Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Beijing Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
19217/tcp 20797/tcp 6346/tcp...
[2020-07-26/09-25]12pkt,11pt.(tcp)
2020-09-25 20:10:19
attackbotsspam
$f2bV_matches
2020-08-01 15:35:28
attackbotsspam
Invalid user appserver from 106.37.74.142 port 47211
2020-07-31 16:03:12
attackspam
(sshd) Failed SSH login from 106.37.74.142 (CN/China/142.74.37.106.static.bjtelecom.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 25 10:12:31 s1 sshd[6159]: Invalid user csgoserver from 106.37.74.142 port 50186
Jul 25 10:12:33 s1 sshd[6159]: Failed password for invalid user csgoserver from 106.37.74.142 port 50186 ssh2
Jul 25 10:36:41 s1 sshd[6830]: Invalid user ep from 106.37.74.142 port 50380
Jul 25 10:36:42 s1 sshd[6830]: Failed password for invalid user ep from 106.37.74.142 port 50380 ssh2
Jul 25 10:45:50 s1 sshd[7060]: Invalid user ap from 106.37.74.142 port 57825
2020-07-25 16:51:55
attackbots
Bruteforce detected by fail2ban
2020-07-23 19:23:24
attack
" "
2020-07-20 02:54:17
attack
Invalid user user from 106.37.74.142 port 51541
2020-07-18 23:21:02
attackbotsspam
Exploited Host.
2020-07-16 06:00:15
attackspambots
Jul  8 00:24:26 mail sshd[50885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.74.142 
Jul  8 00:24:27 mail sshd[50885]: Failed password for invalid user vlas from 106.37.74.142 port 55862 ssh2
...
2020-07-08 06:25:54
attack
Jul  7 11:59:05 webhost01 sshd[23524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.74.142
Jul  7 11:59:07 webhost01 sshd[23524]: Failed password for invalid user andreas from 106.37.74.142 port 60521 ssh2
...
2020-07-07 16:21:22
attackbots
Jun 15 22:59:25 dhoomketu sshd[772706]: Invalid user lubuntu from 106.37.74.142 port 38166
Jun 15 22:59:25 dhoomketu sshd[772706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.74.142 
Jun 15 22:59:25 dhoomketu sshd[772706]: Invalid user lubuntu from 106.37.74.142 port 38166
Jun 15 22:59:28 dhoomketu sshd[772706]: Failed password for invalid user lubuntu from 106.37.74.142 port 38166 ssh2
Jun 15 23:03:29 dhoomketu sshd[772814]: Invalid user rafael from 106.37.74.142 port 56121
...
2020-06-16 01:45:51
attackspambots
Apr 20 05:51:05 haigwepa sshd[25906]: Failed password for root from 106.37.74.142 port 46386 ssh2
Apr 20 05:55:19 haigwepa sshd[26193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.74.142 
...
2020-04-20 16:22:05
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.37.74.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30901
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.37.74.142.			IN	A

;; AUTHORITY SECTION:
.			241	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041901 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 20 07:21:01 CST 2020
;; MSG SIZE  rcvd: 117
Host info
142.74.37.106.in-addr.arpa domain name pointer 142.74.37.106.static.bjtelecom.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.74.37.106.in-addr.arpa	name = 142.74.37.106.static.bjtelecom.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
81.68.128.244 attack
 TCP (SYN) 81.68.128.244:46666 -> port 3115, len 44
2020-09-23 17:00:31
122.51.177.151 attack
Time:     Wed Sep 23 01:03:08 2020 +0000
IP:       122.51.177.151 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 23 00:35:22 3 sshd[25022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.177.151  user=root
Sep 23 00:35:25 3 sshd[25022]: Failed password for root from 122.51.177.151 port 55670 ssh2
Sep 23 00:58:53 3 sshd[10911]: Invalid user nick from 122.51.177.151 port 35330
Sep 23 00:58:55 3 sshd[10911]: Failed password for invalid user nick from 122.51.177.151 port 35330 ssh2
Sep 23 01:03:02 3 sshd[15617]: Invalid user randy from 122.51.177.151 port 60818
2020-09-23 17:00:54
5.182.211.56 attack
(sshd) Failed SSH login from 5.182.211.56 (NL/Netherlands/North Holland/Amsterdam (Westpoort)/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 04:03:25 atlas sshd[29336]: Invalid user marco from 5.182.211.56 port 35460
Sep 23 04:03:26 atlas sshd[29336]: Failed password for invalid user marco from 5.182.211.56 port 35460 ssh2
Sep 23 04:12:18 atlas sshd[31603]: Invalid user git from 5.182.211.56 port 34262
Sep 23 04:12:20 atlas sshd[31603]: Failed password for invalid user git from 5.182.211.56 port 34262 ssh2
Sep 23 04:17:42 atlas sshd[349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.182.211.56  user=root
2020-09-23 17:21:16
170.130.187.18 attack
 TCP (SYN) 170.130.187.18:55319 -> port 23, len 44
2020-09-23 17:10:48
178.218.152.16 attackspambots
(sshd) Failed SSH login from 178.218.152.16 (SE/Sweden/c178-218-152-16.bredband.comhem.se): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 00:13:58 rainbow sshd[287978]: Invalid user admin from 178.218.152.16 port 43238
Sep 23 00:13:58 rainbow sshd[287978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.218.152.16 
Sep 23 00:13:58 rainbow sshd[287986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.218.152.16  user=root
Sep 23 00:14:00 rainbow sshd[287978]: Failed password for invalid user admin from 178.218.152.16 port 43238 ssh2
Sep 23 00:14:00 rainbow sshd[287986]: Failed password for root from 178.218.152.16 port 43308 ssh2
2020-09-23 17:12:17
124.160.96.249 attack
Sep 23 09:17:25 vps-51d81928 sshd[324532]: Invalid user david from 124.160.96.249 port 51497
Sep 23 09:17:26 vps-51d81928 sshd[324532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.96.249 
Sep 23 09:17:25 vps-51d81928 sshd[324532]: Invalid user david from 124.160.96.249 port 51497
Sep 23 09:17:28 vps-51d81928 sshd[324532]: Failed password for invalid user david from 124.160.96.249 port 51497 ssh2
Sep 23 09:22:17 vps-51d81928 sshd[324656]: Invalid user student1 from 124.160.96.249 port 49168
...
2020-09-23 17:38:32
83.255.209.56 attack
Sep 22 17:01:47 ssh2 sshd[20518]: User root from c83-255-209-56.bredband.comhem.se not allowed because not listed in AllowUsers
Sep 22 17:01:47 ssh2 sshd[20518]: Failed password for invalid user root from 83.255.209.56 port 42711 ssh2
Sep 22 17:01:47 ssh2 sshd[20518]: Connection closed by invalid user root 83.255.209.56 port 42711 [preauth]
...
2020-09-23 17:25:13
167.172.103.66 attackbotsspam
Registration form abuse
2020-09-23 17:13:42
122.201.21.241 attack
Attempts against non-existent wp-login
2020-09-23 17:12:44
122.51.89.18 attack
Sep 23 05:06:51 *** sshd[12294]: Invalid user gis from 122.51.89.18
2020-09-23 17:36:50
163.172.40.236 attackbotsspam
163.172.40.236 - - [23/Sep/2020:12:48:36 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-09-23 17:14:14
104.131.117.137 attackbotsspam
Automatic report - XMLRPC Attack
2020-09-23 17:35:43
178.62.110.145 attackbotsspam
178.62.110.145 - - \[23/Sep/2020:08:56:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 8308 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
178.62.110.145 - - \[23/Sep/2020:08:56:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 8128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
178.62.110.145 - - \[23/Sep/2020:08:56:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 8121 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-23 16:57:42
178.92.250.20 attack
Sep 22 17:01:49 ssh2 sshd[20538]: Invalid user admin from 178.92.250.20 port 51924
Sep 22 17:01:49 ssh2 sshd[20538]: Failed password for invalid user admin from 178.92.250.20 port 51924 ssh2
Sep 22 17:01:50 ssh2 sshd[20538]: Connection closed by invalid user admin 178.92.250.20 port 51924 [preauth]
...
2020-09-23 17:18:23
66.151.211.226 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-23 17:36:33

Recently Reported IPs

194.16.0.108 97.174.185.211 42.238.163.212 41.8.251.33
202.140.214.88 52.130.74.149 50.208.131.193 124.72.118.130
133.54.69.160 172.104.226.23 92.128.49.244 197.73.103.251
74.250.102.162 183.234.136.14 2.58.228.167 179.129.226.109
14.232.171.110 59.30.177.251 91.240.140.21 223.244.159.30