JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.52.165.100

106.52.165.100 was found in our database!

This IP was reported 685 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.52.165.100

Whois 106.52.165.100

IP Abuse Reports for 106.52.165.100:

This IP address has been reported a total of 685 times from 188 distinct sources. 106.52.165.100 was first reported on November 4th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dwmp	2026-06-11 05:21:07 (12 hours ago)	Jun 11 05:49:19 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 11 05:49:19 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<ftFsPvJTZLpqNKVk> Jun 11 06:12:23 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<HsnHkPJTPohqNKVk> Jun 11 07:21:06 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<PA59hvNTcqdqNKVk> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-11 03:44:01 (14 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 mxinfra	2026-06-11 00:01:12 (17 hours ago)	Repeated unauthorized access attempts.	Port Scan Hacking Brute-Force
🇺🇦 llighthunter	2026-06-10 22:59:41 (18 hours ago)	Jun 9 13:32:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<no ... show more Jun 9 13:32:17 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=106.52.165.100, lip=192.168.1.80, session=<qQklpM9TboZqNKVk> Jun 9 13:43:07 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=106.52.165.100, lip=192.168.1.80, session=<wtjQys9T6IlqNKVk> Jun 9 13:54:13 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=106.52.165.100, lip=192.168.1.80, session=<2+CN8s9TEo1qNKVk> show less	Port Scan Hacking Spoofing
🇬🇧 openstrike.co.uk	2026-06-10 22:51:56 (19 hours ago)	Email auth failures (8)	Brute-Force
🇦🇺 brocococonut	2026-06-10 17:31:53 (1 day ago)	Jun 11 01:07:51 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Jun 11 01:07:51 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=67.219.110.53, TLS, session=<iFpQm+dTgNlqNKVk> Jun 11 01:31:14 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=67.219.110.53, TLS, session=<uAED7+dTntJqNKVk> Jun 11 02:43:21 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=67.219.110.53, TLS, session=<2qbD8OhTyN5qNKVk> Jun 11 03:07:28 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=67.219.110.53, TLS, session=<7oEsR+lTDOlqNKVk> Jun 11 03:31:52 01 dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 s ... show less	Brute-Force
🇫🇮 23p02732	2026-06-10 16:11:39 (1 day ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 ras07	2026-06-10 15:41:27 (1 day ago)	Brute force SMTP/IMAP login attempts.	Brute-Force
🇫🇷 dwmp	2026-06-10 15:39:17 (1 day ago)	Jun 10 16:51:36 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 10 16:51:36 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<mY4QYedTCrpqNKVk> Jun 10 17:15:06 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<MI3ptOdT5rZqNKVk> Jun 10 17:39:16 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=75.119.153.41, TLS, session=<rYiEC+hTtLhqNKVk> ... show less	Brute-Force
Anonymous	2026-06-10 14:48:57 (1 day ago)	2026-06-10T16:48:52.095845+02:00 aion auth[1270969]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-06-10T16:48:52.095845+02:00 aion auth[1270969]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=106.52.165.100 2026-06-10T16:48:56.253718+02:00 aion dovecot[1248469]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<test>, method=PLAIN, rip=106.52.165.100, lip=10.0.1.124, TLS, session=<ORtOV+dTss1qNKVk> ... show less	Hacking Brute-Force
Anonymous	2026-06-10 12:55:35 (1 day ago)	2026-06-10T14:05:46.474869+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-06-10T14:05:46.474869+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=172.104.246.203, TLS, session=<fyYMEOVTbtlqNKVk> 2026-06-10T14:55:34.383129+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=172.104.246.203, TLS, session=<j8MZwuVTpo5qNKVk> ... show less	Brute-Force
Anonymous	2026-06-10 11:20:27 (1 day ago)	Fail2Ban SSH ban	Brute-Force SSH
Anonymous	2026-06-10 09:40:11 (1 day ago)	2026-06-10T10:03:26.932799+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-06-10T10:03:26.932799+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=172.104.246.203, TLS, session=<e8JxreFT3JZqNKVk> 2026-06-10T10:51:56.882970+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=172.104.246.203, TLS, session=<SN7TWuJT+qFqNKVk> 2026-06-10T11:40:10.499418+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=172.104.246.203, TLS, session=<AMBNB+NTKLFqNKVk> ... show less	Brute-Force
🇺🇸 interbiznw.com	2026-06-10 08:14:46 (1 day ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
🇺🇸 vestibtech	2026-06-10 08:11:15 (1 day ago)	2026-06-10T02:11:15.168796-06:00 Host-KLAX-C dovecot[1147]: imap-login: Disconnected: Connection clo ... show more 2026-06-10T02:11:15.168796-06:00 Host-KLAX-C dovecot[1147]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=106.52.165.100, lip=185.198.26.44, TLS, session=<K65pyeFTzOhqNKVk> ... show less	Brute-Force

Showing 1 to 15 of 685 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 116.203.37.186

🇧🇷 24.152.76.65

🇩🇪 13.140.25.189

🇺🇸 209.250.4.163

🇳🇱 185.156.73.233

🇺🇸 172.245.226.119

🇮🇩 103.39.49.177

🇯🇵 118.194.236.137

🇺🇸 20.12.231.72

🇨🇦 85.217.149.56

🇸🇬 52.237.80.79

🇳🇱 45.148.10.151

🇨🇳 36.41.173.197

🇹🇷 31.145.131.202

🇬🇧 217.146.80.122

🇮🇶 185.166.25.150

🇫🇷 173.249.34.196

🇮🇳 103.17.12.27

🇩🇪 69.5.169.57

🇨🇳 58.20.236.52