Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
106.75.72.100 attack
May  7 06:10:57 124388 sshd[13048]: Invalid user testftp from 106.75.72.100 port 39726
May  7 06:10:57 124388 sshd[13048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.72.100
May  7 06:10:57 124388 sshd[13048]: Invalid user testftp from 106.75.72.100 port 39726
May  7 06:10:58 124388 sshd[13048]: Failed password for invalid user testftp from 106.75.72.100 port 39726 ssh2
May  7 06:15:46 124388 sshd[13072]: Invalid user theis from 106.75.72.100 port 56960
2020-05-07 15:26:47
106.75.72.100 attackspam
k+ssh-bruteforce
2020-04-01 03:46:58
106.75.72.100 attackbotsspam
$f2bV_matches
2020-03-30 06:00:05
106.75.72.100 attackbots
Invalid user alex from 106.75.72.100 port 44058
2020-03-28 16:57:29
106.75.72.100 attack
Invalid user alex from 106.75.72.100 port 44058
2020-03-27 22:25:03
106.75.72.100 attack
Mar 25 22:39:44 xeon sshd[57365]: Failed password for invalid user masmokhtar from 106.75.72.100 port 50814 ssh2
2020-03-26 06:43:35
106.75.72.100 attackbots
Invalid user trung from 106.75.72.100 port 47568
2020-03-22 01:12:31
106.75.72.100 attackbots
Mar 19 22:48:45 vps58358 sshd\[20048\]: Failed password for root from 106.75.72.100 port 33612 ssh2Mar 19 22:50:58 vps58358 sshd\[20061\]: Invalid user gitlab-runner from 106.75.72.100Mar 19 22:51:00 vps58358 sshd\[20061\]: Failed password for invalid user gitlab-runner from 106.75.72.100 port 51106 ssh2Mar 19 22:52:36 vps58358 sshd\[20075\]: Invalid user administrador from 106.75.72.100Mar 19 22:52:38 vps58358 sshd\[20075\]: Failed password for invalid user administrador from 106.75.72.100 port 38310 ssh2Mar 19 22:54:07 vps58358 sshd\[20090\]: Failed password for root from 106.75.72.100 port 53744 ssh2
...
2020-03-20 06:26:31
106.75.72.100 attackspambots
Unauthorized connection attempt detected from IP address 106.75.72.100 to port 2220 [J]
2020-01-24 22:55:16
106.75.72.100 attackspam
Jan  1 18:08:32 server sshd[26993]: Failed password for invalid user bulent from 106.75.72.100 port 54912 ssh2
Jan  1 18:20:28 server sshd[27440]: Failed password for invalid user seamark from 106.75.72.100 port 35056 ssh2
Jan  1 18:29:48 server sshd[27742]: Failed password for invalid user admin from 106.75.72.100 port 33678 ssh2
2020-01-02 03:15:23
106.75.72.100 attack
Dec 31 08:09:28 localhost sshd\[32326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.72.100  user=news
Dec 31 08:09:30 localhost sshd\[32326\]: Failed password for news from 106.75.72.100 port 53770 ssh2
Dec 31 08:12:53 localhost sshd\[543\]: Invalid user info from 106.75.72.100 port 51804
2019-12-31 16:34:20
106.75.72.100 attackspambots
Dec 27 05:12:42 raspberrypi sshd\[6938\]: Invalid user robrish from 106.75.72.100Dec 27 05:12:44 raspberrypi sshd\[6938\]: Failed password for invalid user robrish from 106.75.72.100 port 56998 ssh2Dec 27 05:23:07 raspberrypi sshd\[7856\]: Failed password for root from 106.75.72.100 port 53738 ssh2
...
2019-12-27 13:42:35
106.75.72.164 attack
The IP has triggered Cloudflare WAF. CF-Ray: 543243994af8eb79 | WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: skk.moe | User-Agent: Python/3.7 aiohttp/3.6.2 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 01:08:32
106.75.72.100 attack
SSH Brute Force
2019-12-11 04:36:26
106.75.72.100 attack
2019-12-03T07:40:46.808189abusebot-2.cloudsearch.cf sshd\[2533\]: Invalid user mmillan from 106.75.72.100 port 32840
2019-12-03 19:46:46
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.72.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33215
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.75.72.218.			IN	A

;; AUTHORITY SECTION:
.			127	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022202 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 13:02:59 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 218.72.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 218.72.75.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.54.200.209 attackbots
Jun  9 09:36:35 minden010 sshd[5642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.200.209
Jun  9 09:36:37 minden010 sshd[5642]: Failed password for invalid user ubnt from 106.54.200.209 port 57142 ssh2
Jun  9 09:40:25 minden010 sshd[7142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.200.209
...
2020-06-09 15:53:00
14.29.214.188 attackspam
Jun  9 09:18:04 cp sshd[17482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188
Jun  9 09:18:04 cp sshd[17482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188
2020-06-09 15:24:18
193.169.255.18 attackspambots
Jun  9 09:33:26 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=
Jun  9 09:34:50 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=
Jun  9 09:37:44 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=<9FJ8zaGnLunBqf8S>
Jun  9 09:38:02 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=<2udKzqGnzkHBqf8S>
Jun  9 09:39:51 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, 
...
2020-06-09 15:44:49
218.36.86.40 attack
Jun  9 05:45:30 srv-ubuntu-dev3 sshd[95339]: Invalid user marthe from 218.36.86.40
Jun  9 05:45:30 srv-ubuntu-dev3 sshd[95339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.36.86.40
Jun  9 05:45:30 srv-ubuntu-dev3 sshd[95339]: Invalid user marthe from 218.36.86.40
Jun  9 05:45:32 srv-ubuntu-dev3 sshd[95339]: Failed password for invalid user marthe from 218.36.86.40 port 42824 ssh2
Jun  9 05:49:18 srv-ubuntu-dev3 sshd[95913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.36.86.40  user=root
Jun  9 05:49:20 srv-ubuntu-dev3 sshd[95913]: Failed password for root from 218.36.86.40 port 42236 ssh2
Jun  9 05:53:17 srv-ubuntu-dev3 sshd[96544]: Invalid user lixl from 218.36.86.40
Jun  9 05:53:17 srv-ubuntu-dev3 sshd[96544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.36.86.40
Jun  9 05:53:17 srv-ubuntu-dev3 sshd[96544]: Invalid user lixl from 218.36.86.40

...
2020-06-09 15:30:08
206.189.156.198 attack
2020-06-09T07:10:33.506986afi-git.jinr.ru sshd[12611]: Failed password for root from 206.189.156.198 port 44832 ssh2
2020-06-09T07:14:08.085717afi-git.jinr.ru sshd[13379]: Invalid user cpanelcabcache from 206.189.156.198 port 47504
2020-06-09T07:14:08.089648afi-git.jinr.ru sshd[13379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.156.198
2020-06-09T07:14:08.085717afi-git.jinr.ru sshd[13379]: Invalid user cpanelcabcache from 206.189.156.198 port 47504
2020-06-09T07:14:09.781787afi-git.jinr.ru sshd[13379]: Failed password for invalid user cpanelcabcache from 206.189.156.198 port 47504 ssh2
...
2020-06-09 15:49:46
192.99.15.15 attack
192.99.15.15 - - [09/Jun/2020:08:09:24 +0200] "POST /wp-login.php HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.15.15 - - [09/Jun/2020:08:11:03 +0200] "POST /wp-login.php HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.15.15 - - [09/Jun/2020:08:12:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.15.15 - - [09/Jun/2020:08:14:09 +0200] "POST /wp-login.php HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.99.15.15 - - [09/Jun/2020:08:15:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537
...
2020-06-09 15:23:13
51.91.125.179 attackbotsspam
Jun  9 09:52:36 pve1 sshd[15733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.125.179 
Jun  9 09:52:38 pve1 sshd[15733]: Failed password for invalid user ruperto from 51.91.125.179 port 38072 ssh2
...
2020-06-09 15:54:30
185.39.11.47 attackspam
 TCP (SYN) 185.39.11.47:52416 -> port 35041, len 44
2020-06-09 15:50:13
37.49.230.177 attackbots
Port Scan detected!
...
2020-06-09 15:26:25
180.123.25.197 attack
spam (f2b h2)
2020-06-09 15:23:35
200.68.12.164 attackspam
Unauthorized connection attempt detected from IP address 200.68.12.164 to port 9530
2020-06-09 15:29:53
161.35.226.47 attackspam
Jun  9 09:22:31 debian-2gb-nbg1-2 kernel: \[13946087.631050\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=161.35.226.47 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=52674 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0
2020-06-09 15:41:16
88.26.182.66 attackspambots
Invalid user administrator from 88.26.182.66 port 48274
2020-06-09 16:00:57
58.17.243.151 attackbots
Unauthorized connection attempt detected from IP address 58.17.243.151 to port 22
2020-06-09 15:21:54
2.184.4.3 attack
Jun  9 06:23:11 [host] sshd[7402]: pam_unix(sshd:a
Jun  9 06:23:13 [host] sshd[7402]: Failed password
Jun  9 06:26:33 [host] sshd[7521]: Invalid user ka
2020-06-09 15:52:46

Recently Reported IPs

106.75.189.127 106.75.60.234 106.75.163.240 106.8.89.92
106.75.73.53 107.148.13.227 13.81.111.75 107.148.133.90
107.148.151.75 107.148.151.5 107.148.211.195 107.148.208.5
107.148.151.51 104.84.92.10 107.154.248.183 107.154.239.96
107.154.81.21 107.154.249.127 107.154.248.127 107.154.80.21