JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

106.54.213.252

Recent Activity

Abuse confidence score ?

100% Critical

72 reports

60 reporters · latest 20 hours ago

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 106.54.213.252

Export CSV

This IP address has been reported a total of 72 times from 60 distinct sources. 106.54.213.252 was first reported on October 19th 2026, and the most recent report was 20 hours ago. In the last 60 days, the top reporter locations were: Germany with 17 reports; United States of America with 9 reports; Czechia with 6 reports. The most common categories in these recent reports were: Brute-Force 64 times; SSH 63 times; Port Scan 6 times; Web App Attack 2 times; FTP Brute-Force 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MatCat	2026-10-24 10:05:10 (20 hours ago)	Banned by fail2ban: sshd	Brute-Force SSH
Anonymous	2026-10-24 09:35:48 (21 hours ago)	2026-10-24T11:33:53+02:00 lb-1 sshd[239194]: pam_unix(sshd:auth): authentication failure; logname= u ... show more 2026-10-24T11:33:53+02:00 lb-1 sshd[239194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.213.252 user=root 2026-10-24T11:33:56+02:00 lb-1 sshd[239194]: Failed password for root from 106.54.213.252 port 50334 ssh2 2026-10-24T11:35:45+02:00 lb-1 sshd[239414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.213.252 user=root 2026-10-24T11:35:46+02:00 lb-1 sshd[239414]: Failed password for root from 106.54.213.252 port 44296 ssh2 ... show less	Brute-Force SSH
🇳🇱 DIICOT	2026-10-24 09:27:31 (21 hours ago)	Unauthorized SSH login attempt. Host tried 3 credential combinations against sshd honeypot.	SSH
🇩🇪 ghostwarriors	2026-10-23 08:20:18 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Ilop	2026-10-23 07:00:37 (1 day ago)	[hp-100] 14 unsolicited packets to honeypot ports 2222 (OCI DShield sensor)	Port Scan
🇨🇦 oh.mg	2026-10-23 06:56:05 (1 day ago)	(sshd) Failed SSH login from 106.54.213.252 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 106.54.213.252 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-10-23T06:55:03.952199+00:00 rygel sshd[1216760]: Invalid user server from 106.54.213.252 port 33576 2026-10-23T06:55:03.959920+00:00 rygel sshd[1216760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.213.252 2026-10-23T06:55:06.216560+00:00 rygel sshd[1216760]: Failed password for invalid user server from 106.54.213.252 port 33576 ssh2 2026-10-23T06:56:01.191550+00:00 rygel sshd[1221604]: Invalid user esuser from 106.54.213.252 port 35392 2026-10-23T06:56:01.199667+00:00 rygel sshd[1221604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.213.252 show less	Brute-Force SSH
Anonymous	2026-10-23 05:20:23 (2 days ago)	2026-10-23T05:13:34.134274+00:00 de-fra2-unifi1 sshd[2242385]: Invalid user plex from 106.54.213.252 ... show more 2026-10-23T05:13:34.134274+00:00 de-fra2-unifi1 sshd[2242385]: Invalid user plex from 106.54.213.252 port 36550 2026-10-23T05:18:31.861912+00:00 de-fra2-unifi1 sshd[2242440]: Invalid user useradmin from 106.54.213.252 port 41204 2026-10-23T05:20:22.188732+00:00 de-fra2-unifi1 sshd[2242705]: Invalid user trojanuser from 106.54.213.252 port 35174 ... show less	Brute-Force SSH
🇩🇪 LoNET	2026-10-23 05:20:08 (2 days ago)	Report 2766344 with IP 3813913 for SSH brute-force attack by source 3808569 via ssh-honeypot/0.2.0+h ... show more Report 2766344 with IP 3813913 for SSH brute-force attack by source 3808569 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇺🇸 Tect.host	2026-10-23 05:19:59 (2 days ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
Anonymous	2026-10-23 05:13:31 (2 days ago)	Repeated failed SSH authentication attempts over TCP triggered a Fail2Ban ban.	Brute-Force SSH
🇮🇱 spd.co.il	2026-10-22 05:02:40 (3 days ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇵🇱 lns.bz	2026-10-21 01:39:52 (4 days ago)	SSH bruteforce [BY]	SSH
🇬🇧 andypiper	2026-10-21 01:00:14 (4 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇳🇱 Slartibartfast	2026-10-21 00:40:01 (4 days ago)	2026-10-21T02:39:59.765550+02:00 meet sshd-session[91788]: Invalid user user from 106.54.213.252 por ... show more 2026-10-21T02:39:59.765550+02:00 meet sshd-session[91788]: Invalid user user from 106.54.213.252 port 41720 ... show less	Brute-Force SSH
🇩🇪 Phenix Info	2026-10-21 00:35:24 (4 days ago)	SmallGuard.fr/SSH Login Failed	Brute-Force

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 212.95.138.11

🇨🇴 200.118.80.173

🇨🇦 198.91.171.245

🇦🇲 185.215.54.47

🇷🇺 176.118.214.70

🇮🇶 169.224.12.92

🇺🇸 149.165.153.85

🇩🇪 109.160.32.142

🇻🇳 103.199.43.124

🇺🇸 93.115.5.98

🇺🇸 91.201.107.18

🇫🇷 90.53.15.210

🇳🇱 77.239.124.71

🇺🇸 72.63.117.204

🇮🇳 49.204.74.149

🇦🇿 46.32.162.16

🇳🇱 45.148.10.152

🇳🇱 45.148.10.121

🇺🇦 31.134.107.227

🇦🇿 212.47.147.171