JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

106.52.116.114

Recent Activity

Abuse Confidence Score

100% Critical

34 reports

33 reporters · latest 43 minutes ago

ISP: Tencent cloud computing (Beijing) Co., Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS45090
Domain Name: tencentcloud.com
Country: 🇨🇳 China
City: Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

34 from 33 distinct reporters

First reported

November 4th 2026

Most recent report

43 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 13 🇺🇸 United States of America 5 🇬🇧 United Kingdom of Great Britain and Northern Ireland 4

Most common categories Brute-Force 24 SSH 17 Web App Attack 12 Hacking 4 Bad Web Bot 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 schmittsoft	2026-11-09 05:41:32 UTC · (43 minutes ago)	2026-11-09T05:13:05.697396+00:00 schmittsoft sshd[1830239]: Invalid user ubuntu from 106.52.116.114 port 43442 2026-11-09T05:13:05.924613+00:00 schmittsoft sshd[1830239]: Connection closed by invalid user ubuntu 106.52.116.114 port 43442 [preauth] 20 ... show more 2026-11-09T05:13:05.697396+00:00 schmittsoft sshd[1830239]: Invalid user ubuntu from 106.52.116.114 port 43442 2026-11-09T05:13:05.924613+00:00 schmittsoft sshd[1830239]: Connection closed by invalid user ubuntu 106.52.116.114 port 43442 [preauth] 2026-11-09T05:41:31.807690+00:00 schmittsoft sshd[1850913]: Connection closed by authenticating user root 106.52.116.114 port 39138 [preauth] ... show less	Brute-Force SSH
🇨🇭 lufi	2026-11-09 05:18:56 UTC · (1 hour ago)	2026-11-09T05:57:10.682327+01:00 lufischer2 sshd[2633630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T05:57:12.263382+01:00 lufischer2 sshd[2633630]: Failed password fo ... show more 2026-11-09T05:57:10.682327+01:00 lufischer2 sshd[2633630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T05:57:12.263382+01:00 lufischer2 sshd[2633630]: Failed password for root from 106.52.116.114 port 59120 ssh2 2026-11-09T06:18:52.895371+01:00 lufischer2 sshd[2634112]: Invalid user ubuntu from 106.52.116.114 port 45152 2026-11-09T06:18:53.092632+01:00 lufischer2 sshd[2634112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 2026-11-09T06:18:55.218538+01:00 lufischer2 sshd[2634112]: Failed password for invalid user ubuntu from 106.52.116.114 port 45152 ssh2 ... show less	Web Spam Brute-Force Hacking Web App Attack
🇩🇪 kwnshkn	2026-11-09 02:14:51 UTC · (4 hours ago)	SSH attack (Invalid user probe, Failed password, users: root, ogromnayaelda, attempts: 5)	Brute-Force SSH
🇬🇧 andypiper	2026-11-09 02:03:18 UTC · (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇭 lufi	2026-11-09 01:08:42 UTC · (5 hours ago)	2026-11-09T00:57:06.445610+01:00 lufischer2 sshd[2628311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T00:57:08.724698+01:00 lufischer2 sshd[2628311]: Failed password fo ... show more 2026-11-09T00:57:06.445610+01:00 lufischer2 sshd[2628311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T00:57:08.724698+01:00 lufischer2 sshd[2628311]: Failed password for root from 106.52.116.114 port 49806 ssh2 2026-11-09T01:43:48.384702+01:00 lufischer2 sshd[2629108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T01:43:50.328712+01:00 lufischer2 sshd[2629108]: Failed password for root from 106.52.116.114 port 58598 ssh2 2026-11-09T02:08:41.855721+01:00 lufischer2 sshd[2629520]: Invalid user ubuntu from 106.52.116.114 port 38420 ... show less	Web Spam Brute-Force Hacking Web App Attack
🇩🇪 Onno Achterndiek	2026-11-09 00:12:49 UTC · (6 hours ago)	2026-11-09T00:05:10.526288+01:00 web3 sshd-session[102673]: refused connect from 106.52.116.114 (106.52.116.114) 2026-11-09T00:27:49.459807+01:00 web3 sshd-session[103127]: refused connect from 106.52.116.114 (106.52.116.114) 2026-11-09T00:52:08.8439 ... show more 2026-11-09T00:05:10.526288+01:00 web3 sshd-session[102673]: refused connect from 106.52.116.114 (106.52.116.114) 2026-11-09T00:27:49.459807+01:00 web3 sshd-session[103127]: refused connect from 106.52.116.114 (106.52.116.114) 2026-11-09T00:52:08.843983+01:00 web3 sshd-session[103581]: refused connect from 106.52.116.114 (106.52.116.114) 2026-11-09T01:12:48.404741+01:00 web3 sshd-session[104076]: refused connect from 106.52.116.114 (106.52.116.114) show less	Brute-Force SSH
🇬🇧 jackalek	2026-11-08 23:52:47 UTC · (6 hours ago)	2026-11-09T00:28:42.637857+01:00 ukbox.klej.net sshd-session[193742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 2026-11-09T00:28:44.319510+01:00 ukbox.klej.net sshd-session[193742]: Failed ... show more 2026-11-09T00:28:42.637857+01:00 ukbox.klej.net sshd-session[193742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 2026-11-09T00:28:44.319510+01:00 ukbox.klej.net sshd-session[193742]: Failed password for invalid user ubuntu from 106.52.116.114 port 35186 ssh2 2026-11-09T00:52:45.647910+01:00 ukbox.klej.net sshd-session[194403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=root 2026-11-09T00:52:47.248858+01:00 ukbox.klej.net sshd-session[194403]: Failed password for root from 106.52.116.114 port 45108 ssh2 ... show less	Brute-Force SSH
🇺🇸 HamSammich	2026-11-08 23:42:13 UTC · (6 hours ago)	Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-11-08T23:42Z).	Port Scan SSH
🇺🇸 Teknikal_Domain	2026-11-08 23:28:37 UTC · (6 hours ago)	Nov 8 18:28:35 gen sshd[3619496]: Invalid user ubuntu from 106.52.116.114 port 54578 Nov 8 18:28:35 gen sshd[3619496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 Nov 8 18:28:37 gen sshd[ ... show more Nov 8 18:28:35 gen sshd[3619496]: Invalid user ubuntu from 106.52.116.114 port 54578 Nov 8 18:28:35 gen sshd[3619496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 Nov 8 18:28:37 gen sshd[3619496]: Failed password for invalid user ubuntu from 106.52.116.114 port 54578 ssh2 ... show less	Brute-Force SSH
🇩🇪 nicosqc	2026-11-08 19:29:46 UTC · (10 hours ago)	Invalid user stoker from 106.52.116.114 port 52852	Brute-Force SSH
Anonymous	2026-11-08 19:16:23 UTC · (11 hours ago)	2026-11-08 20:41:48,771 fail2ban.actions [3901805]: NOTICE [sshd] Ban 106.52.116.114 2026-11-08 21:16:22,745 fail2ban.actions [3901805]: NOTICE [sshd] Ban 106.52.116.114 ...	Brute-Force Exploited Host
🇳🇱 Alboweb B.V.	2026-11-08 19:11:12 UTC · (11 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 ITSNF	2026-11-08 19:01:39 UTC · (11 hours ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 riotcoder	2026-11-08 18:44:47 UTC · (11 hours ago)	Automated report from ThreatCrush. 4 malicious authentication, system event(s) observed from this address across 2 detector(s) over ~1h, confirmed by a completed TCP handshake. Blocked by automated defence. No reply expected.	Brute-Force SSH
🇳🇱 Mangelot Hosting	2026-11-08 18:40:58 UTC · (11 hours ago)	106.52.116.114 (CN/China/-), 8 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 8 19:40:50 sshd[870816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more 106.52.116.114 (CN/China/-), 8 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 8 19:40:50 sshd[870816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.93.82.198 user=[USERNAME] Nov 8 18:57:51 sshd[835218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.116.114 user=[USERNAME] Nov 8 18:57:53 sshd[835218]: Failed password for [USERNAME] from 106.52.116.114 port 35466 ssh2 Nov 8 18:50:39 sshd[829251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh show less	DDoS Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 149.165.155.79

🇨🇳 125.36.253.86

🇲🇾 103.239.251.6

🇮🇳 103.58.116.244

🇧🇪 34.22.173.23

🇻🇬 199.204.234.78

🇺🇸 172.237.156.201

🇺🇸 172.190.106.37

🇵🇱 172.64.198.102

🇩🇪 143.244.84.102

🇺🇸 135.119.20.18

🇨🇳 124.90.2.200

🇨🇳 111.22.163.209

🇺🇸 108.31.105.45

🇸🇬 103.13.206.100

🇫🇷 91.231.89.113

🇺🇸 89.19.34.19

🇳🇴 85.165.130.77

🇳🇱 77.67.26.102

🇺🇸 70.183.233.249