Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai UCloud Information Technology Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Brute-force attempt banned
2020-09-14 21:05:31
attackbots
$f2bV_matches
2020-09-14 12:58:35
attack
SSH Brute-Force Attack
2020-09-14 04:59:22
attackbots
SSH login attempts.
2020-09-08 00:34:29
attack
Sep  7 09:21:15 ip106 sshd[27329]: Failed password for root from 106.75.141.160 port 44922 ssh2
Sep  7 09:23:58 ip106 sshd[27423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 
...
2020-09-07 16:03:10
attack
Sep  6 18:27:07 ns382633 sshd\[3463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
Sep  6 18:27:09 ns382633 sshd\[3463\]: Failed password for root from 106.75.141.160 port 50476 ssh2
Sep  6 18:50:24 ns382633 sshd\[7607\]: Invalid user ggggg from 106.75.141.160 port 40336
Sep  6 18:50:24 ns382633 sshd\[7607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Sep  6 18:50:26 ns382633 sshd\[7607\]: Failed password for invalid user ggggg from 106.75.141.160 port 40336 ssh2
2020-09-07 08:25:20
attackbotsspam
Aug 20 22:28:23 havingfunrightnow sshd[26817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 
Aug 20 22:28:25 havingfunrightnow sshd[26817]: Failed password for invalid user admin from 106.75.141.160 port 39852 ssh2
Aug 20 22:40:18 havingfunrightnow sshd[27183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 
...
2020-08-21 05:13:06
attack
detected by Fail2Ban
2020-08-07 13:50:34
attackbotsspam
2020-08-06T14:14:00.761129shield sshd\[26095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-06T14:14:02.677852shield sshd\[26095\]: Failed password for root from 106.75.141.160 port 33036 ssh2
2020-08-06T14:18:19.692001shield sshd\[26549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-06T14:18:21.498416shield sshd\[26549\]: Failed password for root from 106.75.141.160 port 60042 ssh2
2020-08-06T14:22:44.514058shield sshd\[27198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-06 22:34:04
attackbots
2020-08-04T03:49:58.299650shield sshd\[25415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-04T03:50:00.317525shield sshd\[25415\]: Failed password for root from 106.75.141.160 port 42666 ssh2
2020-08-04T03:54:24.294129shield sshd\[25799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-04T03:54:26.161615shield sshd\[25799\]: Failed password for root from 106.75.141.160 port 50432 ssh2
2020-08-04T03:58:46.868476shield sshd\[26157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-08-04 12:40:53
attackspambots
Brute-force attempt banned
2020-08-04 00:46:02
attackspambots
Jul 28 15:33:33 inter-technics sshd[23771]: Invalid user odoo8 from 106.75.141.160 port 57192
Jul 28 15:33:33 inter-technics sshd[23771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Jul 28 15:33:33 inter-technics sshd[23771]: Invalid user odoo8 from 106.75.141.160 port 57192
Jul 28 15:33:36 inter-technics sshd[23771]: Failed password for invalid user odoo8 from 106.75.141.160 port 57192 ssh2
Jul 28 15:39:51 inter-technics sshd[24300]: Invalid user lusifen from 106.75.141.160 port 50168
...
2020-07-28 23:07:10
attackspam
Jul 20 14:31:11 santamaria sshd\[11391\]: Invalid user swift from 106.75.141.160
Jul 20 14:31:11 santamaria sshd\[11391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Jul 20 14:31:13 santamaria sshd\[11391\]: Failed password for invalid user swift from 106.75.141.160 port 42882 ssh2
...
2020-07-20 20:51:08
attackspam
Jul 19 18:04:17 myvps sshd[25174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 
Jul 19 18:04:19 myvps sshd[25174]: Failed password for invalid user fcosta from 106.75.141.160 port 36258 ssh2
Jul 19 18:07:43 myvps sshd[27693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 
...
2020-07-20 01:44:36
attackspambots
Jul 10 09:30:00 ns392434 sshd[14470]: Invalid user shimada from 106.75.141.160 port 55752
Jul 10 09:30:00 ns392434 sshd[14470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Jul 10 09:30:00 ns392434 sshd[14470]: Invalid user shimada from 106.75.141.160 port 55752
Jul 10 09:30:01 ns392434 sshd[14470]: Failed password for invalid user shimada from 106.75.141.160 port 55752 ssh2
Jul 10 09:34:06 ns392434 sshd[14611]: Invalid user kozalper from 106.75.141.160 port 39610
Jul 10 09:34:06 ns392434 sshd[14611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Jul 10 09:34:06 ns392434 sshd[14611]: Invalid user kozalper from 106.75.141.160 port 39610
Jul 10 09:34:08 ns392434 sshd[14611]: Failed password for invalid user kozalper from 106.75.141.160 port 39610 ssh2
Jul 10 09:34:45 ns392434 sshd[14615]: Invalid user todd from 106.75.141.160 port 47820
2020-07-10 15:48:59
attackspambots
Jul  4 07:13:00 vpn01 sshd[20146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
Jul  4 07:13:01 vpn01 sshd[20146]: Failed password for invalid user mysql from 106.75.141.160 port 44206 ssh2
...
2020-07-04 13:35:35
attack
2020-06-29T15:02:31.508353galaxy.wi.uni-potsdam.de sshd[16318]: Invalid user luoyu from 106.75.141.160 port 57236
2020-06-29T15:02:31.513369galaxy.wi.uni-potsdam.de sshd[16318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
2020-06-29T15:02:31.508353galaxy.wi.uni-potsdam.de sshd[16318]: Invalid user luoyu from 106.75.141.160 port 57236
2020-06-29T15:02:33.446469galaxy.wi.uni-potsdam.de sshd[16318]: Failed password for invalid user luoyu from 106.75.141.160 port 57236 ssh2
2020-06-29T15:05:11.041222galaxy.wi.uni-potsdam.de sshd[16641]: Invalid user justin from 106.75.141.160 port 40134
2020-06-29T15:05:11.046181galaxy.wi.uni-potsdam.de sshd[16641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
2020-06-29T15:05:11.041222galaxy.wi.uni-potsdam.de sshd[16641]: Invalid user justin from 106.75.141.160 port 40134
2020-06-29T15:05:12.944178galaxy.wi.uni-potsdam.de sshd[16641]: Faile
...
2020-06-30 01:36:00
attack
Jun 23 22:35:23 srv sshd[1752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
2020-06-24 04:42:13
attack
2020-06-20T01:03:48.765185+02:00  sshd[8830]: Failed password for invalid user nec from 106.75.141.160 port 49266 ssh2
2020-06-20 07:23:42
attack
2020-06-08T03:48:41.966597abusebot-6.cloudsearch.cf sshd[5665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-06-08T03:48:44.482179abusebot-6.cloudsearch.cf sshd[5665]: Failed password for root from 106.75.141.160 port 51190 ssh2
2020-06-08T03:52:26.676145abusebot-6.cloudsearch.cf sshd[5920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-06-08T03:52:28.745401abusebot-6.cloudsearch.cf sshd[5920]: Failed password for root from 106.75.141.160 port 58156 ssh2
2020-06-08T03:53:32.461931abusebot-6.cloudsearch.cf sshd[5978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
2020-06-08T03:53:34.591449abusebot-6.cloudsearch.cf sshd[5978]: Failed password for root from 106.75.141.160 port 42334 ssh2
2020-06-08T03:54:36.445889abusebot-6.cloudsearch.cf sshd[6040]: pam_unix(sshd:auth): authen
...
2020-06-08 13:13:59
attackspambots
2020-05-29T07:36:38.682336abusebot-2.cloudsearch.cf sshd[9887]: Invalid user doug from 106.75.141.160 port 36482
2020-05-29T07:36:38.687810abusebot-2.cloudsearch.cf sshd[9887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
2020-05-29T07:36:38.682336abusebot-2.cloudsearch.cf sshd[9887]: Invalid user doug from 106.75.141.160 port 36482
2020-05-29T07:36:40.996648abusebot-2.cloudsearch.cf sshd[9887]: Failed password for invalid user doug from 106.75.141.160 port 36482 ssh2
2020-05-29T07:45:57.356990abusebot-2.cloudsearch.cf sshd[9982]: Invalid user markus from 106.75.141.160 port 53088
2020-05-29T07:45:57.361398abusebot-2.cloudsearch.cf sshd[9982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
2020-05-29T07:45:57.356990abusebot-2.cloudsearch.cf sshd[9982]: Invalid user markus from 106.75.141.160 port 53088
2020-05-29T07:45:59.409552abusebot-2.cloudsearch.cf sshd[9982]: Failed p
...
2020-05-29 16:32:59
attack
$f2bV_matches
2020-05-28 05:17:51
attackbots
Invalid user xzv from 106.75.141.160 port 35576
2020-05-24 15:32:36
attackbots
May 21 23:12:55 vpn01 sshd[29505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160
May 21 23:12:58 vpn01 sshd[29505]: Failed password for invalid user pfx from 106.75.141.160 port 49076 ssh2
...
2020-05-22 05:50:28
attack
Ssh brute force
2020-05-16 08:10:55
attack
SSH invalid-user multiple login attempts
2020-05-04 17:59:27
attack
Apr 26 14:34:17 mout sshd[23245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160  user=root
Apr 26 14:34:19 mout sshd[23245]: Failed password for root from 106.75.141.160 port 48986 ssh2
2020-04-26 23:18:10
attack
SSH brutforce
2020-04-21 23:48:51
attackbots
Invalid user su from 106.75.141.160 port 38006
2020-04-20 20:38:53
attackbotsspam
ssh brute force
2020-04-05 18:58:28
Comments on same subnet:
IP Type Details Datetime
106.75.141.219 attackspam
Invalid user shop from 106.75.141.219 port 48330
2020-10-14 01:34:36
106.75.141.219 attackbots
2020-10-13T00:08:57.751318morrigan.ad5gb.com sshd[907538]: Invalid user cacti from 106.75.141.219 port 46868
2020-10-13 16:45:00
106.75.141.223 attackbotsspam
 UDP 106.75.141.223:58914 -> port 30311, len 72
2020-09-10 21:56:08
106.75.141.223 attackspambots
 UDP 106.75.141.223:58914 -> port 30311, len 72
2020-09-10 13:36:55
106.75.141.223 attack
 UDP 106.75.141.223:58914 -> port 30311, len 72
2020-09-10 04:19:39
106.75.141.223 attackbots
" "
2020-09-06 01:06:12
106.75.141.223 attackbots
" "
2020-09-05 16:37:01
106.75.141.202 attackbots
SSH auth scanning - multiple failed logins
2020-08-28 17:58:24
106.75.141.48 attackspambots
2020-08-26 13:40:37 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:34000 I=[10.100.18.25]:25
2020-08-26 14:11:16 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:51844 I=[10.100.18.25]:25
2020-08-26 14:52:10 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:47470 I=[10.100.18.25]:25

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.75.141.48
2020-08-27 16:20:46
106.75.141.202 attackspam
2020-08-26T15:40:42.977935lavrinenko.info sshd[29907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202
2020-08-26T15:40:42.972539lavrinenko.info sshd[29907]: Invalid user andy from 106.75.141.202 port 60824
2020-08-26T15:40:44.688585lavrinenko.info sshd[29907]: Failed password for invalid user andy from 106.75.141.202 port 60824 ssh2
2020-08-26T15:43:37.374328lavrinenko.info sshd[29959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202  user=root
2020-08-26T15:43:39.109975lavrinenko.info sshd[29959]: Failed password for root from 106.75.141.202 port 48750 ssh2
...
2020-08-26 21:00:46
106.75.141.202 attackspam
2020-08-21T12:35:14.328825cyberdyne sshd[2811005]: Failed password for invalid user user from 106.75.141.202 port 45329 ssh2
2020-08-21T12:39:06.899877cyberdyne sshd[2811101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202  user=root
2020-08-21T12:39:08.588146cyberdyne sshd[2811101]: Failed password for root from 106.75.141.202 port 41150 ssh2
2020-08-21T12:42:54.308103cyberdyne sshd[2811873]: Invalid user admin from 106.75.141.202 port 36974
...
2020-08-21 20:01:43
106.75.141.202 attackspambots
Aug 20 13:00:23 vps-51d81928 sshd[770687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202 
Aug 20 13:00:23 vps-51d81928 sshd[770687]: Invalid user vagner from 106.75.141.202 port 50800
Aug 20 13:00:24 vps-51d81928 sshd[770687]: Failed password for invalid user vagner from 106.75.141.202 port 50800 ssh2
Aug 20 13:02:05 vps-51d81928 sshd[770731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.202  user=root
Aug 20 13:02:07 vps-51d81928 sshd[770731]: Failed password for root from 106.75.141.202 port 59337 ssh2
...
2020-08-20 22:27:38
106.75.141.202 attackspambots
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-07 02:34:42
106.75.141.202 attackspambots
Jul  3 03:56:35 backup sshd[53631]: Failed password for root from 106.75.141.202 port 40525 ssh2
...
2020-07-03 23:55:41
106.75.141.202 attack
Invalid user pos from 106.75.141.202 port 47208
2020-06-25 13:56:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.141.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44749
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.141.160.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 20 04:50:44 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 160.141.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 160.141.75.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.232.67.6 attack
Nov  7 21:08:58 dedicated sshd[21826]: Invalid user admin from 185.232.67.6 port 55151
2019-11-08 04:52:54
89.248.162.168 attack
11/07/2019-15:30:58.243246 89.248.162.168 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 98
2019-11-08 04:31:08
5.196.12.2 attackbots
Automatic report - XMLRPC Attack
2019-11-08 04:45:02
103.119.30.216 attackspambots
Nov  6 02:16:33 nandi sshd[26290]: Invalid user flanamacca from 103.119.30.216
Nov  6 02:16:33 nandi sshd[26290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.216 
Nov  6 02:16:35 nandi sshd[26290]: Failed password for invalid user flanamacca from 103.119.30.216 port 45253 ssh2
Nov  6 02:16:35 nandi sshd[26290]: Received disconnect from 103.119.30.216: 11: Bye Bye [preauth]
Nov  6 02:32:01 nandi sshd[1034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.216  user=r.r
Nov  6 02:32:03 nandi sshd[1034]: Failed password for r.r from 103.119.30.216 port 58812 ssh2
Nov  6 02:32:04 nandi sshd[1034]: Received disconnect from 103.119.30.216: 11: Bye Bye [preauth]
Nov  6 02:38:35 nandi sshd[3546]: Invalid user Santeri from 103.119.30.216
Nov  6 02:38:35 nandi sshd[3546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.216 
No........
-------------------------------
2019-11-08 04:37:38
191.14.180.111 attackbots
Automatic report - Port Scan Attack
2019-11-08 04:55:06
124.41.211.27 attackspam
Nov  7 20:20:27 tux-35-217 sshd\[7350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27  user=root
Nov  7 20:20:29 tux-35-217 sshd\[7350\]: Failed password for root from 124.41.211.27 port 50758 ssh2
Nov  7 20:25:41 tux-35-217 sshd\[7357\]: Invalid user jeff from 124.41.211.27 port 54514
Nov  7 20:25:41 tux-35-217 sshd\[7357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27
...
2019-11-08 04:34:45
77.220.212.223 attack
[portscan] Port scan
2019-11-08 04:40:59
35.240.182.126 attackspambots
xmlrpc attack
2019-11-08 04:48:14
49.232.14.216 attack
Nov  7 15:33:40 ny01 sshd[28474]: Failed password for root from 49.232.14.216 port 37570 ssh2
Nov  7 15:39:02 ny01 sshd[28984]: Failed password for root from 49.232.14.216 port 37354 ssh2
2019-11-08 05:00:23
91.250.84.231 attackbots
Nov  7 21:37:12 jane sshd[18623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.250.84.231 
Nov  7 21:37:14 jane sshd[18623]: Failed password for invalid user admin from 91.250.84.231 port 41224 ssh2
...
2019-11-08 05:07:51
172.69.71.48 attackbots
Fake GoogleBot
2019-11-08 04:54:07
104.60.194.45 attackspambots
HTTP 403 XSS Attempt
2019-11-08 04:38:55
51.254.38.216 attackspambots
no
2019-11-08 04:51:46
206.189.226.43 attack
Forged login request.
2019-11-08 04:59:00
37.120.217.108 attackbotsspam
xmlrpc attack
2019-11-08 04:49:00

Recently Reported IPs

203.166.147.0 171.162.217.39 84.70.118.163 87.47.159.161
0.81.114.153 100.199.190.116 60.54.208.88 182.21.39.163
38.127.128.232 36.72.216.220 208.133.244.117 43.226.40.124
177.66.225.150 200.23.225.170 78.173.99.119 142.234.39.4
184.185.2.66 167.71.203.150 200.98.165.48 54.37.74.232