Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jun 27 05:46:28 h2779839 sshd[14575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51  user=root
Jun 27 05:46:30 h2779839 sshd[14575]: Failed password for root from 106.52.93.51 port 60654 ssh2
Jun 27 05:49:37 h2779839 sshd[20549]: Invalid user wsp from 106.52.93.51 port 38492
Jun 27 05:49:37 h2779839 sshd[20549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
Jun 27 05:49:37 h2779839 sshd[20549]: Invalid user wsp from 106.52.93.51 port 38492
Jun 27 05:49:38 h2779839 sshd[20549]: Failed password for invalid user wsp from 106.52.93.51 port 38492 ssh2
Jun 27 05:52:33 h2779839 sshd[22270]: Invalid user mwang from 106.52.93.51 port 44566
Jun 27 05:52:33 h2779839 sshd[22270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
Jun 27 05:52:33 h2779839 sshd[22270]: Invalid user mwang from 106.52.93.51 port 44566
Jun 27 05:52:36 h2779839 s
...
2020-06-27 16:17:30
attackspambots
$f2bV_matches
2020-06-16 04:11:26
attack
$f2bV_matches
2020-06-13 15:03:25
attackspam
5x Failed Password
2020-05-20 18:11:03
attack
Ssh brute force
2020-05-13 08:06:03
attack
Apr 22 13:54:56 rotator sshd\[8255\]: Failed password for root from 106.52.93.51 port 54008 ssh2Apr 22 13:57:55 rotator sshd\[9041\]: Invalid user teste from 106.52.93.51Apr 22 13:57:57 rotator sshd\[9041\]: Failed password for invalid user teste from 106.52.93.51 port 59840 ssh2Apr 22 14:01:04 rotator sshd\[9867\]: Invalid user ml from 106.52.93.51Apr 22 14:01:06 rotator sshd\[9867\]: Failed password for invalid user ml from 106.52.93.51 port 37438 ssh2Apr 22 14:04:18 rotator sshd\[9919\]: Failed password for root from 106.52.93.51 port 43282 ssh2
...
2020-04-22 21:07:05
attack
Apr 11 05:52:55 host5 sshd[14156]: Invalid user avanthi from 106.52.93.51 port 36974
...
2020-04-11 15:05:36
attackbots
Mar 27 08:33:53 serwer sshd\[20807\]: Invalid user pvg from 106.52.93.51 port 56888
Mar 27 08:33:53 serwer sshd\[20807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
Mar 27 08:33:55 serwer sshd\[20807\]: Failed password for invalid user pvg from 106.52.93.51 port 56888 ssh2
...
2020-03-27 16:52:37
attackbots
Brute-force attempt banned
2020-03-21 09:56:38
attack
2020-03-18T04:53:27.123359v22018076590370373 sshd[31785]: Invalid user vmail from 106.52.93.51 port 43226
2020-03-18T04:53:27.129093v22018076590370373 sshd[31785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
2020-03-18T04:53:27.123359v22018076590370373 sshd[31785]: Invalid user vmail from 106.52.93.51 port 43226
2020-03-18T04:53:28.927962v22018076590370373 sshd[31785]: Failed password for invalid user vmail from 106.52.93.51 port 43226 ssh2
2020-03-18T04:55:30.299309v22018076590370373 sshd[11488]: Invalid user a1 from 106.52.93.51 port 38274
...
2020-03-18 12:02:06
attackspam
Mar 10 10:22:08 sd-53420 sshd\[19539\]: Invalid user tomcat from 106.52.93.51
Mar 10 10:22:08 sd-53420 sshd\[19539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
Mar 10 10:22:10 sd-53420 sshd\[19539\]: Failed password for invalid user tomcat from 106.52.93.51 port 39166 ssh2
Mar 10 10:27:38 sd-53420 sshd\[20079\]: Invalid user sonarUser from 106.52.93.51
Mar 10 10:27:38 sd-53420 sshd\[20079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.51
...
2020-03-10 18:27:22
attack
$f2bV_matches
2020-02-17 13:46:16
Comments on same subnet:
IP Type Details Datetime
106.52.93.202 attackspam
Aug 13 10:17:11 dev0-dcde-rnet sshd[27845]: Failed password for root from 106.52.93.202 port 57546 ssh2
Aug 13 10:23:05 dev0-dcde-rnet sshd[27861]: Failed password for root from 106.52.93.202 port 36306 ssh2
2020-08-13 18:20:21
106.52.93.202 attackspambots
Aug 10 14:06:05 host sshd[8439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.202  user=r.r
Aug 10 14:06:08 host sshd[8439]: Failed password for r.r from 106.52.93.202 port 42958 ssh2
Aug 10 14:06:08 host sshd[8439]: Received disconnect from 106.52.93.202: 11: Bye Bye [preauth]
Aug 10 14:23:49 host sshd[997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.202  user=r.r
Aug 10 14:23:51 host sshd[997]: Failed password for r.r from 106.52.93.202 port 46568 ssh2
Aug 10 14:23:51 host sshd[997]: Received disconnect from 106.52.93.202: 11: Bye Bye [preauth]
Aug 10 14:27:02 host sshd[10310]: Connection closed by 106.52.93.202 [preauth]
Aug 10 14:30:02 host sshd[20199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.202  user=r.r
Aug 10 14:30:04 host sshd[20199]: Failed password for r.r from 106.52.93.202 port 48242 ssh2
Aug 1........
-------------------------------
2020-08-12 00:27:50
106.52.93.202 attackspam
Jul 30 15:23:25 root sshd[29471]: Invalid user zf from 106.52.93.202
...
2020-07-30 20:44:46
106.52.93.202 attackbotsspam
SSH bruteforce
2020-07-20 17:36:01
106.52.93.52 attack
2020-03-27T09:03:58.821378shield sshd\[5530\]: Invalid user ohb from 106.52.93.52 port 34134
2020-03-27T09:03:58.831572shield sshd\[5530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.52
2020-03-27T09:04:01.279517shield sshd\[5530\]: Failed password for invalid user ohb from 106.52.93.52 port 34134 ssh2
2020-03-27T09:05:48.202511shield sshd\[5840\]: Invalid user suse from 106.52.93.52 port 55212
2020-03-27T09:05:48.212170shield sshd\[5840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.52
2020-03-27 19:19:04
106.52.93.188 attack
2020-02-28T15:57:47.325492linuxbox-skyline sshd[50664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188  user=git
2020-02-28T15:57:49.522940linuxbox-skyline sshd[50664]: Failed password for git from 106.52.93.188 port 50916 ssh2
...
2020-02-29 07:42:33
106.52.93.188 attackspam
Feb 12 02:09:01 amit sshd\[11840\]: Invalid user http from 106.52.93.188
Feb 12 02:09:01 amit sshd\[11840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188
Feb 12 02:09:04 amit sshd\[11840\]: Failed password for invalid user http from 106.52.93.188 port 52806 ssh2
...
2020-02-12 09:09:59
106.52.93.188 attackspam
$f2bV_matches
2020-02-08 17:41:26
106.52.93.188 attackbots
5x Failed Password
2020-01-29 15:43:45
106.52.93.188 attack
Automatic report - SSH Brute-Force Attack
2020-01-24 04:37:40
106.52.93.188 attackbotsspam
Jan 11 06:23:28 meumeu sshd[6347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188 
Jan 11 06:23:30 meumeu sshd[6347]: Failed password for invalid user grecian from 106.52.93.188 port 60262 ssh2
Jan 11 06:25:42 meumeu sshd[6724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188 
Jan 11 06:25:45 meumeu sshd[6724]: Failed password for invalid user test3 from 106.52.93.188 port 39296 ssh2
...
2020-01-11 15:45:39
106.52.93.188 attackbotsspam
$f2bV_matches
2020-01-03 08:32:24
106.52.93.188 attackspambots
2019-09-03T16:10:10.940843ns557175 sshd\[28450\]: Invalid user mc3 from 106.52.93.188 port 59372
2019-09-03T16:10:10.946320ns557175 sshd\[28450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188
2019-09-03T16:10:13.187605ns557175 sshd\[28450\]: Failed password for invalid user mc3 from 106.52.93.188 port 59372 ssh2
2019-09-03T16:32:34.473459ns557175 sshd\[29199\]: Invalid user dev from 106.52.93.188 port 56502
2019-09-03T16:32:34.479401ns557175 sshd\[29199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188
2019-09-03T16:32:36.895836ns557175 sshd\[29199\]: Failed password for invalid user dev from 106.52.93.188 port 56502 ssh2
2019-09-03T16:36:30.975612ns557175 sshd\[29335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.93.188  user=mysql
2019-09-03T16:36:32.790185ns557175 sshd\[29335\]: Failed password for mysql from 106.
...
2019-09-05 02:02:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.93.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33821
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.93.51.			IN	A

;; AUTHORITY SECTION:
.			516	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021601 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 13:46:12 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 51.93.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.93.52.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.119.121.164 attackbotsspam
Honeypot attack, port: 5555, PTR: n112119121164.netvigator.com.
2020-02-07 23:26:44
190.85.93.210 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-07 23:17:26
83.5.189.51 attackbots
Feb  5 22:12:27 pl3server sshd[1538]: Invalid user ugr from 83.5.189.51
Feb  5 22:12:27 pl3server sshd[1538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.5.189.51.ipv4.supernova.orange.pl
Feb  5 22:12:29 pl3server sshd[1538]: Failed password for invalid user ugr from 83.5.189.51 port 53929 ssh2
Feb  5 22:12:29 pl3server sshd[1538]: Received disconnect from 83.5.189.51: 11: Bye Bye [preauth]
Feb  5 22:27:50 pl3server sshd[14146]: Invalid user myh from 83.5.189.51
Feb  5 22:27:50 pl3server sshd[14146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.5.189.51.ipv4.supernova.orange.pl
Feb  5 22:27:51 pl3server sshd[14146]: Failed password for invalid user myh from 83.5.189.51 port 34603 ssh2
Feb  5 22:27:51 pl3server sshd[14146]: Received disconnect from 83.5.189.51: 11: Bye Bye [preauth]
Feb  5 22:32:41 pl3server sshd[18723]: Invalid user fmi from 83.5.189.51
Feb  5 22:32:41 pl3server........
-------------------------------
2020-02-07 23:34:51
203.128.244.210 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-07 23:55:44
218.92.0.165 attackbotsspam
2020-02-07T16:34:10.391819vps751288.ovh.net sshd\[26247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165  user=root
2020-02-07T16:34:12.352792vps751288.ovh.net sshd\[26247\]: Failed password for root from 218.92.0.165 port 11142 ssh2
2020-02-07T16:34:15.297681vps751288.ovh.net sshd\[26247\]: Failed password for root from 218.92.0.165 port 11142 ssh2
2020-02-07T16:34:18.989699vps751288.ovh.net sshd\[26247\]: Failed password for root from 218.92.0.165 port 11142 ssh2
2020-02-07T16:34:22.999480vps751288.ovh.net sshd\[26247\]: Failed password for root from 218.92.0.165 port 11142 ssh2
2020-02-07 23:56:57
102.112.96.12 attack
$f2bV_matches
2020-02-07 23:38:22
69.229.6.35 attackbots
Automatic report - SSH Brute-Force Attack
2020-02-07 23:17:53
162.62.81.17 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-02-07 23:50:15
117.34.118.127 attackbots
02/07/2020-09:08:08.117162 117.34.118.127 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-02-08 00:06:40
5.53.127.53 attackbots
Sent mail to target address hacked/leaked from abandonia in 2016
2020-02-07 23:18:18
190.109.64.92 attack
Automatic report - Port Scan Attack
2020-02-07 23:22:37
79.101.58.69 attack
Web App Attack
2020-02-07 23:52:48
67.207.91.133 attackspam
Feb  7 16:41:43 legacy sshd[29678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.91.133
Feb  7 16:41:45 legacy sshd[29678]: Failed password for invalid user baa from 67.207.91.133 port 54992 ssh2
Feb  7 16:44:54 legacy sshd[29912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.91.133
...
2020-02-07 23:53:55
109.70.191.11 attack
Automatic report - Port Scan
2020-02-07 23:54:40
64.225.24.239 attack
Feb  7 10:47:23 plusreed sshd[12928]: Invalid user xxw from 64.225.24.239
...
2020-02-07 23:54:57

Recently Reported IPs

218.32.96.93 191.19.184.139 77.111.240.42 95.210.208.12
24.6.63.175 212.64.58.58 15.70.100.197 61.130.49.83
218.16.204.208 117.2.140.101 144.35.89.144 176.41.229.6
196.219.172.155 104.47.48.36 184.168.221.59 80.214.23.75
192.104.67.6 170.239.69.71 82.80.170.162 169.130.218.142