City: unknown
Region: unknown
Country: China
Internet Service Provider: Shanghai UCloud Information Technology Company Limited
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Invalid user user from 106.75.119.74 port 57464 |
2020-04-11 02:31:52 |
| attackbots | "Unauthorized connection attempt on SSHD detected" |
2020-04-09 09:22:31 |
| attack | Apr 6 14:40:59 OPSO sshd\[7029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.74 user=root Apr 6 14:41:01 OPSO sshd\[7029\]: Failed password for root from 106.75.119.74 port 39956 ssh2 Apr 6 14:43:26 OPSO sshd\[7130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.74 user=root Apr 6 14:43:28 OPSO sshd\[7130\]: Failed password for root from 106.75.119.74 port 37978 ssh2 Apr 6 14:45:53 OPSO sshd\[7501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.74 user=root |
2020-04-06 21:02:14 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.75.119.202 | attackbots | Oct 11 17:06:25 ip-172-31-61-156 sshd[24195]: Failed password for root from 106.75.119.202 port 43954 ssh2 Oct 11 17:09:02 ip-172-31-61-156 sshd[24300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 11 17:09:05 ip-172-31-61-156 sshd[24300]: Failed password for root from 106.75.119.202 port 60582 ssh2 Oct 11 17:09:02 ip-172-31-61-156 sshd[24300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 11 17:09:05 ip-172-31-61-156 sshd[24300]: Failed password for root from 106.75.119.202 port 60582 ssh2 ... |
2020-10-12 03:33:38 |
| 106.75.119.202 | attack | SSH login attempts. |
2020-10-11 19:28:17 |
| 106.75.119.202 | attackspambots | Oct 7 23:23:10 localhost sshd[2695821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 7 23:23:12 localhost sshd[2695821]: Failed password for root from 106.75.119.202 port 54237 ssh2 ... |
2020-10-08 01:27:17 |
| 106.75.119.202 | attackbotsspam | Oct 7 16:02:10 itv-usvr-01 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 7 16:02:12 itv-usvr-01 sshd[19745]: Failed password for root from 106.75.119.202 port 39161 ssh2 Oct 7 16:08:37 itv-usvr-01 sshd[19975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 7 16:08:40 itv-usvr-01 sshd[19975]: Failed password for root from 106.75.119.202 port 41088 ssh2 Oct 7 16:11:37 itv-usvr-01 sshd[20201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Oct 7 16:11:39 itv-usvr-01 sshd[20201]: Failed password for root from 106.75.119.202 port 60130 ssh2 |
2020-10-07 17:35:25 |
| 106.75.119.202 | attack | SSH brute-force attempt |
2020-08-23 05:25:59 |
| 106.75.119.202 | attackspam | Aug 13 02:16:15 journals sshd\[21188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Aug 13 02:16:18 journals sshd\[21188\]: Failed password for root from 106.75.119.202 port 41324 ssh2 Aug 13 02:20:40 journals sshd\[21601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root Aug 13 02:20:41 journals sshd\[21601\]: Failed password for root from 106.75.119.202 port 44914 ssh2 Aug 13 02:24:58 journals sshd\[21976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 user=root ... |
2020-08-13 10:16:21 |
| 106.75.119.202 | attack | Aug 9 08:44:21 fhem-rasp sshd[20876]: Failed password for root from 106.75.119.202 port 41573 ssh2 Aug 9 08:44:22 fhem-rasp sshd[20876]: Disconnected from authenticating user root 106.75.119.202 port 41573 [preauth] ... |
2020-08-09 14:58:52 |
| 106.75.119.202 | attackspambots | Invalid user lauca from 106.75.119.202 port 37973 |
2020-07-19 02:30:51 |
| 106.75.119.202 | attackspambots | Jul 12 08:54:36 ws24vmsma01 sshd[177401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 Jul 12 08:54:38 ws24vmsma01 sshd[177401]: Failed password for invalid user ernest from 106.75.119.202 port 37537 ssh2 ... |
2020-07-13 02:05:15 |
| 106.75.119.202 | attackbotsspam | Jul 8 12:43:47 onepixel sshd[477644]: Invalid user mapred from 106.75.119.202 port 55836 Jul 8 12:43:47 onepixel sshd[477644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.119.202 Jul 8 12:43:47 onepixel sshd[477644]: Invalid user mapred from 106.75.119.202 port 55836 Jul 8 12:43:49 onepixel sshd[477644]: Failed password for invalid user mapred from 106.75.119.202 port 55836 ssh2 Jul 8 12:45:50 onepixel sshd[478689]: Invalid user arlene from 106.75.119.202 port 40980 |
2020-07-09 00:15:07 |
| 106.75.119.202 | attack | Invalid user rena from 106.75.119.202 port 35340 |
2020-07-01 16:45:15 |
| 106.75.119.202 | attackbots | 21 attempts against mh-ssh on cloud |
2020-06-30 18:51:17 |
| 106.75.119.202 | attackspambots | Invalid user ryan from 106.75.119.202 port 51245 |
2020-06-22 02:02:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.119.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.119.74. IN A
;; AUTHORITY SECTION:
. 476 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040600 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 21:02:07 CST 2020
;; MSG SIZE rcvd: 117Host 74.119.75.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 74.119.75.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 109.93.95.1 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/109.93.95.1/ RS - 1H : (8) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RS NAME ASN : ASN8400 IP : 109.93.95.1 CIDR : 109.92.0.0/15 PREFIX COUNT : 79 UNIQUE IP COUNT : 711680 ATTACKS DETECTED ASN8400 : 1H - 1 3H - 3 6H - 3 12H - 4 24H - 7 DateTime : 2019-11-14 07:20:54 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-14 21:07:50 |
| 110.168.212.2 | attackbots | UTC: 2019-11-13 port: 23/tcp |
2019-11-14 20:37:58 |
| 60.174.118.80 | attackspambots | Brute force attempt |
2019-11-14 21:01:48 |
| 218.78.44.63 | attack | Invalid user asterisk from 218.78.44.63 port 46322 |
2019-11-14 21:08:44 |
| 14.215.46.94 | attackspam | Nov 14 10:04:45 v22018076622670303 sshd\[20335\]: Invalid user sales from 14.215.46.94 port 5814 Nov 14 10:04:45 v22018076622670303 sshd\[20335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.46.94 Nov 14 10:04:47 v22018076622670303 sshd\[20335\]: Failed password for invalid user sales from 14.215.46.94 port 5814 ssh2 ... |
2019-11-14 20:56:32 |
| 187.74.150.5 | attackbots | \[Thu Nov 14 07:20:54 2019\] \[error\] \[client 187.74.150.5\] client denied by server configuration: /var/www/html/default/ \[Thu Nov 14 07:20:54 2019\] \[error\] \[client 187.74.150.5\] client denied by server configuration: /var/www/html/default/.noindex.html \[Thu Nov 14 07:20:54 2019\] \[error\] \[client 187.74.150.5\] client denied by server configuration: /var/www/html/default/ \[Thu Nov 14 07:20:54 2019\] \[error\] \[client 187.74.150.5\] client denied by server configuration: /var/www/html/default/.noindex.html ... |
2019-11-14 21:09:05 |
| 159.203.201.136 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-14 20:34:28 |
| 222.138.187.13 | attackbotsspam | firewall-block, port(s): 26/tcp |
2019-11-14 21:11:45 |
| 139.162.118.185 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-14 21:19:19 |
| 42.239.189.227 | attackbots | UTC: 2019-11-13 port: 23/tcp |
2019-11-14 20:47:15 |
| 219.154.119.111 | attack | UTC: 2019-11-13 port: 23/tcp |
2019-11-14 20:48:26 |
| 51.77.195.149 | attack | Nov 14 12:14:57 SilenceServices sshd[28761]: Failed password for uucp from 51.77.195.149 port 33046 ssh2 Nov 14 12:22:01 SilenceServices sshd[30905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149 Nov 14 12:22:03 SilenceServices sshd[30905]: Failed password for invalid user chinh from 51.77.195.149 port 42016 ssh2 |
2019-11-14 20:54:37 |
| 218.240.145.2 | attackspambots | firewall-block, port(s): 1433/tcp |
2019-11-14 21:17:50 |
| 111.250.140.28 | attackspambots | UTC: 2019-11-13 port: 23/tcp |
2019-11-14 20:34:48 |
| 173.254.192.182 | attack | Brute force attempt |
2019-11-14 20:40:04 |