106.53.19.38 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	10571/tcp [2020-06-23]1pkt	2020-06-23 16:44:19
attackspam	Feb 20 05:53:13 haigwepa sshd[29318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.38 Feb 20 05:53:15 haigwepa sshd[29318]: Failed password for invalid user guest from 106.53.19.38 port 33140 ssh2 ...	2020-02-20 16:54:28
attackbots	Feb 19 22:56:33 sshd\[6478\]: User www-data from 106.53.19.38 not allowed because not listed in AllowUsersFeb 19 22:56:35 sshd\[6478\]: Failed password for invalid user www-data from 106.53.19.38 port 40600 ssh2 ...	2020-02-20 07:34:50
attackbots	Feb 11 07:39:52 askasleikir sshd[151222]: Failed password for invalid user zcg from 106.53.19.38 port 52224 ssh2	2020-02-12 01:48:08
attack	Unauthorized connection attempt detected from IP address 106.53.19.38 to port 2220 [J]	2020-01-17 00:47:15

Comments on same subnet:

IP	Type	Details	Datetime
106.53.192.15	attackbotsspam	Sep 29 22:56:09 ovpn sshd\[23287\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.15 user=root Sep 29 22:56:11 ovpn sshd\[23287\]: Failed password for root from 106.53.192.15 port 35992 ssh2 Sep 29 23:13:02 ovpn sshd\[27478\]: Invalid user majordomo from 106.53.192.15 Sep 29 23:13:02 ovpn sshd\[27478\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.15 Sep 29 23:13:04 ovpn sshd\[27478\]: Failed password for invalid user majordomo from 106.53.192.15 port 54052 ssh2	2020-09-30 05:15:33
106.53.192.15	attackbotsspam	Sep 29 12:35:24 vm1 sshd[25676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.15 Sep 29 12:35:26 vm1 sshd[25676]: Failed password for invalid user nagios from 106.53.192.15 port 55470 ssh2 ...	2020-09-29 21:24:37
106.53.192.15	attackspam	SSH invalid-user multiple login try	2020-09-29 13:39:27
106.53.19.186	attackbotsspam	Invalid user guest from 106.53.19.186 port 57854	2020-09-25 10:38:37
106.53.19.186	attackspambots	Aug 25 22:42:51 nuernberg-4g-01 sshd[23614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186 Aug 25 22:42:53 nuernberg-4g-01 sshd[23614]: Failed password for invalid user uftp from 106.53.19.186 port 45340 ssh2 Aug 25 22:43:49 nuernberg-4g-01 sshd[23941]: Failed password for root from 106.53.19.186 port 51109 ssh2	2020-08-26 06:01:12
106.53.192.246	attack	Aug 6 16:39:23 Ubuntu-1404-trusty-64-minimal sshd\[25027\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.246 user=root Aug 6 16:39:25 Ubuntu-1404-trusty-64-minimal sshd\[25027\]: Failed password for root from 106.53.192.246 port 50350 ssh2 Aug 6 16:46:32 Ubuntu-1404-trusty-64-minimal sshd\[32749\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.246 user=root Aug 6 16:46:34 Ubuntu-1404-trusty-64-minimal sshd\[32749\]: Failed password for root from 106.53.192.246 port 56776 ssh2 Aug 6 16:49:37 Ubuntu-1404-trusty-64-minimal sshd\[2008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.192.246 user=root	2020-08-07 02:57:23
106.53.192.246	attackbots	$f2bV_matches	2020-08-05 16:31:27
106.53.19.186	attackbotsspam	Aug 2 12:05:36 scw-tender-jepsen sshd[7462]: Failed password for root from 106.53.19.186 port 37574 ssh2	2020-08-03 01:37:13
106.53.193.72	attack	Aug 1 06:19:59 Ubuntu-1404-trusty-64-minimal sshd\[11997\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.193.72 user=root Aug 1 06:20:01 Ubuntu-1404-trusty-64-minimal sshd\[11997\]: Failed password for root from 106.53.193.72 port 35874 ssh2 Aug 1 06:27:26 Ubuntu-1404-trusty-64-minimal sshd\[15285\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.193.72 user=root Aug 1 06:27:28 Ubuntu-1404-trusty-64-minimal sshd\[15285\]: Failed password for root from 106.53.193.72 port 59794 ssh2 Aug 1 06:31:15 Ubuntu-1404-trusty-64-minimal sshd\[19741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.193.72 user=root	2020-08-01 13:24:23
106.53.19.186	attackbotsspam	Jul 28 12:39:15 *** sshd[30855]: Invalid user saimen from 106.53.19.186	2020-07-29 00:36:10
106.53.19.186	attackbots	Jul 28 07:45:48 pve1 sshd[32107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186 Jul 28 07:45:50 pve1 sshd[32107]: Failed password for invalid user marco from 106.53.19.186 port 52396 ssh2 ...	2020-07-28 16:37:35
106.53.192.246	attackspambots	SSH BruteForce Attack	2020-07-14 15:29:22
106.53.19.186	attackbotsspam	2020-07-07T03:32:22.055821na-vps210223 sshd[31904]: Invalid user transfer from 106.53.19.186 port 52855 2020-07-07T03:32:22.062905na-vps210223 sshd[31904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.19.186 2020-07-07T03:32:22.055821na-vps210223 sshd[31904]: Invalid user transfer from 106.53.19.186 port 52855 2020-07-07T03:32:24.621294na-vps210223 sshd[31904]: Failed password for invalid user transfer from 106.53.19.186 port 52855 ssh2 2020-07-07T03:35:26.788663na-vps210223 sshd[7961]: Invalid user link from 106.53.19.186 port 43437 ...	2020-07-07 16:28:31
106.53.19.186	attackspam	Jun 27 23:48:04 ns381471 sshd[15110]: Failed password for root from 106.53.19.186 port 46133 ssh2	2020-06-28 07:43:17
106.53.192.246	attackbots	$f2bV_matches	2020-06-19 21:58:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.53.19.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6225
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.53.19.38.			IN	A

;; AUTHORITY SECTION:
.			177	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 00:47:05 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 38.19.53.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 38.19.53.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.29.105.12	attackspambots	Oct 2 08:23:19 game-panel sshd[28268]: Failed password for root from 200.29.105.12 port 53181 ssh2 Oct 2 08:27:37 game-panel sshd[28458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12 Oct 2 08:27:39 game-panel sshd[28458]: Failed password for invalid user lh from 200.29.105.12 port 57654 ssh2	2020-10-02 16:31:43
125.119.43.254	attackbotsspam	Oct 1 20:33:58 CT3029 sshd[7727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254 user=r.r Oct 1 20:34:00 CT3029 sshd[7727]: Failed password for r.r from 125.119.43.254 port 60634 ssh2 Oct 1 20:34:01 CT3029 sshd[7727]: Received disconnect from 125.119.43.254 port 60634:11: Bye Bye [preauth] Oct 1 20:34:01 CT3029 sshd[7727]: Disconnected from 125.119.43.254 port 60634 [preauth] Oct 1 20:34:26 CT3029 sshd[7729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.119.43.254	2020-10-02 16:36:46
106.12.97.46	attack	Oct 2 10:46:09 buvik sshd[9615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.97.46 Oct 2 10:46:11 buvik sshd[9615]: Failed password for invalid user javier from 106.12.97.46 port 56036 ssh2 Oct 2 10:47:37 buvik sshd[9723]: Invalid user admin from 106.12.97.46 ...	2020-10-02 16:54:55
115.159.152.188	attackbotsspam	Invalid user oracle from 115.159.152.188 port 33576	2020-10-02 16:49:25
157.245.163.0	attackspambots	srv02 Mass scanning activity detected Target: 16339 ..	2020-10-02 16:55:40
18.212.209.250	attack	k+ssh-bruteforce	2020-10-02 16:30:28
106.53.220.103	attackspambots	Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:54 gitlab sshd[2550140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.220.103 Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:56 gitlab sshd[2550140]: Failed password for invalid user renata from 106.53.220.103 port 58570 ssh2 Oct 2 07:01:39 gitlab sshd[2550406]: Invalid user admin from 106.53.220.103 port 47708 ...	2020-10-02 16:53:25
125.121.170.115	attackbots	Oct 1 20:33:04 CT3029 sshd[7708]: Invalid user user from 125.121.170.115 port 55410 Oct 1 20:33:04 CT3029 sshd[7708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.121.170.115 Oct 1 20:33:06 CT3029 sshd[7708]: Failed password for invalid user user from 125.121.170.115 port 55410 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.121.170.115	2020-10-02 16:21:52
125.69.68.125	attackspam	(sshd) Failed SSH login from 125.69.68.125 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 2 01:13:40 optimus sshd[29764]: Invalid user dev from 125.69.68.125 Oct 2 01:13:40 optimus sshd[29764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.68.125 Oct 2 01:13:42 optimus sshd[29764]: Failed password for invalid user dev from 125.69.68.125 port 45014 ssh2 Oct 2 01:19:30 optimus sshd[31882]: Invalid user sysadmin from 125.69.68.125 Oct 2 01:19:30 optimus sshd[31882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.69.68.125	2020-10-02 16:26:10
222.186.31.166	attackspambots	Oct 2 10:07:34 host sshd[4251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Oct 2 10:07:36 host sshd[4251]: Failed password for root from 222.186.31.166 port 48403 ssh2 ...	2020-10-02 16:20:35
94.102.49.137	attackspambots	port scan	2020-10-02 16:56:50
114.245.31.241	attack	Invalid user openhabian from 114.245.31.241 port 58212	2020-10-02 16:25:27
192.38.134.175	attack	This IP tried to get into my Facebook account.	2020-10-02 16:53:43
45.148.122.20	attackbots	TCP (SYN) 45.148.122.20:50901 -> port 22, len 44	2020-10-02 16:49:43
117.57.98.246	attackbotsspam	Oct 1 19:04:02 r.ca sshd[21486]: Failed password for root from 117.57.98.246 port 52496 ssh2	2020-10-02 16:27:58

Recently Reported IPs

177.19.64.50	122.155.165.240	195.5.138.215	83.245.199.157
154.236.146.217	18.136.176.190	246.166.138.174	52.59.29.88
45.85.1.252	188.170.80.104	156.210.196.230	61.230.137.75
14.127.250.114	2.50.47.94	43.225.100.33	189.40.72.82
36.92.159.11	242.11.154.177	97.176.234.156	197.210.153.46