AbuseIPDB » 106.53.106.119

106.53.106.119 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

0%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencent.com
Country	China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 106.53.106.119

Whois 106.53.106.119

IP Abuse Reports for 106.53.106.119:

This IP address has been reported a total of 27 times from 11 distinct sources. 106.53.106.119 was first reported on October 7th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-05-03 12:37:22 (2 months ago)	2025-05-03T13:37:22.116255+01:00 vps kernel: [8016362.043226] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more2025-05-03T13:37:22.116255+01:00 vps kernel: [8016362.043226] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=106.53.106.119 DST=54.37.14.118 LEN=40 TOS=0x08 PREC=0x60 TTL=232 ID=54321 PROTO=TCP SPT=39062 DPT=23082 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
ThreatBook.io	2025-05-01 23:45:09 (2 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/106.53.106.119 2025-05-01 ... show moreThreatBook Intelligence: IDC more details on http://threatbook.io/ip/106.53.106.119 2025-05-01 05:05:03 / show less	Web App Attack
Anonymous	2025-04-29 15:10:22 (2 months ago)	2025-04-29T16:10:21.352676+01:00 vps kernel: [7679944.807673] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more2025-04-29T16:10:21.352676+01:00 vps kernel: [7679944.807673] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=106.53.106.119 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x60 TTL=41 ID=52198 DF PROTO=TCP SPT=35294 DPT=8087 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
ThreatBook.io	2025-03-19 23:52:06 (3 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/106.53.106.119 2025-03-19 ... show moreThreatBook Intelligence: IDC more details on http://threatbook.io/ip/106.53.106.119 2025-03-19 08:11:58 / show less	Web App Attack
_ArminS_	2023-03-15 04:34:53 (2 years ago)	SP-Scan 47412:22 detected 2023.03.15 05:34:53 blocked until 2023.05.03 23:37:40	Port Scan
FLWC	2023-03-15 03:27:17 (2 years ago)	Invalid user username from 106.53.106.119 port 54988	Brute-Force SSH
SecondEdge	2023-03-14 20:38:37 (2 years ago)	A brute-force attempt has been detected from 106.53.106.119 (China) with 73 distinct account(s) and ... show moreA brute-force attempt has been detected from 106.53.106.119 (China) with 73 distinct account(s) and 168 distinct password(s) over 37s. show less	Brute-Force SSH
NXO WAN	2022-10-18 18:05:02 (2 years ago)	Oct 18 13:20:45 : SSH login attempts with invalid user	Brute-Force SSH
Bernhard Fürst	2022-10-07 16:53:19 (2 years ago)	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 106.53.106.119, Reason:[ ... show moreCluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 106.53.106.119, Reason:[(sshd) Failed SSH login from 106.53.106.119 (CN/China/-): 5 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
www.blocklist.de	2022-10-07 12:40:29 (2 years ago)	Oct 7 18:29:11 www sshd[30336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreOct 7 18:29:11 www sshd[30336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=r.r Oct 7 18:29:13 www sshd[30336]: Failed password for r.r from 106.53.106.119 port 54176 ssh2 Oct 7 18:30:54 www sshd[31053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=r.r Oct 7 18:30:56 www sshd[31053]: Failed password for r.r from 106.53.106.119 port 38602 ssh2 Oct 7 18:32:27 www sshd[31555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=r.r Oct 7 18:32:28 www sshd[31555]: Failed password for r.r from 106.53.106.119 port 50606 ssh2 Oct 7 18:33:52 www sshd[31974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=r.r Oct 7 18:33:54 www sshd[31974]: Failed password for r.r from 106.53.106.119 port 33608 ssh2 Oct 7 18:35:11 www sshd[324........ ------------------------------- show less	FTP Brute-Force Hacking
chenzw	2022-10-07 12:34:31 (2 years ago)	Oct 7 16:30:01 neptune sshd[16812]: Disconnected from 106.53.106.119 port 34798 [preauth] Oct ... show moreOct 7 16:30:01 neptune sshd[16812]: Disconnected from 106.53.106.119 port 34798 [preauth] Oct 7 16:31:40 neptune sshd[16818]: Disconnected from 106.53.106.119 port 47332 [preauth] Oct 7 16:33:10 neptune sshd[16838]: Disconnected from 106.53.106.119 port 58958 [preauth] Oct 7 16:34:31 neptune sshd[16847]: Disconnected from 106.53.106.119 port 41688 [preauth] ... show less	Brute-Force SSH
bytepirate	2022-10-07 12:31:26 (2 years ago)	Oct 7 18:29:43 santamaria sshd\[12152\]: pam_unix\(sshd:auth\): authentication failure\; logname= u ... show moreOct 7 18:29:43 santamaria sshd\[12152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=root Oct 7 18:29:45 santamaria sshd\[12152\]: Failed password for root from 106.53.106.119 port 34234 ssh2 Oct 7 18:31:24 santamaria sshd\[12164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.106.119 user=root ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩