106.75.141.79 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.75.141.219	attackspam	Invalid user shop from 106.75.141.219 port 48330	2020-10-14 01:34:36
106.75.141.219	attackbots	2020-10-13T00:08:57.751318morrigan.ad5gb.com sshd[907538]: Invalid user cacti from 106.75.141.219 port 46868	2020-10-13 16:45:00
106.75.141.160	attack	Brute-force attempt banned	2020-09-14 21:05:31
106.75.141.160	attackbots	$f2bV_matches	2020-09-14 12:58:35
106.75.141.160	attack	SSH Brute-Force Attack	2020-09-14 04:59:22
106.75.141.223	attackbotsspam	UDP 106.75.141.223:58914 -> port 30311, len 72	2020-09-10 21:56:08
106.75.141.223	attackspambots	UDP 106.75.141.223:58914 -> port 30311, len 72	2020-09-10 13:36:55
106.75.141.223	attack	UDP 106.75.141.223:58914 -> port 30311, len 72	2020-09-10 04:19:39
106.75.141.160	attackbots	SSH login attempts.	2020-09-08 00:34:29
106.75.141.160	attack	Sep 7 09:21:15 ip106 sshd[27329]: Failed password for root from 106.75.141.160 port 44922 ssh2 Sep 7 09:23:58 ip106 sshd[27423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 ...	2020-09-07 16:03:10
106.75.141.160	attack	Sep 6 18:27:07 ns382633 sshd\[3463\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 user=root Sep 6 18:27:09 ns382633 sshd\[3463\]: Failed password for root from 106.75.141.160 port 50476 ssh2 Sep 6 18:50:24 ns382633 sshd\[7607\]: Invalid user ggggg from 106.75.141.160 port 40336 Sep 6 18:50:24 ns382633 sshd\[7607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 Sep 6 18:50:26 ns382633 sshd\[7607\]: Failed password for invalid user ggggg from 106.75.141.160 port 40336 ssh2	2020-09-07 08:25:20
106.75.141.223	attackbots	" "	2020-09-06 01:06:12
106.75.141.223	attackbots	" "	2020-09-05 16:37:01
106.75.141.202	attackbots	SSH auth scanning - multiple failed logins	2020-08-28 17:58:24
106.75.141.48	attackspambots	2020-08-26 13:40:37 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:34000 I=[10.100.18.25]:25 2020-08-26 14:11:16 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:51844 I=[10.100.18.25]:25 2020-08-26 14:52:10 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:47470 I=[10.100.18.25]:25 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.75.141.48	2020-08-27 16:20:46

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '106.75.0.0 - 106.75.255.255'

% Abuse contact for '106.75.0.0 - 106.75.255.255' is 'jacky.jia@ucloud.cn'

inetnum:        106.75.0.0 - 106.75.255.255
netname:        UCLOUD-NET
descr:          Shanghai UCloud Information Technology Company Limited
country:        CN
admin-c:        JJ2197-AP
tech-c:         JJ2197-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-UCLOUD-NET-CN
mnt-lower:      MAINT-CNNIC-AP
mnt-routes:     MAINT-CNNIC-AP
last-modified:  2023-11-28T00:56:50Z
source:         APNIC

irt:            IRT-UCLOUD-NET-CN
address:        2nd Floor 3rd Building No.200 EAST Guoding Road,Yangpu District,Shanghai
e-mail:         jacky.jia@ucloud.cn
abuse-mailbox:  jacky.jia@ucloud.cn
admin-c:        JJ2197-AP
tech-c:         JJ2197-AP
auth:           # Filtered
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-18T00:35:05Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Jinhui Jia
e-mail:         hegui@ucloud.cn
address:        510,SOHO B,Zhongguancun,Haidian, Beijing
phone:          +86-13811069300
country:        CN
mnt-by:         MAINT-CNNIC-AP
nic-hdl:        JJ2197-AP
last-modified:  2022-03-23T06:19:21Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.141.79
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.75.141.79.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026071600 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 16 19:00:30 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 79.141.75.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 79.141.75.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.22.45.252	attackspambots	Sep 23 20:56:46 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.252 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52926 PROTO=TCP SPT=57189 DPT=8412 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-24 03:04:42
188.213.172.204	attackspambots	Sep 23 20:38:03 eventyay sshd[27653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.172.204 Sep 23 20:38:06 eventyay sshd[27653]: Failed password for invalid user pi from 188.213.172.204 port 58588 ssh2 Sep 23 20:42:30 eventyay sshd[27793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.172.204 ...	2019-09-24 03:02:21
101.26.139.52	attackspam	Unauthorised access (Sep 23) SRC=101.26.139.52 LEN=40 TTL=49 ID=29910 TCP DPT=8080 WINDOW=23229 SYN Unauthorised access (Sep 23) SRC=101.26.139.52 LEN=40 TTL=49 ID=55102 TCP DPT=8080 WINDOW=35453 SYN Unauthorised access (Sep 23) SRC=101.26.139.52 LEN=40 TTL=49 ID=33917 TCP DPT=8080 WINDOW=44870 SYN Unauthorised access (Sep 22) SRC=101.26.139.52 LEN=40 TTL=49 ID=43953 TCP DPT=8080 WINDOW=35453 SYN	2019-09-24 03:19:21
218.92.0.187	attackbotsspam	Sep 23 18:10:43 tuxlinux sshd[62938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.187 user=root Sep 23 18:10:45 tuxlinux sshd[62938]: Failed password for root from 218.92.0.187 port 54783 ssh2 Sep 23 18:10:43 tuxlinux sshd[62938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.187 user=root Sep 23 18:10:45 tuxlinux sshd[62938]: Failed password for root from 218.92.0.187 port 54783 ssh2 ...	2019-09-24 03:13:17
222.252.30.117	attackspambots	Sep 23 09:04:30 hanapaa sshd\[8712\]: Invalid user test from 222.252.30.117 Sep 23 09:04:30 hanapaa sshd\[8712\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.30.117 Sep 23 09:04:32 hanapaa sshd\[8712\]: Failed password for invalid user test from 222.252.30.117 port 59150 ssh2 Sep 23 09:09:10 hanapaa sshd\[9225\]: Invalid user apache from 222.252.30.117 Sep 23 09:09:10 hanapaa sshd\[9225\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.30.117	2019-09-24 03:18:18
201.149.22.37	attack	Reported by AbuseIPDB proxy server.	2019-09-24 02:53:29
74.63.255.138	attackspambots	\[2019-09-23 14:57:01\] NOTICE\[2270\] chan_sip.c: Registration from '"104" \' failed for '74.63.255.138:5896' - Wrong password \[2019-09-23 14:57:01\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T14:57:01.083-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7fcd8c4366c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.63.255.138/5896",Challenge="21b6cd77",ReceivedChallenge="21b6cd77",ReceivedHash="f597b2830bc8e17654d961a932edeaaa" \[2019-09-23 14:57:01\] NOTICE\[2270\] chan_sip.c: Registration from '"104" \' failed for '74.63.255.138:5896' - Wrong password \[2019-09-23 14:57:01\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T14:57:01.246-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7fcd8c856e68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.6	2019-09-24 03:18:55
198.211.107.151	attack	Sep 23 21:09:06 plex sshd[13303]: Invalid user git from 198.211.107.151 port 56478	2019-09-24 03:18:34
218.92.0.139	attackbotsspam	Sep 23 18:10:45 icinga sshd[39829]: Failed password for root from 218.92.0.139 port 18618 ssh2 Sep 23 18:10:48 icinga sshd[39829]: Failed password for root from 218.92.0.139 port 18618 ssh2 Sep 23 18:10:51 icinga sshd[39829]: Failed password for root from 218.92.0.139 port 18618 ssh2 Sep 23 18:10:55 icinga sshd[39829]: Failed password for root from 218.92.0.139 port 18618 ssh2 ...	2019-09-24 03:04:27
217.63.229.192	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/217.63.229.192/ NL - 1H : (296) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : NL NAME ASN : ASN33915 IP : 217.63.229.192 CIDR : 217.63.224.0/19 PREFIX COUNT : 142 UNIQUE IP COUNT : 3653888 WYKRYTE ATAKI Z ASN33915 : 1H - 1 3H - 1 6H - 1 12H - 5 24H - 7 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-24 03:31:09
43.227.68.27	attack	Sep 23 08:27:29 friendsofhawaii sshd\[3429\]: Invalid user 123456 from 43.227.68.27 Sep 23 08:27:29 friendsofhawaii sshd\[3429\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.68.27 Sep 23 08:27:31 friendsofhawaii sshd\[3429\]: Failed password for invalid user 123456 from 43.227.68.27 port 34230 ssh2 Sep 23 08:30:47 friendsofhawaii sshd\[3703\]: Invalid user 123456 from 43.227.68.27 Sep 23 08:30:47 friendsofhawaii sshd\[3703\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.227.68.27	2019-09-24 02:56:49
42.180.37.50	attackbots	Unauthorised access (Sep 23) SRC=42.180.37.50 LEN=40 TTL=49 ID=27489 TCP DPT=8080 WINDOW=11055 SYN Unauthorised access (Sep 23) SRC=42.180.37.50 LEN=40 TTL=49 ID=25250 TCP DPT=8080 WINDOW=11055 SYN Unauthorised access (Sep 22) SRC=42.180.37.50 LEN=40 TTL=49 ID=21359 TCP DPT=8080 WINDOW=11055 SYN Unauthorised access (Sep 22) SRC=42.180.37.50 LEN=40 TTL=49 ID=18575 TCP DPT=8080 WINDOW=11055 SYN	2019-09-24 02:55:46
194.226.171.214	attackbots	Automatic report - Banned IP Access	2019-09-24 03:20:44
218.78.44.63	attackspambots	Sep 23 17:08:18 microserver sshd[60069]: Invalid user alexander from 218.78.44.63 port 53725 Sep 23 17:08:18 microserver sshd[60069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.63 Sep 23 17:08:20 microserver sshd[60069]: Failed password for invalid user alexander from 218.78.44.63 port 53725 ssh2 Sep 23 17:13:09 microserver sshd[60746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.63 user=root Sep 23 17:13:11 microserver sshd[60746]: Failed password for root from 218.78.44.63 port 43189 ssh2 Sep 23 17:27:58 microserver sshd[62856]: Invalid user Elsa from 218.78.44.63 port 39586 Sep 23 17:27:58 microserver sshd[62856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.63 Sep 23 17:28:00 microserver sshd[62856]: Failed password for invalid user Elsa from 218.78.44.63 port 39586 ssh2 Sep 23 17:33:05 microserver sshd[63567]: Invalid user cmi from 218.78.44.63	2019-09-24 03:12:29
129.226.56.22	attackbotsspam	Sep 23 08:36:29 hpm sshd\[27887\]: Invalid user gmodserver from 129.226.56.22 Sep 23 08:36:29 hpm sshd\[27887\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22 Sep 23 08:36:31 hpm sshd\[27887\]: Failed password for invalid user gmodserver from 129.226.56.22 port 44852 ssh2 Sep 23 08:41:26 hpm sshd\[28469\]: Invalid user test from 129.226.56.22 Sep 23 08:41:26 hpm sshd\[28469\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22	2019-09-24 02:54:32

Recently Reported IPs

154.12.61.172	120.48.20.147	103.137.215.19	119.255.255.234
142.111.36.144	34.22.125.28	20.169.107.47	113.88.78.56
172.236.9.155	162.19.214.176	84.54.72.49	121.12.124.237
42.157.193.76	112.65.199.198	82.102.18.220	39.98.167.111
39.98.167.118	39.98.165.68	192.220.30.214	103.96.147.148