城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): China Telecom
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.75.55.46 | attack | 2020-09-22T05:03:16.895884morrigan.ad5gb.com sshd[2150621]: Invalid user it from 106.75.55.46 port 53610 |
2020-09-22 20:48:18 |
| 106.75.55.46 | attack | Sep 22 11:37:32 web1 sshd[20106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.46 user=root Sep 22 11:37:34 web1 sshd[20106]: Failed password for root from 106.75.55.46 port 38798 ssh2 Sep 22 11:57:20 web1 sshd[26757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.46 user=root Sep 22 11:57:22 web1 sshd[26757]: Failed password for root from 106.75.55.46 port 33120 ssh2 Sep 22 12:05:47 web1 sshd[29972]: Invalid user eduardo from 106.75.55.46 port 41600 Sep 22 12:05:47 web1 sshd[29972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.46 Sep 22 12:05:47 web1 sshd[29972]: Invalid user eduardo from 106.75.55.46 port 41600 Sep 22 12:05:50 web1 sshd[29972]: Failed password for invalid user eduardo from 106.75.55.46 port 41600 ssh2 Sep 22 12:14:25 web1 sshd[382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ... |
2020-09-22 12:47:04 |
| 106.75.55.46 | attackspam | Automatic report - Banned IP Access |
2020-09-22 04:56:30 |
| 106.75.52.43 | attack | 2020-08-29T22:26[Censored Hostname] sshd[32146]: Failed password for invalid user Vision from 106.75.52.43 port 52460 ssh2 2020-08-29T22:28[Censored Hostname] sshd[1661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.52.43 user=root 2020-08-29T22:28[Censored Hostname] sshd[1661]: Failed password for root from 106.75.52.43 port 44696 ssh2[...] |
2020-08-30 04:49:04 |
| 106.75.55.46 | attack | Aug 24 01:27:59 sxvn sshd[12409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.46 |
2020-08-24 09:04:36 |
| 106.75.52.43 | attack | Invalid user hosting from 106.75.52.43 port 40738 |
2020-08-23 16:59:37 |
| 106.75.55.46 | attackbotsspam | $f2bV_matches |
2020-08-21 22:21:28 |
| 106.75.53.49 | attack | Aug 11 23:37:16 hosting sshd[22155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.49 user=root Aug 11 23:37:17 hosting sshd[22155]: Failed password for root from 106.75.53.49 port 49794 ssh2 ... |
2020-08-12 05:10:22 |
| 106.75.53.49 | attackspambots | firewall-block, port(s): 4923/tcp |
2020-08-06 20:24:26 |
| 106.75.56.56 | attackspam | Aug 3 16:16:08 mellenthin sshd[1997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56 user=root Aug 3 16:16:10 mellenthin sshd[1997]: Failed password for invalid user root from 106.75.56.56 port 46009 ssh2 |
2020-08-04 01:54:16 |
| 106.75.52.43 | attackspam | Aug 2 08:31:50 h2646465 sshd[25022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.52.43 user=root Aug 2 08:31:51 h2646465 sshd[25022]: Failed password for root from 106.75.52.43 port 39050 ssh2 Aug 2 08:48:31 h2646465 sshd[27503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.52.43 user=root Aug 2 08:48:33 h2646465 sshd[27503]: Failed password for root from 106.75.52.43 port 57820 ssh2 Aug 2 08:53:20 h2646465 sshd[28270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.52.43 user=root Aug 2 08:53:22 h2646465 sshd[28270]: Failed password for root from 106.75.52.43 port 46036 ssh2 Aug 2 08:58:10 h2646465 sshd[28976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.52.43 user=root Aug 2 08:58:11 h2646465 sshd[28976]: Failed password for root from 106.75.52.43 port 34256 ssh2 Aug 2 09:03:00 h2646465 sshd[30130] |
2020-08-02 16:04:24 |
| 106.75.55.46 | attackbots | SSH Brute-Forcing (server1) |
2020-07-31 02:23:57 |
| 106.75.55.46 | attack | Jul 30 13:00:39 santamaria sshd\[25409\]: Invalid user slider from 106.75.55.46 Jul 30 13:00:39 santamaria sshd\[25409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.55.46 Jul 30 13:00:42 santamaria sshd\[25409\]: Failed password for invalid user slider from 106.75.55.46 port 38864 ssh2 ... |
2020-07-30 20:03:22 |
| 106.75.56.56 | attackbots | 2020-07-29T18:22:34.9605111495-001 sshd[24526]: Invalid user zhuhan from 106.75.56.56 port 33684 2020-07-29T18:22:37.1268961495-001 sshd[24526]: Failed password for invalid user zhuhan from 106.75.56.56 port 33684 ssh2 2020-07-29T18:26:44.1952021495-001 sshd[24704]: Invalid user kevinm from 106.75.56.56 port 37545 2020-07-29T18:26:44.1983841495-001 sshd[24704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56 2020-07-29T18:26:44.1952021495-001 sshd[24704]: Invalid user kevinm from 106.75.56.56 port 37545 2020-07-29T18:26:46.0153601495-001 sshd[24704]: Failed password for invalid user kevinm from 106.75.56.56 port 37545 ssh2 ... |
2020-07-30 07:02:14 |
| 106.75.52.43 | attackspambots | reported through recidive - multiple failed attempts(SSH) |
2020-07-26 22:09:08 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '106.75.0.0 - 106.75.255.255'
% Abuse contact for '106.75.0.0 - 106.75.255.255' is 'jacky.jia@ucloud.cn'
inetnum: 106.75.0.0 - 106.75.255.255
netname: UCLOUD-NET
descr: Shanghai UCloud Information Technology Company Limited
country: CN
admin-c: JJ2197-AP
tech-c: JJ2197-AP
abuse-c: AC1601-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-UCLOUD-NET-CN
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
last-modified: 2023-11-28T00:56:50Z
source: APNIC
irt: IRT-UCLOUD-NET-CN
address: 2nd Floor 3rd Building No.200 EAST Guoding Road,Yangpu District,Shanghai
e-mail: jacky.jia@ucloud.cn
abuse-mailbox: jacky.jia@ucloud.cn
admin-c: JJ2197-AP
tech-c: JJ2197-AP
auth: # Filtered
mnt-by: MAINT-CNNIC-AP
last-modified: 2025-11-18T00:35:05Z
source: APNIC
role: ABUSE CNNICCN
country: ZZ
address: Beijing, China
phone: +000000000
e-mail: ipas@cnnic.cn
admin-c: IP50-AP
tech-c: IP50-AP
nic-hdl: AC1601-AP
remarks: Generated from irt object IRT-CNNIC-CN
remarks: ipas@cnnic.cn is invalid
abuse-mailbox: ipas@cnnic.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-09-19T17:20:32Z
source: APNIC
person: Jinhui Jia
e-mail: hegui@ucloud.cn
address: 510,SOHO B,Zhongguancun,Haidian, Beijing
phone: +86-13811069300
country: CN
mnt-by: MAINT-CNNIC-AP
nic-hdl: JJ2197-AP
last-modified: 2022-03-23T06:19:21Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.5.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3519
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.75.5.16. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026050200 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 03 01:30:02 CST 2026
;; MSG SIZE rcvd: 104Host 16.5.75.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.5.75.106.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 183.110.242.142 | attack | 183.110.242.142 (KR/South Korea/-) blocked for port scanning Time: Fri Oct 25 14:36:25 2019 +0000 IP: 183.110.242.142 (KR/South Korea/-) Hits: 20 Blocked: Temporary Block for 3600 seconds [PS_LIMIT] Sample of block hits: Oct 25 14:34:51 server kernel: [739270.758878] Firewall: *Port Flood* IN=eth0 OUT= MAC=0a:df:4c:a0:a6:86:0a:b2:a6:f2:cb:7a:08:00 SRC=183.110.242.142 DST=172.31.47.249 LEN=40 TOS=0x08 PREC=0x20 TTL=72 ID=5992 DF PROTO=TCP SPT=36310 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 25 14:34:52 server kernel: [739271.679701] Firewall: *Port Flood* IN=eth0 OUT= MAC=0a:df:4c:a0:a6:86:0a:b2:a6:f2:cb:7a:08:00 SRC=183.110.242.142 DST=172.31.47.249 LEN=40 TOS=0x08 PREC=0x20 TTL=64 ID=7056 DF PROTO=TCP SPT=51825 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 etc |
2019-10-26 07:50:33 |
| 185.176.27.102 | attackbots | 10/26/2019-00:11:00.337843 185.176.27.102 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-26 07:42:25 |
| 194.105.205.42 | attack | Invalid user ethos from 194.105.205.42 port 55564 |
2019-10-26 07:40:04 |
| 185.209.0.83 | attackbots | 10/26/2019-01:02:19.788541 185.209.0.83 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-26 08:04:20 |
| 185.176.27.54 | attack | firewall-block, port(s): 10385/tcp, 10386/tcp, 40135/tcp, 40136/tcp, 40137/tcp, 47185/tcp |
2019-10-26 08:06:05 |
| 185.156.73.45 | attackspam | 57769/tcp 51512/tcp 51513/tcp... [2019-10-17/25]750pkt,211pt.(tcp) |
2019-10-26 08:07:35 |
| 198.108.67.101 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 8877 proto: TCP cat: Misc Attack |
2019-10-26 07:39:33 |
| 185.176.27.86 | attackbotsspam | 10/26/2019-01:04:06.317411 185.176.27.86 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-26 07:42:37 |
| 89.248.174.206 | attack | Brute force attack stopped by firewall |
2019-10-26 07:54:39 |
| 103.76.56.19 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-10-26 07:52:44 |
| 45.136.109.82 | attack | 10/25/2019-18:37:21.948245 45.136.109.82 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-26 07:37:14 |
| 80.82.77.86 | attack | ET DROP Dshield Block Listed Source group 1 - port: 69 proto: UDP cat: Misc Attack |
2019-10-26 07:58:48 |
| 185.156.73.42 | attackspam | Automatic report - Port Scan |
2019-10-26 07:44:04 |
| 89.248.162.136 | attackbots | 10/25/2019-19:25:25.650156 89.248.162.136 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 97 |
2019-10-26 07:31:36 |
| 31.184.218.126 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 16 - port: 2222 proto: TCP cat: Misc Attack |
2019-10-26 08:01:42 |