Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai UCloud Information Technology Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
"Unauthorized connection attempt on SSHD detected"
2020-07-07 13:49:29
attackbots
Invalid user emerson from 106.75.130.166 port 39184
2020-07-04 14:11:03
attackspam
Invalid user seedbox from 106.75.130.166 port 48374
2020-06-13 18:54:34
attack
Jun  8 12:00:23 ip-172-31-61-156 sshd[4023]: Failed password for root from 106.75.130.166 port 46802 ssh2
Jun  8 12:04:11 ip-172-31-61-156 sshd[4289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166  user=root
Jun  8 12:04:13 ip-172-31-61-156 sshd[4289]: Failed password for root from 106.75.130.166 port 44124 ssh2
Jun  8 12:04:11 ip-172-31-61-156 sshd[4289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166  user=root
Jun  8 12:04:13 ip-172-31-61-156 sshd[4289]: Failed password for root from 106.75.130.166 port 44124 ssh2
...
2020-06-09 01:11:10
attackbotsspam
Jun  6 08:03:58 ncomp sshd[4421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166  user=root
Jun  6 08:04:00 ncomp sshd[4421]: Failed password for root from 106.75.130.166 port 42890 ssh2
Jun  6 08:22:29 ncomp sshd[4768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166  user=root
Jun  6 08:22:31 ncomp sshd[4768]: Failed password for root from 106.75.130.166 port 47456 ssh2
2020-06-06 20:39:00
attackspam
5x Failed Password
2020-06-03 01:22:23
attack
Invalid user peer from 106.75.130.166 port 56230
2020-05-29 08:12:31
attackspam
May 23 16:03:14 lukav-desktop sshd\[5061\]: Invalid user tix from 106.75.130.166
May 23 16:03:14 lukav-desktop sshd\[5061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166
May 23 16:03:16 lukav-desktop sshd\[5061\]: Failed password for invalid user tix from 106.75.130.166 port 56090 ssh2
May 23 16:05:40 lukav-desktop sshd\[30185\]: Invalid user bng from 106.75.130.166
May 23 16:05:40 lukav-desktop sshd\[30185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166
2020-05-23 21:25:54
attackbotsspam
2020-05-15T23:32:07.162832afi-git.jinr.ru sshd[10309]: Failed password for invalid user shuri from 106.75.130.166 port 47190 ssh2
2020-05-15T23:33:53.542225afi-git.jinr.ru sshd[10700]: Invalid user theo from 106.75.130.166 port 44076
2020-05-15T23:33:53.545293afi-git.jinr.ru sshd[10700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.130.166
2020-05-15T23:33:53.542225afi-git.jinr.ru sshd[10700]: Invalid user theo from 106.75.130.166 port 44076
2020-05-15T23:33:55.013280afi-git.jinr.ru sshd[10700]: Failed password for invalid user theo from 106.75.130.166 port 44076 ssh2
...
2020-05-16 04:35:56
attack
$f2bV_matches
2020-05-14 00:34:53
attackbots
Brute-force attempt banned
2020-04-30 01:39:15
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.130.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64307
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.130.166.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041901 1800 900 604800 86400

;; Query time: 150 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 20 09:40:08 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 166.130.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.130.75.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.38.6.12 attack
Autoban   51.38.6.12 AUTH/CONNECT
2019-12-13 03:43:35
51.75.47.1 attackspambots
Autoban   51.75.47.1 AUTH/CONNECT
2019-12-13 03:29:43
50.237.206.138 attackbotsspam
Autoban   50.237.206.138 AUTH/CONNECT
2019-12-13 03:59:56
50.242.100.89 attackbots
Autoban   50.242.100.89 AUTH/CONNECT
2019-12-13 03:59:23
51.38.147.188 attackspam
Autoban   51.38.147.188 AUTH/CONNECT
2019-12-13 03:45:53
51.235.189.22 attackbotsspam
Autoban   51.235.189.22 AUTH/CONNECT
2019-12-13 03:56:14
200.188.129.178 attackspam
Dec 12 18:38:42 vps691689 sshd[12139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.188.129.178
Dec 12 18:38:44 vps691689 sshd[12139]: Failed password for invalid user heldenbrand from 200.188.129.178 port 55406 ssh2
...
2019-12-13 03:49:25
51.38.147.181 attack
Autoban   51.38.147.181 AUTH/CONNECT
2019-12-13 03:47:14
103.75.103.211 attack
Dec 12 09:12:10 kapalua sshd\[9028\]: Invalid user steve from 103.75.103.211
Dec 12 09:12:10 kapalua sshd\[9028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.103.211
Dec 12 09:12:12 kapalua sshd\[9028\]: Failed password for invalid user steve from 103.75.103.211 port 50858 ssh2
Dec 12 09:19:05 kapalua sshd\[9696\]: Invalid user noyuhi from 103.75.103.211
Dec 12 09:19:05 kapalua sshd\[9696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.75.103.211
2019-12-13 03:27:25
51.255.144.179 attackbotsspam
Autoban   51.255.144.179 AUTH/CONNECT
2019-12-13 03:52:08
201.140.209.33 attackbots
Unauthorized connection attempt detected from IP address 201.140.209.33 to port 445
2019-12-13 03:38:45
175.207.13.22 attackspam
Dec 12 20:37:24 loxhost sshd\[14776\]: Invalid user 1qaz2wsx from 175.207.13.22 port 51170
Dec 12 20:37:24 loxhost sshd\[14776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.22
Dec 12 20:37:26 loxhost sshd\[14776\]: Failed password for invalid user 1qaz2wsx from 175.207.13.22 port 51170 ssh2
Dec 12 20:45:30 loxhost sshd\[15076\]: Invalid user pulver from 175.207.13.22 port 54532
Dec 12 20:45:30 loxhost sshd\[15076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.22
...
2019-12-13 04:01:03
145.239.10.217 attackbotsspam
Dec 12 16:39:49 * sshd[10813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.10.217
Dec 12 16:39:52 * sshd[10813]: Failed password for invalid user luetchford from 145.239.10.217 port 35864 ssh2
2019-12-13 03:34:54
51.68.189.150 attackbotsspam
Autoban   51.68.189.150 AUTH/CONNECT
2019-12-13 03:40:48
51.75.180.147 attackbots
Autoban   51.75.180.147 AUTH/CONNECT
2019-12-13 03:33:25

Recently Reported IPs

213.175.230.63 110.242.143.45 99.23.3.165 5.112.137.30
54.138.216.143 223.76.168.117 185.230.172.218 6.100.242.31
145.96.58.125 36.32.78.158 184.65.201.9 81.222.21.115
102.42.237.248 187.10.247.70 180.30.138.199 253.164.59.79
38.30.168.41 190.171.155.13 48.157.246.247 76.234.245.117