City: unknown
Region: unknown
Country: China
Internet Service Provider: Shanghai UCloud Information Technology Company Limited
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Aug 11 23:37:16 hosting sshd[22155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 user=root Aug 11 23:37:17 hosting sshd[22155]: Failed password for root from 106.75.53.49 port 49794 ssh2 ... |
2020-08-12 05:10:22 |
| attackspambots | firewall-block, port(s): 4923/tcp |
2020-08-06 20:24:26 |
| attack | Jul 15 11:44:29 django-0 sshd[18571]: Invalid user bike from 106.75.53.49 ... |
2020-07-15 19:47:20 |
| attackbotsspam | Jun 16 02:33:12 dhoomketu sshd[776155]: Invalid user nox from 106.75.53.49 port 44624 Jun 16 02:33:12 dhoomketu sshd[776155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 Jun 16 02:33:12 dhoomketu sshd[776155]: Invalid user nox from 106.75.53.49 port 44624 Jun 16 02:33:14 dhoomketu sshd[776155]: Failed password for invalid user nox from 106.75.53.49 port 44624 ssh2 Jun 16 02:35:28 dhoomketu sshd[776190]: Invalid user webuser from 106.75.53.49 port 50600 ... |
2020-06-16 05:24:29 |
| attackbotsspam | Jun 10 05:48:46 pi sshd[26616]: Failed password for root from 106.75.53.49 port 50260 ssh2 |
2020-06-11 00:10:24 |
| attackbots | Jun 10 01:00:42 ny01 sshd[7412]: Failed password for root from 106.75.53.49 port 34320 ssh2 Jun 10 01:03:07 ny01 sshd[7728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 Jun 10 01:03:09 ny01 sshd[7728]: Failed password for invalid user og from 106.75.53.49 port 35674 ssh2 |
2020-06-10 13:06:36 |
| attackspam | Jun 7 22:32:48 mail sshd[21943]: Failed password for root from 106.75.53.49 port 33686 ssh2 Jun 7 22:37:05 mail sshd[22485]: Failed password for root from 106.75.53.49 port 54102 ssh2 Jun 7 22:39:01 mail sshd[22723]: Failed password for root from 106.75.53.49 port 56940 ssh2 ... |
2020-06-08 04:47:42 |
| attackbotsspam | 2020-06-04T10:21:29.444983v22018076590370373 sshd[21116]: Failed password for root from 106.75.53.49 port 52676 ssh2 2020-06-04T10:24:50.501017v22018076590370373 sshd[24176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 user=root 2020-06-04T10:24:52.791413v22018076590370373 sshd[24176]: Failed password for root from 106.75.53.49 port 44392 ssh2 2020-06-04T10:28:05.243998v22018076590370373 sshd[30211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 user=root 2020-06-04T10:28:06.966948v22018076590370373 sshd[30211]: Failed password for root from 106.75.53.49 port 36110 ssh2 ... |
2020-06-04 19:48:36 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.75.53.228 | attackbots | Invalid user tom from 106.75.53.228 port 50084 |
2020-06-17 01:09:28 |
| 106.75.53.228 | attack | Jun 16 00:47:26 * sshd[15599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.228 Jun 16 00:47:29 * sshd[15599]: Failed password for invalid user test from 106.75.53.228 port 55392 ssh2 |
2020-06-16 07:36:39 |
| 106.75.53.228 | attackbots | Invalid user es from 106.75.53.228 port 48998 |
2020-06-14 08:18:28 |
| 106.75.53.228 | attackspambots | Jun 13 22:16:15 vps sshd[700094]: Invalid user ine from 106.75.53.228 port 50130 Jun 13 22:16:15 vps sshd[700094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.228 Jun 13 22:16:17 vps sshd[700094]: Failed password for invalid user ine from 106.75.53.228 port 50130 ssh2 Jun 13 22:17:46 vps sshd[705559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.228 user=root Jun 13 22:17:49 vps sshd[705559]: Failed password for root from 106.75.53.228 port 38974 ssh2 ... |
2020-06-14 04:25:25 |
| 106.75.53.228 | attackspambots | Jun 6 07:17:27 minden010 sshd[10707]: Failed password for root from 106.75.53.228 port 50082 ssh2 Jun 6 07:19:53 minden010 sshd[11582]: Failed password for root from 106.75.53.228 port 47072 ssh2 ... |
2020-06-06 16:44:09 |
| 106.75.53.228 | attackbotsspam | Invalid user mio from 106.75.53.228 port 57566 |
2020-05-24 12:47:03 |
| 106.75.53.228 | attackbots | May 15 05:56:59 ns381471 sshd[23758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.228 May 15 05:57:01 ns381471 sshd[23758]: Failed password for invalid user user from 106.75.53.228 port 44482 ssh2 |
2020-05-15 13:00:47 |
| 106.75.53.140 | attack | Apr 18 19:29:40 auw2 sshd\[17399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.140 user=root Apr 18 19:29:42 auw2 sshd\[17399\]: Failed password for root from 106.75.53.140 port 51304 ssh2 Apr 18 19:36:04 auw2 sshd\[17856\]: Invalid user cl from 106.75.53.140 Apr 18 19:36:04 auw2 sshd\[17856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.140 Apr 18 19:36:06 auw2 sshd\[17856\]: Failed password for invalid user cl from 106.75.53.140 port 60220 ssh2 |
2020-04-19 14:07:20 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.53.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56556
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.53.49. IN A
;; AUTHORITY SECTION:
. 515 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020060400 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 04 19:48:31 CST 2020
;; MSG SIZE rcvd: 116Host 49.53.75.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.53.75.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.7.3.254 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 5416fed82871d382 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.108 Safari/537.36 UCBrowser/12.6.0.1040 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:06:59 |
| 111.224.7.183 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 541445061bd3e50a | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:23:42 |
| 124.90.52.86 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 541380e48a61ed3b | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 01:54:23 |
| 190.117.83.131 | attackspam | SSH Brute Force, server-1 sshd[32583]: Failed password for root from 190.117.83.131 port 37592 ssh2 |
2019-12-08 01:51:34 |
| 49.7.4.36 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 541259482eb4eb49 | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 6.0.1; zh-CN; OPPO R9sk Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.7.6.1056 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:06:32 |
| 2a01:4f8:141:14d7::2 | attackbots | The IP has triggered Cloudflare WAF. CF-Ray: 5416f0d3c9afcbb4 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: DE | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/) | CF_DC: VIE. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:09:48 |
| 124.156.218.80 | attackbots | $f2bV_matches |
2019-12-08 01:53:59 |
| 182.88.78.115 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5412a4ff8a0d6d2e | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 01:52:09 |
| 1.83.28.24 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5417370cba64eb7d | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:11:03 |
| 110.80.153.71 | attackbots | The IP has triggered Cloudflare WAF. CF-Ray: 5413a945af11e7f1 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:26:16 |
| 113.58.227.188 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 541142a2bee61eb1 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:20:37 |
| 223.166.74.122 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 541063626d4a6dac | WAF_Rule_ID: 1025440 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 01:48:05 |
| 113.24.84.47 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5414a8b6ee58e4c4 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:20:56 |
| 220.200.157.47 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 541278f43ad3ebb1 | WAF_Rule_ID: 1112825 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 01:50:28 |
| 27.224.136.252 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 54148b83ee20eb8d | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.081397758 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:10:41 |