Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
2020-07-10T00:10:37.305052lavrinenko.info sshd[29963]: Invalid user dietmar from 106.53.104.169 port 58340
2020-07-10T00:10:37.315690lavrinenko.info sshd[29963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.104.169
2020-07-10T00:10:37.305052lavrinenko.info sshd[29963]: Invalid user dietmar from 106.53.104.169 port 58340
2020-07-10T00:10:38.858383lavrinenko.info sshd[29963]: Failed password for invalid user dietmar from 106.53.104.169 port 58340 ssh2
2020-07-10T00:13:02.543581lavrinenko.info sshd[30042]: Invalid user db2as from 106.53.104.169 port 56848
...
2020-07-10 05:16:08
attackbots
Failed password for invalid user mf from 106.53.104.169 port 57184 ssh2
2020-06-13 05:26:26
attackspambots
Jun  3 16:34:06 ift sshd\[33687\]: Failed password for root from 106.53.104.169 port 35534 ssh2Jun  3 16:36:07 ift sshd\[34113\]: Failed password for root from 106.53.104.169 port 60320 ssh2Jun  3 16:37:33 ift sshd\[34295\]: Failed password for root from 106.53.104.169 port 45620 ssh2Jun  3 16:38:54 ift sshd\[34396\]: Failed password for root from 106.53.104.169 port 54728 ssh2Jun  3 16:40:16 ift sshd\[34795\]: Failed password for root from 106.53.104.169 port 40120 ssh2
...
2020-06-03 22:46:14
attack
May 26 03:46:20 ArkNodeAT sshd\[12720\]: Invalid user cactiuser from 106.53.104.169
May 26 03:46:20 ArkNodeAT sshd\[12720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.104.169
May 26 03:46:22 ArkNodeAT sshd\[12720\]: Failed password for invalid user cactiuser from 106.53.104.169 port 55472 ssh2
2020-05-26 09:49:17
attackbotsspam
SSH invalid-user multiple login try
2020-05-24 16:01:11
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.53.104.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45511
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.53.104.169.			IN	A

;; AUTHORITY SECTION:
.			159	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052400 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 24 16:01:04 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 169.104.53.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 169.104.53.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.237 attack
Jun 15 18:07:09 NPSTNNYC01T sshd[24295]: Failed password for root from 112.85.42.237 port 51925 ssh2
Jun 15 18:07:11 NPSTNNYC01T sshd[24295]: Failed password for root from 112.85.42.237 port 51925 ssh2
Jun 15 18:07:14 NPSTNNYC01T sshd[24295]: Failed password for root from 112.85.42.237 port 51925 ssh2
...
2020-06-16 06:20:33
140.238.246.49 attackbots
252. On Jun 15 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 140.238.246.49.
2020-06-16 06:41:45
189.27.22.174 attackspambots
1592253784 - 06/15/2020 22:43:04 Host: 189.27.22.174/189.27.22.174 Port: 445 TCP Blocked
2020-06-16 06:38:44
51.38.32.230 attack
Invalid user postgres from 51.38.32.230 port 54184
2020-06-16 06:11:07
41.203.18.243 attack
You see in South Africa They use this one to steal tons of uncapped data from the ISP bra
They'll leave them moneyless/bankrupt. Block it!!!
2020-06-16 06:33:33
195.12.188.230 attack
(sshd) Failed SSH login from 195.12.188.230 (LT/Lithuania/-): 5 in the last 3600 secs
2020-06-16 06:29:22
110.49.70.247 attack
$f2bV_matches
2020-06-16 06:18:05
216.105.139.66 attackbotsspam
bruteforce detected
2020-06-16 06:21:51
104.223.197.3 attackspam
Too many connections or unauthorized access detected from Arctic banned ip
2020-06-16 06:16:21
106.54.202.131 attackspambots
Jun 15 21:01:07 localhost sshd[43173]: Invalid user shashank from 106.54.202.131 port 49360
Jun 15 21:01:07 localhost sshd[43173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.202.131
Jun 15 21:01:07 localhost sshd[43173]: Invalid user shashank from 106.54.202.131 port 49360
Jun 15 21:01:10 localhost sshd[43173]: Failed password for invalid user shashank from 106.54.202.131 port 49360 ssh2
Jun 15 21:09:42 localhost sshd[44292]: Invalid user jts3 from 106.54.202.131 port 37026
...
2020-06-16 06:13:30
205.185.115.40 attackspambots
2020-06-15T18:33:38.810950xentho-1 sshd[327261]: Invalid user hadoop from 205.185.115.40 port 54774
2020-06-15T18:33:38.812506xentho-1 sshd[327260]: Invalid user www from 205.185.115.40 port 54758
2020-06-15T18:33:59.735319xentho-1 sshd[327263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.115.40
2020-06-15T18:33:36.750948xentho-1 sshd[327263]: Invalid user user from 205.185.115.40 port 54768
2020-06-15T18:34:01.809662xentho-1 sshd[327263]: Failed password for invalid user user from 205.185.115.40 port 54768 ssh2
2020-06-15T18:33:59.736008xentho-1 sshd[327262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.115.40
2020-06-15T18:33:36.749710xentho-1 sshd[327262]: Invalid user vagrant from 205.185.115.40 port 54770
2020-06-15T18:34:01.809950xentho-1 sshd[327262]: Failed password for invalid user vagrant from 205.185.115.40 port 54770 ssh2
2020-06-15T18:33:59.762255xentho-1 sshd[327256]: pa
...
2020-06-16 06:41:18
174.138.64.177 attackbots
2020-06-15T22:42:32.574386+02:00  sshd[19593]: Failed password for root from 174.138.64.177 port 44768 ssh2
2020-06-16 06:40:18
177.189.244.193 attackspambots
Jun 16 00:31:06 vps647732 sshd[6681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.189.244.193
Jun 16 00:31:08 vps647732 sshd[6681]: Failed password for invalid user vvk from 177.189.244.193 port 60816 ssh2
...
2020-06-16 06:47:30
66.128.32.192 attack
Jun 15 23:02:13 vpn01 sshd[11185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.128.32.192
Jun 15 23:02:16 vpn01 sshd[11185]: Failed password for invalid user pep from 66.128.32.192 port 35644 ssh2
...
2020-06-16 06:26:50
14.162.151.139 attackspambots
Invalid user adam from 14.162.151.139 port 56932
2020-06-16 06:25:20

Recently Reported IPs

5.196.94.193 148.211.184.248 196.213.98.40 188.222.248.92
193.112.160.203 177.44.17.48 139.219.5.244 35.171.84.247
89.187.176.43 171.246.133.233 118.25.152.231 192.18.113.55
202.27.111.58 54.163.104.89 197.103.156.122 172.42.244.254
165.177.180.93 202.78.200.208 197.3.126.198 201.140.237.225