Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shanghai Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
failed root login
2020-03-16 22:06:39
attackbots
SSH Brute Force
2019-11-01 18:43:07
attackbots
Jun 28 15:42:22 nextcloud sshd\[24045\]: Invalid user jesus from 124.74.154.66
Jun 28 15:42:22 nextcloud sshd\[24045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.74.154.66
Jun 28 15:42:23 nextcloud sshd\[24045\]: Failed password for invalid user jesus from 124.74.154.66 port 34562 ssh2
...
2019-06-29 03:18:56
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.74.154.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16965
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.74.154.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062801 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 29 03:18:51 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 66.154.74.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 66.154.74.124.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
221.158.249.147 attack
Unauthorized connection attempt detected from IP address 221.158.249.147 to port 23
2020-06-05 00:11:40
41.193.36.46 attack
[41.193.36.46]: SASL PLAIN authentication failed:
2020-06-05 00:30:15
218.92.0.192 attackbots
Jun  4 17:12:50 sip sshd[539499]: Failed password for root from 218.92.0.192 port 27580 ssh2
Jun  4 17:13:57 sip sshd[539509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192  user=root
Jun  4 17:14:00 sip sshd[539509]: Failed password for root from 218.92.0.192 port 56261 ssh2
...
2020-06-05 00:08:31
176.113.204.23 attack
Jun  4 14:03:39 mail.srvfarm.net postfix/smtps/smtpd[2504234]: warning: unknown[176.113.204.23]: SASL PLAIN authentication failed: 
Jun  4 14:03:39 mail.srvfarm.net postfix/smtps/smtpd[2504234]: lost connection after AUTH from unknown[176.113.204.23]
Jun  4 14:03:56 mail.srvfarm.net postfix/smtps/smtpd[2498764]: warning: unknown[176.113.204.23]: SASL PLAIN authentication failed: 
Jun  4 14:03:56 mail.srvfarm.net postfix/smtps/smtpd[2498764]: lost connection after AUTH from unknown[176.113.204.23]
Jun  4 14:05:01 mail.srvfarm.net postfix/smtps/smtpd[2515937]: warning: unknown[176.113.204.23]: SASL PLAIN authentication failed:
2020-06-05 00:10:23
139.199.45.89 attack
Jun  4 13:55:16 ourumov-web sshd\[677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.45.89  user=root
Jun  4 13:55:18 ourumov-web sshd\[677\]: Failed password for root from 139.199.45.89 port 45332 ssh2
Jun  4 14:05:43 ourumov-web sshd\[1389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.45.89  user=root
...
2020-06-05 00:05:33
129.204.235.54 attackspambots
Jun  4 15:27:26 PorscheCustomer sshd[20994]: Failed password for root from 129.204.235.54 port 32910 ssh2
Jun  4 15:32:11 PorscheCustomer sshd[21194]: Failed password for root from 129.204.235.54 port 37024 ssh2
...
2020-06-05 00:12:46
217.182.71.54 attack
Jun  4 18:11:51 home sshd[5762]: Failed password for root from 217.182.71.54 port 59605 ssh2
Jun  4 18:15:28 home sshd[6045]: Failed password for root from 217.182.71.54 port 33664 ssh2
...
2020-06-05 00:21:03
202.142.167.188 attack
20/6/4@08:05:10: FAIL: Alarm-Network address from=202.142.167.188
20/6/4@08:05:10: FAIL: Alarm-Network address from=202.142.167.188
...
2020-06-05 00:34:37
222.186.190.17 attackspambots
Jun  4 21:13:42 gw1 sshd[9804]: Failed password for root from 222.186.190.17 port 19346 ssh2
...
2020-06-05 00:25:25
185.132.53.85 attack
 TCP (SYN) 185.132.53.85:45782 -> port 22, len 44
2020-06-05 00:12:17
222.186.175.154 attackspam
Jun  4 18:17:34 home sshd[6219]: Failed password for root from 222.186.175.154 port 42358 ssh2
Jun  4 18:17:38 home sshd[6219]: Failed password for root from 222.186.175.154 port 42358 ssh2
Jun  4 18:17:49 home sshd[6219]: Failed password for root from 222.186.175.154 port 42358 ssh2
Jun  4 18:17:49 home sshd[6219]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 42358 ssh2 [preauth]
...
2020-06-05 00:27:35
222.186.180.130 attackspam
2020-06-04T17:56:41.3091141240 sshd\[16172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130  user=root
2020-06-04T17:56:43.1345551240 sshd\[16172\]: Failed password for root from 222.186.180.130 port 23590 ssh2
2020-06-04T17:56:45.0954251240 sshd\[16172\]: Failed password for root from 222.186.180.130 port 23590 ssh2
...
2020-06-04 23:59:02
118.24.105.14 attack
Jun  4 14:05:43 debian-2gb-nbg1-2 kernel: \[13531100.990943\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=118.24.105.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=21125 PROTO=TCP SPT=52284 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-05 00:05:54
61.189.43.58 attack
" "
2020-06-05 00:01:58
83.31.198.30 attackbotsspam
Attack
2020-06-05 00:31:36

Recently Reported IPs

197.127.193.204 29.220.188.58 136.242.126.157 247.97.155.136
113.172.135.189 20.191.120.2 55.48.11.127 41.155.200.37
191.42.223.110 192.168.20.2 68.177.24.68 1.175.163.81
171.112.160.0 168.194.157.76 26.208.60.253 191.19.157.3
94.78.212.214 25.77.3.35 36.229.250.175 230.9.133.47