[19939]: lost connection after AUTH from unknown[114.225.63.103]
Oct 23 23:24:33 esmtp postfix/smtpd[19939]: lost connection after AUTH from unknown[114.225.63.103]
Oct 23 23:24:34 esmtp postfix/smtpd[19939]: lost connection after AUTH from unknown[114.225.63.103]
Oct 23 23:24:36 esmtp postfix/smtpd[19939]: lost connection after AUTH from unknown[114.225.63.103]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.225.63.103
2019-10-24 20:00:16
94.73.49.45 attackspambots
2019-04-09 14:15:47 H=\(\[94.73.49.45\]\) \[94.73.49.45\]:9910 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-09 14:15:56 H=\(\[94.73.49.45\]\) \[94.73.49.45\]:10087 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-04-09 14:16:04 H=\(\[94.73.49.45\]\) \[94.73.49.45\]:10252 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2019-10-24 20:18:52
94.66.118.121 attackbotsspam
2019-01-19 12:16:32 H=ppp-94-66-118-121.home.otenet.gr \[94.66.118.121\]:42723 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-01-19 12:16:59 H=ppp-94-66-118-121.home.otenet.gr \[94.66.118.121\]:42744 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-01-19 12:17:15 H=ppp-94-66-118-121.home.otenet.gr \[94.66.118.121\]:42764 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2019-10-24 20:38:24
129.204.200.85 attackspambots
Oct 24 13:59:49 vps647732 sshd[31982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.200.85
Oct 24 13:59:51 vps647732 sshd[31982]: Failed password for invalid user lablab from 129.204.200.85 port 34092 ssh2
...
2019-10-24 20:21:00
94.66.59.120 attackbotsspam
2019-06-22 20:41:14 1hekwr-0004WF-8r SMTP connection from ppp-94-66-59-120.home.otenet.gr \[94.66.59.120\]:24285 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-22 20:41:19 1hekwv-0004WK-OQ SMTP connection from ppp-94-66-59-120.home.otenet.gr \[94.66.59.120\]:10106 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-22 20:41:22 1hekwz-0004WO-7S SMTP connection from ppp-94-66-59-120.home.otenet.gr \[94.66.59.120\]:40553 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2019-10-24 20:31:53
97.74.229.121 attackbots
2019-10-24T12:31:16.483228abusebot-7.cloudsearch.cf sshd\[14080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-97-74-229-121.ip.secureserver.net  user=root
2019-10-24 20:38:03
116.110.117.42 attackbotsspam
Oct 24 17:33:51 areeb-Workstation sshd[11367]: Failed password for root from 116.110.117.42 port 24428 ssh2
...
2019-10-24 20:06:42
195.225.147.210 attackbots
10/24/2019-07:59:50.709556 195.225.147.210 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-24 20:25:33
94.63.93.168 attackspambots
2019-01-19 17:37:49 1gktcy-0005zV-5W SMTP connection from 168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:13111 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-01-19 17:38:05 1gktdC-000601-Rg SMTP connection from 168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:43234 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-01-19 17:38:17 1gktdO-00060Q-TV SMTP connection from 168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:43334 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-02-26 18:28:05 H=168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:37319 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-26 18:28:18 H=168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:32578 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-26 18:28:23 H=168.93.63.94.rev.vodafone.pt \[94.63.93.168\]:32658 I=\[193.107.88.166\]:25 F=\ rejected RCPT \
2019-10-24 20:38:51
218.56.110.203 attackbots
Oct 24 15:22:33 server sshd\[15048\]: Invalid user apache2 from 218.56.110.203 port 29470
Oct 24 15:22:33 server sshd\[15048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.110.203
Oct 24 15:22:35 server sshd\[15048\]: Failed password for invalid user apache2 from 218.56.110.203 port 29470 ssh2
Oct 24 15:32:09 server sshd\[13368\]: Invalid user nicarao from 218.56.110.203 port 45727
Oct 24 15:32:09 server sshd\[13368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.110.203
2019-10-24 20:39:38
14.63.212.215 attack
Oct 24 02:13:46 php1 sshd\[28645\]: Invalid user com from 14.63.212.215
Oct 24 02:13:46 php1 sshd\[28645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.212.215
Oct 24 02:13:48 php1 sshd\[28645\]: Failed password for invalid user com from 14.63.212.215 port 54475 ssh2
Oct 24 02:18:40 php1 sshd\[29043\]: Invalid user t34yetu236t2etweyhedfruhe from 14.63.212.215
Oct 24 02:18:40 php1 sshd\[29043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.212.215
2019-10-24 20:43:05
85.105.144.50 attack
Automatic report - Banned IP Access
2019-10-24 20:00:49
94.98.227.182 attackbotsspam
2019-09-16 17:56:23 1i9tMU-0004ze-FU SMTP connection from \(\[94.98.227.182\]\) \[94.98.227.182\]:1141 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-09-16 17:56:46 1i9tMr-00050E-7n SMTP connection from \(\[94.98.227.182\]\) \[94.98.227.182\]:1211 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-09-16 17:57:02 1i9tN7-00050h-IT SMTP connection from \(\[94.98.227.182\]\) \[94.98.227.182\]:1148 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
2019-10-24 20:03:49

Recently Reported IPs

117.220.2.61 209.188.242.179 43.255.141.93 89.219.107.235
121.188.30.234 106.75.76.23 210.253.242.54 190.13.3.97
92.38.113.190 59.46.213.7 176.120.221.175 79.10.210.37
104.238.92.8 222.252.31.112 91.191.190.166 200.57.9.113
58.208.226.223 49.69.35.142 36.71.239.245 36.90.84.214