Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Invalid user jo from 106.53.72.119 port 36468
2020-04-22 19:20:42
attack
Invalid user jo from 106.53.72.119 port 36468
2020-04-20 23:10:35
attack
Apr 10 17:32:42 gw1 sshd[4906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Apr 10 17:32:44 gw1 sshd[4906]: Failed password for invalid user radware from 106.53.72.119 port 51642 ssh2
...
2020-04-10 20:49:50
attackspam
Invalid user ftq from 106.53.72.119 port 42154
2020-04-04 03:55:25
attackspam
Unauthorized connection attempt detected from IP address 106.53.72.119 to port 22
2020-02-28 09:30:49
attack
2020-02-20T07:54:09.940861  sshd[13407]: Invalid user tanwei from 106.53.72.119 port 43772
2020-02-20T07:54:09.954022  sshd[13407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
2020-02-20T07:54:09.940861  sshd[13407]: Invalid user tanwei from 106.53.72.119 port 43772
2020-02-20T07:54:12.026767  sshd[13407]: Failed password for invalid user tanwei from 106.53.72.119 port 43772 ssh2
...
2020-02-20 19:20:15
attackbotsspam
Unauthorized connection attempt detected from IP address 106.53.72.119 to port 22 [T]
2020-02-01 17:25:56
attack
Jan 31 21:34:53 localhost sshd\[8279\]: Invalid user student from 106.53.72.119 port 16904
Jan 31 21:34:53 localhost sshd\[8279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Jan 31 21:34:54 localhost sshd\[8279\]: Failed password for invalid user student from 106.53.72.119 port 16904 ssh2
...
2020-02-01 06:27:30
attackspambots
Jan 30 03:33:12 hosting sshd[32612]: Invalid user devika from 106.53.72.119 port 51098
Jan 30 03:33:12 hosting sshd[32612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Jan 30 03:33:12 hosting sshd[32612]: Invalid user devika from 106.53.72.119 port 51098
Jan 30 03:33:13 hosting sshd[32612]: Failed password for invalid user devika from 106.53.72.119 port 51098 ssh2
Jan 30 03:52:33 hosting sshd[2074]: Invalid user modini from 106.53.72.119 port 57810
...
2020-01-30 09:10:12
attackspam
Unauthorized connection attempt detected from IP address 106.53.72.119 to port 22 [T]
2020-01-09 03:31:14
attackspambots
Dec 16 07:28:01 vps34202 sshd[14735]: Invalid user rolstad from 106.53.72.119
Dec 16 07:28:01 vps34202 sshd[14735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119 
Dec 16 07:28:03 vps34202 sshd[14735]: Failed password for invalid user rolstad from 106.53.72.119 port 36236 ssh2
Dec 16 07:28:03 vps34202 sshd[14735]: Received disconnect from 106.53.72.119: 11: Bye Bye [preauth]
Dec 16 07:38:13 vps34202 sshd[15033]: Invalid user fon from 106.53.72.119
Dec 16 07:38:13 vps34202 sshd[15033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119 
Dec 16 07:38:15 vps34202 sshd[15033]: Failed password for invalid user fon from 106.53.72.119 port 58184 ssh2
Dec 16 07:38:16 vps34202 sshd[15033]: Received disconnect from 106.53.72.119: 11: Bye Bye [preauth]
Dec 16 07:45:31 vps34202 sshd[15230]: Invalid user lisa from 106.53.72.119
Dec 16 07:45:31 vps34202 sshd[15230]: pam_unix(sshd........
-------------------------------
2019-12-16 15:43:29
attackbots
Dec  8 05:57:30 ns381471 sshd[13505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Dec  8 05:57:32 ns381471 sshd[13505]: Failed password for invalid user nfs from 106.53.72.119 port 40270 ssh2
2019-12-08 13:03:54
attackbots
F2B jail: sshd. Time: 2019-11-23 07:30:38, Reported by: VKReport
2019-11-23 14:43:56
attackbotsspam
Nov 22 06:30:34 vps46666688 sshd[21036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Nov 22 06:30:36 vps46666688 sshd[21036]: Failed password for invalid user mackenna from 106.53.72.119 port 39122 ssh2
...
2019-11-22 20:07:48
attackspam
Nov 21 15:18:29 web9 sshd\[1366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119  user=root
Nov 21 15:18:31 web9 sshd\[1366\]: Failed password for root from 106.53.72.119 port 45580 ssh2
Nov 21 15:25:48 web9 sshd\[2576\]: Invalid user kohlbach from 106.53.72.119
Nov 21 15:25:48 web9 sshd\[2576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Nov 21 15:25:50 web9 sshd\[2576\]: Failed password for invalid user kohlbach from 106.53.72.119 port 58454 ssh2
2019-11-22 09:34:10
attackbotsspam
$f2bV_matches
2019-11-05 15:56:38
attackbotsspam
2019-10-23T20:51:28.858957abusebot-2.cloudsearch.cf sshd\[11960\]: Invalid user ti from 106.53.72.119 port 47156
2019-10-24 04:58:36
attackspam
Oct  4 23:11:26 meumeu sshd[30347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119 
Oct  4 23:11:28 meumeu sshd[30347]: Failed password for invalid user 6tfc5rdx from 106.53.72.119 port 54282 ssh2
Oct  4 23:15:44 meumeu sshd[31176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119 
...
2019-10-05 05:38:24
attackbotsspam
Sep 30 07:14:54 taivassalofi sshd[45813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Sep 30 07:14:57 taivassalofi sshd[45813]: Failed password for invalid user ebook from 106.53.72.119 port 50876 ssh2
...
2019-09-30 12:28:50
attackbots
Sep 27 06:42:54 OPSO sshd\[27001\]: Invalid user 12345678 from 106.53.72.119 port 34692
Sep 27 06:42:54 OPSO sshd\[27001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
Sep 27 06:42:55 OPSO sshd\[27001\]: Failed password for invalid user 12345678 from 106.53.72.119 port 34692 ssh2
Sep 27 06:48:45 OPSO sshd\[28073\]: Invalid user alblas from 106.53.72.119 port 46500
Sep 27 06:48:45 OPSO sshd\[28073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119
2019-09-27 16:52:23
attack
Sep  3 09:14:59 mail sshd[26924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.119  user=r.r
Sep  3 09:15:01 mail sshd[26924]: Failed password for r.r from 106.53.72.119 port 38082 ssh2
Sep  3 09:15:01 mail sshd[26924]: Received disconnect from 106.53.72.119: 11: Bye Bye [preauth]
Sep  3 09:44:51 mail sshd[27571]: Failed password for invalid user zabbix from 106.53.72.119 port 44724 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.53.72.119
2019-09-06 07:00:02
Comments on same subnet:
IP Type Details Datetime
106.53.72.83 attack
2020-06-05T16:11:16.118783abusebot-7.cloudsearch.cf sshd[1540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83  user=root
2020-06-05T16:11:18.946780abusebot-7.cloudsearch.cf sshd[1540]: Failed password for root from 106.53.72.83 port 40296 ssh2
2020-06-05T16:14:11.883198abusebot-7.cloudsearch.cf sshd[1782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83  user=root
2020-06-05T16:14:13.401523abusebot-7.cloudsearch.cf sshd[1782]: Failed password for root from 106.53.72.83 port 38670 ssh2
2020-06-05T16:16:07.025185abusebot-7.cloudsearch.cf sshd[1887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83  user=root
2020-06-05T16:16:09.135520abusebot-7.cloudsearch.cf sshd[1887]: Failed password for root from 106.53.72.83 port 56038 ssh2
2020-06-05T16:17:50.305934abusebot-7.cloudsearch.cf sshd[2024]: pam_unix(sshd:auth): authentication fai
...
2020-06-06 03:48:08
106.53.72.83 attack
Jun  5 08:39:09 ip-172-31-61-156 sshd[32556]: Failed password for root from 106.53.72.83 port 54918 ssh2
Jun  5 08:41:51 ip-172-31-61-156 sshd[368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83  user=root
Jun  5 08:41:53 ip-172-31-61-156 sshd[368]: Failed password for root from 106.53.72.83 port 57246 ssh2
Jun  5 08:41:51 ip-172-31-61-156 sshd[368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83  user=root
Jun  5 08:41:53 ip-172-31-61-156 sshd[368]: Failed password for root from 106.53.72.83 port 57246 ssh2
...
2020-06-05 17:28:40
106.53.72.83 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-01 19:40:04
106.53.72.83 attackbotsspam
May 30 13:10:24 ajax sshd[16966]: Failed password for root from 106.53.72.83 port 45844 ssh2
2020-05-30 20:44:56
106.53.72.83 attackspambots
Invalid user gary from 106.53.72.83 port 58352
2020-05-30 16:30:48
106.53.72.83 attackbotsspam
Invalid user gary from 106.53.72.83 port 58352
2020-05-27 17:44:56
106.53.72.83 attackbotsspam
Apr 26 08:14:43 ny01 sshd[3331]: Failed password for root from 106.53.72.83 port 50048 ssh2
Apr 26 08:17:19 ny01 sshd[3663]: Failed password for root from 106.53.72.83 port 47994 ssh2
2020-04-26 22:51:58
106.53.72.83 attackspambots
(sshd) Failed SSH login from 106.53.72.83 (JP/Japan/-): 5 in the last 3600 secs
2020-04-26 12:47:49
106.53.72.83 attackbots
Apr 22 17:00:59 gw1 sshd[29843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.72.83
Apr 22 17:01:01 gw1 sshd[29843]: Failed password for invalid user ap from 106.53.72.83 port 51010 ssh2
...
2020-04-23 01:04:05
106.53.72.83 attackbots
DATE:2020-04-19 14:05:21, IP:106.53.72.83, PORT:ssh SSH brute force auth (docker-dc)
2020-04-19 20:44:32
106.53.72.83 attack
Invalid user ruth from 106.53.72.83 port 50956
2020-04-04 06:23:07
106.53.72.83 attack
SSH Authentication Attempts Exceeded
2020-03-21 23:03:16
106.53.72.252 attackbots
[Fri Dec 20 10:23:09.349334 2019] [authz_core:error] [pid 24445] [client 106.53.72.252:17780] AH01630: client denied by server configuration: /var/www/html/luke/.php
...
2020-03-03 23:53:28
106.53.72.83 attackspambots
2019-11-19T08:36:08.441548abusebot-4.cloudsearch.cf sshd\[22622\]: Invalid user ftpuser from 106.53.72.83 port 51370
2019-11-19 16:53:07
106.53.72.83 attackspam
Invalid user wesselow from 106.53.72.83 port 50294
2019-11-18 06:37:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.53.72.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13349
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.53.72.119.			IN	A

;; AUTHORITY SECTION:
.			1665	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090501 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Sep 06 06:59:57 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 119.72.53.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 119.72.53.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
101.36.178.202 attack
Feb 22 05:45:31 odroid64 sshd\[634\]: User list from 101.36.178.202 not allowed because not listed in AllowUsers
Feb 22 05:45:31 odroid64 sshd\[634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.178.202  user=list
...
2020-02-22 19:01:25
113.181.71.187 attack
Unauthorized connection attempt from IP address 113.181.71.187 on Port 445(SMB)
2020-02-22 18:42:53
171.217.95.95 attackbots
Unauthorized connection attempt from IP address 171.217.95.95 on Port 445(SMB)
2020-02-22 18:36:45
125.31.19.94 attackbots
Invalid user box from 125.31.19.94 port 51366
2020-02-22 18:58:55
190.9.130.159 attack
Feb 22 05:45:45 tuxlinux sshd[7695]: Invalid user ask from 190.9.130.159 port 60962
Feb 22 05:45:45 tuxlinux sshd[7695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 
Feb 22 05:45:45 tuxlinux sshd[7695]: Invalid user ask from 190.9.130.159 port 60962
Feb 22 05:45:45 tuxlinux sshd[7695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 
...
2020-02-22 18:54:12
13.77.177.1 attack
Feb 22 09:54:43 debian-2gb-nbg1-2 kernel: \[4620889.948021\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=13.77.177.1 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=19340 PROTO=TCP SPT=59789 DPT=3390 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-22 18:45:59
151.45.227.120 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 22-02-2020 08:20:09.
2020-02-22 18:40:01
117.247.181.210 attackspambots
Unauthorized connection attempt from IP address 117.247.181.210 on Port 445(SMB)
2020-02-22 18:39:23
78.39.218.211 attackspambots
Unauthorized connection attempt from IP address 78.39.218.211 on Port 445(SMB)
2020-02-22 18:59:19
212.220.202.33 attackbotsspam
Unauthorized connection attempt from IP address 212.220.202.33 on Port 445(SMB)
2020-02-22 18:37:15
213.87.101.180 attack
Unauthorized connection attempt from IP address 213.87.101.180 on Port 445(SMB)
2020-02-22 18:58:31
210.140.152.110 attackbotsspam
Feb 22 09:48:45 pornomens sshd\[28522\]: Invalid user couchdb from 210.140.152.110 port 43797
Feb 22 09:48:45 pornomens sshd\[28522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.140.152.110
Feb 22 09:48:47 pornomens sshd\[28522\]: Failed password for invalid user couchdb from 210.140.152.110 port 43797 ssh2
...
2020-02-22 18:42:17
27.44.127.146 attack
Feb 22 08:20:55 cp sshd[9791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.44.127.146
2020-02-22 18:31:22
77.238.4.37 attack
Feb 19 14:14:28 finn sshd[8440]: Invalid user oracle from 77.238.4.37 port 41447
Feb 19 14:14:28 finn sshd[8440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.238.4.37
Feb 19 14:14:30 finn sshd[8440]: Failed password for invalid user oracle from 77.238.4.37 port 41447 ssh2
Feb 19 14:14:30 finn sshd[8440]: Received disconnect from 77.238.4.37 port 41447:11: Bye Bye [preauth]
Feb 19 14:14:30 finn sshd[8440]: Disconnected from 77.238.4.37 port 41447 [preauth]
Feb 19 14:18:04 finn sshd[9530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.238.4.37  user=postgres
Feb 19 14:18:07 finn sshd[9530]: Failed password for postgres from 77.238.4.37 port 54685 ssh2
Feb 19 14:18:07 finn sshd[9530]: Received disconnect from 77.238.4.37 port 54685:11: Bye Bye [preauth]
Feb 19 14:18:07 finn sshd[9530]: Disconnected from 77.238.4.37 port 54685 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/
2020-02-22 18:55:54
114.47.126.66 attack
Port 23 (Telnet) access denied
2020-02-22 18:45:07

Recently Reported IPs

38.75.136.125 51.150.138.102 44.187.99.2 52.221.227.130
161.202.192.218 167.71.220.97 124.177.229.40 37.210.106.42
112.96.40.145 177.104.26.94 94.255.158.168 45.151.214.33
191.248.124.1 176.107.131.104 212.68.168.210 106.13.119.77
214.47.145.110 89.126.247.25 204.233.202.42 160.25.120.101