必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Apr 28 14:11:37 melroy-server sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.14.204 
Apr 28 14:11:39 melroy-server sshd[2038]: Failed password for invalid user kuni from 106.75.14.204 port 33018 ssh2
...
2020-04-29 00:11:40
attack
$f2bV_matches
2020-04-21 02:02:44
相同子网IP讨论:
IP 类型 评论内容 时间
106.75.142.8 attack
Brute conection
2024-03-20 21:23:14
106.75.141.219 attackspam
Invalid user shop from 106.75.141.219 port 48330
2020-10-14 01:34:36
106.75.141.219 attackbots
2020-10-13T00:08:57.751318morrigan.ad5gb.com sshd[907538]: Invalid user cacti from 106.75.141.219 port 46868
2020-10-13 16:45:00
106.75.148.228 attackspam
2020-10-06T21:06:57.195815abusebot.cloudsearch.cf sshd[7796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228  user=root
2020-10-06T21:06:58.689237abusebot.cloudsearch.cf sshd[7796]: Failed password for root from 106.75.148.228 port 47032 ssh2
2020-10-06T21:10:15.154534abusebot.cloudsearch.cf sshd[7859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228  user=root
2020-10-06T21:10:16.828747abusebot.cloudsearch.cf sshd[7859]: Failed password for root from 106.75.148.228 port 48412 ssh2
2020-10-06T21:13:37.373932abusebot.cloudsearch.cf sshd[7919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228  user=root
2020-10-06T21:13:39.113348abusebot.cloudsearch.cf sshd[7919]: Failed password for root from 106.75.148.228 port 49136 ssh2
2020-10-06T21:16:50.977540abusebot.cloudsearch.cf sshd[7975]: pam_unix(sshd:auth): authentication failu
...
2020-10-07 07:30:00
106.75.148.111 attack
Oct  6 22:46:18 vps639187 sshd\[27516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  6 22:46:20 vps639187 sshd\[27516\]: Failed password for root from 106.75.148.111 port 51346 ssh2
Oct  6 22:49:35 vps639187 sshd\[27640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
...
2020-10-07 05:02:55
106.75.148.228 attack
2020-10-06T14:28:25.431967billing sshd[7382]: Failed password for root from 106.75.148.228 port 42422 ssh2
2020-10-06T14:30:43.695407billing sshd[12694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228  user=root
2020-10-06T14:30:45.911894billing sshd[12694]: Failed password for root from 106.75.148.228 port 42822 ssh2
...
2020-10-06 23:55:37
106.75.148.111 attackbotsspam
2020-10-06T14:48:19.774509afi-git.jinr.ru sshd[28461]: Failed password for root from 106.75.148.111 port 39786 ssh2
2020-10-06T14:50:31.423493afi-git.jinr.ru sshd[29149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mailgoesbulkio.live  user=root
2020-10-06T14:50:33.934326afi-git.jinr.ru sshd[29149]: Failed password for root from 106.75.148.111 port 39096 ssh2
2020-10-06T14:52:50.194257afi-git.jinr.ru sshd[30337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mailgoesbulkio.live  user=root
2020-10-06T14:52:52.787230afi-git.jinr.ru sshd[30337]: Failed password for root from 106.75.148.111 port 38402 ssh2
...
2020-10-06 21:10:07
106.75.148.228 attackspam
2020-10-06T14:28:25.431967billing sshd[7382]: Failed password for root from 106.75.148.228 port 42422 ssh2
2020-10-06T14:30:43.695407billing sshd[12694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.228  user=root
2020-10-06T14:30:45.911894billing sshd[12694]: Failed password for root from 106.75.148.228 port 42822 ssh2
...
2020-10-06 15:44:01
106.75.148.111 attackbots
Oct  6 01:20:43 buvik sshd[20982]: Failed password for root from 106.75.148.111 port 44904 ssh2
Oct  6 01:23:00 buvik sshd[21298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  6 01:23:02 buvik sshd[21298]: Failed password for root from 106.75.148.111 port 52878 ssh2
...
2020-10-06 12:51:11
106.75.148.111 attackbots
Oct  5 05:09:07 onepixel sshd[684707]: Failed password for root from 106.75.148.111 port 47396 ssh2
Oct  5 05:11:02 onepixel sshd[685165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 05:11:04 onepixel sshd[685165]: Failed password for root from 106.75.148.111 port 43614 ssh2
Oct  5 05:13:03 onepixel sshd[685487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 05:13:05 onepixel sshd[685487]: Failed password for root from 106.75.148.111 port 39826 ssh2
2020-10-06 04:27:48
106.75.148.111 attackspambots
Oct  5 05:09:07 onepixel sshd[684707]: Failed password for root from 106.75.148.111 port 47396 ssh2
Oct  5 05:11:02 onepixel sshd[685165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 05:11:04 onepixel sshd[685165]: Failed password for root from 106.75.148.111 port 43614 ssh2
Oct  5 05:13:03 onepixel sshd[685487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 05:13:05 onepixel sshd[685487]: Failed password for root from 106.75.148.111 port 39826 ssh2
2020-10-05 20:29:16
106.75.148.111 attackspam
Oct  5 04:12:10 onepixel sshd[675223]: Failed password for root from 106.75.148.111 port 47958 ssh2
Oct  5 04:13:56 onepixel sshd[675494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 04:13:58 onepixel sshd[675494]: Failed password for root from 106.75.148.111 port 44180 ssh2
Oct  5 04:15:47 onepixel sshd[675764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Oct  5 04:15:50 onepixel sshd[675764]: Failed password for root from 106.75.148.111 port 40394 ssh2
2020-10-05 12:19:34
106.75.148.111 attack
Sep 28 19:17:57 plex-server sshd[4005472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111 
Sep 28 19:17:57 plex-server sshd[4005472]: Invalid user sam from 106.75.148.111 port 53502
Sep 28 19:17:59 plex-server sshd[4005472]: Failed password for invalid user sam from 106.75.148.111 port 53502 ssh2
Sep 28 19:18:26 plex-server sshd[4005677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111  user=root
Sep 28 19:18:28 plex-server sshd[4005677]: Failed password for root from 106.75.148.111 port 58926 ssh2
...
2020-09-29 04:59:50
106.75.146.18 attackbotsspam
Sep 28 00:05:45 iago sshd[26761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.146.18  user=r.r
Sep 28 00:05:47 iago sshd[26761]: Failed password for r.r from 106.75.146.18 port 45398 ssh2
Sep 28 00:05:47 iago sshd[26762]: Received disconnect from 106.75.146.18: 11: Bye Bye


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.75.146.18
2020-09-29 01:18:33
106.75.148.111 attackspambots
106.75.148.111 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 28 08:19:59 server5 sshd[13837]: Failed password for root from 179.243.62.83 port 28333 ssh2
Sep 28 08:17:29 server5 sshd[12669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.158.36  user=root
Sep 28 08:17:31 server5 sshd[12669]: Failed password for root from 180.76.158.36 port 58450 ssh2
Sep 28 08:18:18 server5 sshd[13062]: Failed password for root from 62.171.148.132 port 54724 ssh2
Sep 28 08:14:43 server5 sshd[11724]: Failed password for root from 62.171.148.132 port 44784 ssh2
Sep 28 08:15:55 server5 sshd[12179]: Failed password for root from 106.75.148.111 port 47610 ssh2

IP Addresses Blocked:

179.243.62.83 (BR/Brazil/-)
180.76.158.36 (CN/China/-)
62.171.148.132 (DE/Germany/-)
2020-09-28 21:18:56
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.14.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29517
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.14.204.			IN	A

;; AUTHORITY SECTION:
.			577	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042001 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 21 02:02:36 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 204.14.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.14.75.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.47.251.164 attackspambots
$f2bV_matches
2019-10-21 08:19:00
197.37.124.234 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/197.37.124.234/ 
 
 EG - 1H : (32)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : EG 
 NAME ASN : ASN8452 
 
 IP : 197.37.124.234 
 
 CIDR : 197.37.0.0/16 
 
 PREFIX COUNT : 833 
 
 UNIQUE IP COUNT : 7610368 
 
 
 ATTACKS DETECTED ASN8452 :  
  1H - 1 
  3H - 5 
  6H - 8 
 12H - 17 
 24H - 31 
 
 DateTime : 2019-10-21 05:56:10 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-10-21 12:00:06
37.6.239.123 attackspam
Connection by 37.6.239.123 on port: 23 got caught by honeypot at 10/20/2019 8:22:35 PM
2019-10-21 08:17:18
190.203.68.76 attack
Port 1433 Scan
2019-10-21 08:16:45
71.6.233.178 attackspambots
" "
2019-10-21 12:03:28
46.164.141.55 attack
Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.
2019-10-21 12:15:15
118.24.201.132 attackspam
$f2bV_matches
2019-10-21 08:24:04
94.42.178.137 attackspam
Oct 21 01:33:47 MK-Soft-Root2 sshd[21573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137 
Oct 21 01:33:49 MK-Soft-Root2 sshd[21573]: Failed password for invalid user applemac from 94.42.178.137 port 47533 ssh2
...
2019-10-21 08:22:39
121.157.82.218 attack
Oct 21 00:49:42 bouncer sshd\[783\]: Invalid user justin1 from 121.157.82.218 port 47862
Oct 21 00:49:42 bouncer sshd\[783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.82.218 
Oct 21 00:49:44 bouncer sshd\[783\]: Failed password for invalid user justin1 from 121.157.82.218 port 47862 ssh2
...
2019-10-21 08:26:25
110.35.204.236 attackbotsspam
" "
2019-10-21 08:25:53
117.73.2.103 attackspam
Oct 20 23:55:58 plusreed sshd[8544]: Invalid user abc123 from 117.73.2.103
...
2019-10-21 12:13:23
200.108.143.6 attackspam
Oct 20 20:00:11 ny01 sshd[24426]: Failed password for root from 200.108.143.6 port 54464 ssh2
Oct 20 20:05:03 ny01 sshd[24853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6
Oct 20 20:05:05 ny01 sshd[24853]: Failed password for invalid user trinity from 200.108.143.6 port 37218 ssh2
2019-10-21 08:20:36
178.182.230.250 attackspam
Oct 20 08:16:37 plesk sshd[8573]: Invalid user teampspeak from 178.182.230.250
Oct 20 08:16:37 plesk sshd[8573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.182.230.250.nat.umts.dynamic.t-mobile.pl 
Oct 20 08:16:40 plesk sshd[8573]: Failed password for invalid user teampspeak from 178.182.230.250 port 43810 ssh2
Oct 20 08:16:40 plesk sshd[8573]: Received disconnect from 178.182.230.250: 11: Bye Bye [preauth]
Oct 20 08:45:41 plesk sshd[9610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.182.230.250.nat.umts.dynamic.t-mobile.pl  user=r.r
Oct 20 08:45:42 plesk sshd[9610]: Failed password for r.r from 178.182.230.250 port 56542 ssh2
Oct 20 08:45:42 plesk sshd[9610]: Received disconnect from 178.182.230.250: 11: Bye Bye [preauth]
Oct 20 08:50:16 plesk sshd[9810]: Invalid user celeste from 178.182.230.250
Oct 20 08:50:16 plesk sshd[9810]: pam_unix(sshd:auth): authentication failure;........
-------------------------------
2019-10-21 08:23:43
77.55.210.147 attack
Oct 20 11:24:03 nxxxxxxx0 sshd[29113]: Invalid user awanjiru from 77.55.210.147
Oct 20 11:24:05 nxxxxxxx0 sshd[29113]: Failed password for invalid user awanjiru from 77.55.210.147 port 41134 ssh2
Oct 20 11:24:05 nxxxxxxx0 sshd[29113]: Received disconnect from 77.55.210.147: 11: Bye Bye [preauth]
Oct 20 11:44:26 nxxxxxxx0 sshd[30545]: Failed password for r.r from 77.55.210.147 port 56236 ssh2
Oct 20 11:44:26 nxxxxxxx0 sshd[30545]: Received disconnect from 77.55.210.147: 11: Bye Bye [preauth]
Oct 20 11:49:26 nxxxxxxx0 sshd[30892]: Invalid user tom from 77.55.210.147
Oct 20 11:49:28 nxxxxxxx0 sshd[30892]: Failed password for invalid user tom from 77.55.210.147 port 40202 ssh2
Oct 20 11:49:28 nxxxxxxx0 sshd[30892]: Received disconnect from 77.55.210.147: 11: Bye Bye [preauth]
Oct 20 11:53:13 nxxxxxxx0 sshd[31149]: Invalid user er from 77.55.210.147
Oct 20 11:53:15 nxxxxxxx0 sshd[31149]: Failed password for invalid user er from 77.55.210.147 port 52392 ssh2
Oct 20 11:53:15 n........
-------------------------------
2019-10-21 08:30:04
140.246.175.68 attackbotsspam
Oct 20 21:06:12 work-partkepr sshd\[30023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.175.68  user=root
Oct 20 21:06:14 work-partkepr sshd\[30023\]: Failed password for root from 140.246.175.68 port 62420 ssh2
...
2019-10-21 08:19:46

最近上报的IP列表

58.218.66.103 58.87.68.211 49.232.51.60 42.200.207.42
41.78.74.67 34.65.216.205 31.184.254.4 23.114.84.9
18.136.126.194 14.177.239.168 14.169.191.95 14.169.144.182
14.18.190.116 13.80.69.39 222.187.226.81 213.32.255.99
202.29.233.166 200.57.183.52 197.248.96.70 197.220.5.197