AbuseIPDB » 101.254.166.52

101.254.166.52 was found in our database!

This IP was reported 11,330 times. Confidence of Abuse is 95%: ?

95%

ISP	Beijing flash newsletter cas telecommunication technology Co., LTD
Usage Type	Commercial
ASN	AS23724
Domain Name	cnnic.cn
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 101.254.166.52

Whois 101.254.166.52

IP Abuse Reports for 101.254.166.52:

This IP address has been reported a total of 11,330 times from 1,351 distinct sources. 101.254.166.52 was first reported on October 9th 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Futunk	2025-05-26 17:37:33 (1 month ago)	2025-05-26T19:34:04.508629+02:00 7of9 sshd[92887]: Failed password for invalid user hdfs from 101.25 ... show more2025-05-26T19:34:04.508629+02:00 7of9 sshd[92887]: Failed password for invalid user hdfs from 101.254.166.52 port 29492 ssh2 2025-05-26T19:34:07.102762+02:00 7of9 sshd[92887]: Disconnected from invalid user hdfs 101.254.166.52 port 29492 [preauth] 2025-05-26T19:37:29.932232+02:00 7of9 sshd[93017]: Invalid user bot from 101.254.166.52 port 40560 2025-05-26T19:37:29.936478+02:00 7of9 sshd[93017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 2025-05-26T19:37:32.393081+02:00 7of9 sshd[93017]: Failed password for invalid user bot from 101.254.166.52 port 40560 ssh2 ... show less	Brute-Force SSH
qtland Cloud Inc.	2025-05-26 17:33:57 (1 month ago)	2025-05-26T17:21:23.795551+00:00 b3-16-eu-south-lz-mad-a sshd[2011974]: Invalid user ts3server from ... show more2025-05-26T17:21:23.795551+00:00 b3-16-eu-south-lz-mad-a sshd[2011974]: Invalid user ts3server from 101.254.166.52 port 1836 2025-05-26T17:21:24.549317+00:00 b3-16-eu-south-lz-mad-a sshd[2011974]: Disconnected from invalid user ts3server 101.254.166.52 port 1836 [preauth] 2025-05-26T17:33:56.392035+00:00 b3-16-eu-south-lz-mad-a sshd[2058061]: Invalid user hdfs from 101.254.166.52 port 48606 ... show less	Brute-Force SSH
security.rdmc.fr	2025-05-26 15:45:27 (1 month ago)	IP in Malicious Database	Web App Attack
robotstxt	2025-05-26 13:05:49 (1 month ago)	2025-05-26T12:58:33.155489+00:00 close-s23 sshd[3646085]: Invalid user anton from 101.254.166.52 por ... show more2025-05-26T12:58:33.155489+00:00 close-s23 sshd[3646085]: Invalid user anton from 101.254.166.52 port 44366 2025-05-26T13:00:58.950090+00:00 close-s23 sshd[3647087]: Invalid user PRUEBA from 101.254.166.52 port 52294 2025-05-26T13:05:49.311895+00:00 close-s23 sshd[3649160]: Invalid user etienne from 101.254.166.52 port 4146 ... show less	Brute-Force
YF	2025-05-26 05:30:02 (1 month ago)	SSH Brute Force	Brute-Force SSH
on-com	2025-05-26 01:25:46 (1 month ago)	SSH login attempt	SSH
F63NNKJ4	2025-05-25 20:15:29 (1 month ago)	May 25 22:11:32 Gaya sshd[1074920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreMay 25 22:11:32 Gaya sshd[1074920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 user=root May 25 22:11:35 Gaya sshd[1074920]: Failed password for root from 101.254.166.52 port 55648 ssh2 May 25 22:14:26 Gaya sshd[1075956]: Invalid user guest from 101.254.166.52 port 1028 May 25 22:14:26 Gaya sshd[1075956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 May 25 22:14:28 Gaya sshd[1075956]: Failed password for invalid user guest from 101.254.166.52 port 1028 ssh2 ... show less	Brute-Force SSH
rtbh.com.tr	2025-05-25 20:08:23 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
F63NNKJ4	2025-05-25 19:09:01 (1 month ago)	May 25 21:05:08 Gaya sshd[1042647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreMay 25 21:05:08 Gaya sshd[1042647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 May 25 21:05:11 Gaya sshd[1042647]: Failed password for invalid user amanda from 101.254.166.52 port 32062 ssh2 May 25 21:07:56 Gaya sshd[1043699]: Invalid user themes from 101.254.166.52 port 41424 May 25 21:07:56 Gaya sshd[1043699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 May 25 21:07:59 Gaya sshd[1043699]: Failed password for invalid user themes from 101.254.166.52 port 41424 ssh2 ... show less	Brute-Force SSH
centurion	2025-05-25 08:44:36 (1 month ago)	Unauthorized attempt on cendev [2222/tcp] Source port: 6958 TTL: 42 Packet length: ... show moreUnauthorized attempt on cendev [2222/tcp] Source port: 6958 TTL: 42 Packet length: 52 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Pornomens	2025-05-25 07:04:35 (1 month ago)	May 25 08:59:09 pornomens sshd[1792253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreMay 25 08:59:09 pornomens sshd[1792253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 user=root May 25 08:59:11 pornomens sshd[1792253]: Failed password for root from 101.254.166.52 port 16824 ssh2 May 25 09:04:32 pornomens sshd[1792280]: Invalid user readarr from 101.254.166.52 port 33766 May 25 09:04:32 pornomens sshd[1792280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 May 25 09:04:34 pornomens sshd[1792280]: Failed password for invalid user readarr from 101.254.166.52 port 33766 ssh2 ... show less	Brute-Force SSH
Pornomens	2025-05-25 04:56:18 (1 month ago)	May 25 06:49:51 pornomens sshd[1791979]: Invalid user ftp-user from 101.254.166.52 port 52654 ... show moreMay 25 06:49:51 pornomens sshd[1791979]: Invalid user ftp-user from 101.254.166.52 port 52654 May 25 06:49:51 pornomens sshd[1791979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 May 25 06:49:53 pornomens sshd[1791979]: Failed password for invalid user ftp-user from 101.254.166.52 port 52654 ssh2 May 25 06:56:18 pornomens sshd[1792034]: Invalid user user from 101.254.166.52 port 11036 ... show less	Brute-Force SSH
security.rdmc.fr	2025-05-25 04:49:34 (1 month ago)	IP in Malicious Database	Web App Attack
Woodie	2025-05-25 04:06:16 (1 month ago)	2025-05-25T00:02:43.721217-04:00 debian sshd[1683355]: pam_unix(sshd:auth): authentication failure; ... show more2025-05-25T00:02:43.721217-04:00 debian sshd[1683355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 2025-05-25T00:02:46.103132-04:00 debian sshd[1683355]: Failed password for invalid user rizki from 101.254.166.52 port 59382 ssh2 2025-05-25T00:06:13.572531-04:00 debian sshd[1686784]: Invalid user thai from 101.254.166.52 port 6634 2025-05-25T00:06:13.575754-04:00 debian sshd[1686784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 2025-05-25T00:06:15.451150-04:00 debian sshd[1686784]: Failed password for invalid user thai from 101.254.166.52 port 6634 ssh2 ... show less	Brute-Force SSH
Woodie	2025-05-25 01:49:59 (1 month ago)	2025-05-24T21:47:00.667749-04:00 debian sshd[1561692]: Invalid user test from 101.254.166.52 port 16 ... show more2025-05-24T21:47:00.667749-04:00 debian sshd[1561692]: Invalid user test from 101.254.166.52 port 16336 2025-05-24T21:47:00.671158-04:00 debian sshd[1561692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 2025-05-24T21:47:02.491163-04:00 debian sshd[1561692]: Failed password for invalid user test from 101.254.166.52 port 16336 ssh2 2025-05-24T21:49:55.917733-04:00 debian sshd[1564607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.254.166.52 user=root 2025-05-24T21:49:58.431088-04:00 debian sshd[1564607]: Failed password for root from 101.254.166.52 port 25836 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩