This IP address has been reported a total of
283
times from
173 distinct
sources.
182.52.90.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 182.52.90.106 (TH/Thailand/node-huy.pool-182-52.dynamic.nt-isp.net): 5 ...
show more(sshd) Failed SSH login from 182.52.90.106 (TH/Thailand/node-huy.pool-182-52.dynamic.nt-isp.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 1 16:31:49 10854 sshd[28629]: Invalid user tarsys from 182.52.90.106 port 45890
Jun 1 16:31:50 10854 sshd[28629]: Failed password for invalid user tarsys from 182.52.90.106 port 45890 ssh2
Jun 1 16:41:26 10854 sshd[29875]: Invalid user ubuntu from 182.52.90.106 port 36740
Jun 1 16:41:28 10854 sshd[29875]: Failed password for invalid user ubuntu from 182.52.90.106 port 36740 ssh2
Jun 1 16:43:03 10854 sshd[30109]: Invalid user haorui from 182.52.90.106 port 34982
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 182.52.90.106 (TH/Thailand/node-huy.pool-182-52.dynamic.nt-isp.net)
(sshd) Failed SSH login from 182.52.90.106 (TH/Thailand/node-huy.pool-182-52.dynamic.nt-isp.net): 5 ...
show more(sshd) Failed SSH login from 182.52.90.106 (TH/Thailand/node-huy.pool-182-52.dynamic.nt-isp.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 1 16:01:30 14620 sshd[28834]: Invalid user adminuser from 182.52.90.106 port 40554
Jun 1 16:01:32 14620 sshd[28834]: Failed password for invalid user adminuser from 182.52.90.106 port 40554 ssh2
Jun 1 16:03:29 14620 sshd[29878]: Invalid user kingbase from 182.52.90.106 port 39322
Jun 1 16:03:31 14620 sshd[29878]: Failed password for invalid user kingbase from 182.52.90.106 port 39322 ssh2
Jun 1 16:05:23 14620 sshd[30915]: Invalid user mas from 182.52.90.106 port 34092
show less
Jun 1 22:53:45 : Failed password for invalid user adminuser from 182.52.90.106 port 51208 ssh2 Jun 1 ...
show moreJun 1 22:53:45 : Failed password for invalid user adminuser from 182.52.90.106 port 51208 ssh2 Jun 1 23:02:16 : Invalid user kingbase from 182.52.90.106 port 59080 Jun 1 23:02:16 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
Jun 1 15:25:37 vps-1 sshd-session[183259]: Invalid user itest from 182.52.90.106 port 52662
Jun 1 ...
show moreJun 1 15:25:37 vps-1 sshd-session[183259]: Invalid user itest from 182.52.90.106 port 52662
Jun 1 15:27:13 vps-1 sshd-session[183346]: Invalid user maverick from 182.52.90.106 port 45550
Jun 1 15:28:49 vps-1 sshd-session[183363]: Invalid user js from 182.52.90.106 port 60218
...
show less
2026-06-01T18:28:50.321462+00:00 edge-thn-par02.int.pdx.net.uk sshd[3892168]: Invalid user admin fro ...
show more2026-06-01T18:28:50.321462+00:00 edge-thn-par02.int.pdx.net.uk sshd[3892168]: Invalid user admin from 182.52.90.106 port 52370
2026-06-01T18:32:04.738831+00:00 edge-thn-par02.int.pdx.net.uk sshd[3892423]: Invalid user jhlee from 182.52.90.106 port 60996
2026-06-01T18:35:14.249609+00:00 edge-thn-par02.int.pdx.net.uk sshd[3892655]: Invalid user user from 182.52.90.106 port 48582
...
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
SQL Injection
Spoofing
Bad Web Bot
Brute-Force
SSH
IoT Targeted
2026-06-01T20:25:45.524194+02:00 gw-de35-01.guestgw.net sshd[943121]: Disconnected from authenticati ...
show more2026-06-01T20:25:45.524194+02:00 gw-de35-01.guestgw.net sshd[943121]: Disconnected from authenticating user root 182.52.90.106 port 50258 [preauth]
2026-06-01T20:28:58.013890+02:00 gw-de35-01.guestgw.net sshd[944054]: Disconnected from authenticating user admin 182.52.90.106 port 53440 [preauth]
2026-06-01T20:30:35.418646+02:00 gw-de35-01.guestgw.net sshd[944694]: Disconnected from authenticating user root 182.52.90.106 port 50404 [preauth]
2026-06-01T20:32:12.176064+02:00 gw-de35-01.guestgw.net sshd[945252]: Invalid user jhlee from 182.52.90.106 port 44732
2026-06-01T20:32:12.396684+02:00 gw-de35-01.guestgw.net sshd[945252]: Disconnected from invalid user jhlee 182.52.90.106 port 44732 [preauth]
show less