Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
$f2bV_matches
2020-05-29 13:25:08
attack
(sshd) Failed SSH login from 106.13.102.141 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 23 12:26:27 host sshd[50808]: Invalid user dec from 106.13.102.141 port 37460
2020-05-24 03:55:47
attackbotsspam
Invalid user zx from 106.13.102.141 port 59758
2020-04-21 02:04:17
attack
2020-04-17 UTC: (20x) - Ubuntu,admin(3x),admin1,bm,hh,ht,mq,oracle,root(4x),test(2x),test1,teste,we,wz
2020-04-18 18:50:32
attackbots
Apr  7 15:06:02 vps sshd[219096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Apr  7 15:06:04 vps sshd[219096]: Failed password for invalid user vbox from 106.13.102.141 port 41786 ssh2
Apr  7 15:09:58 vps sshd[238859]: Invalid user deploy from 106.13.102.141 port 36450
Apr  7 15:09:58 vps sshd[238859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Apr  7 15:10:00 vps sshd[238859]: Failed password for invalid user deploy from 106.13.102.141 port 36450 ssh2
...
2020-04-08 02:55:21
attackspam
$f2bV_matches
2020-04-06 09:29:56
attack
Apr  2 02:56:16 webhost01 sshd[29541]: Failed password for root from 106.13.102.141 port 39966 ssh2
...
2020-04-02 04:42:39
attackbots
Mar 21 23:46:51 ns392434 sshd[16691]: Invalid user aisha from 106.13.102.141 port 35026
Mar 21 23:46:51 ns392434 sshd[16691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Mar 21 23:46:51 ns392434 sshd[16691]: Invalid user aisha from 106.13.102.141 port 35026
Mar 21 23:46:53 ns392434 sshd[16691]: Failed password for invalid user aisha from 106.13.102.141 port 35026 ssh2
Mar 21 23:59:44 ns392434 sshd[16950]: Invalid user mozart4 from 106.13.102.141 port 53140
Mar 21 23:59:44 ns392434 sshd[16950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Mar 21 23:59:44 ns392434 sshd[16950]: Invalid user mozart4 from 106.13.102.141 port 53140
Mar 21 23:59:46 ns392434 sshd[16950]: Failed password for invalid user mozart4 from 106.13.102.141 port 53140 ssh2
Mar 22 00:03:23 ns392434 sshd[17031]: Invalid user nicolas from 106.13.102.141 port 47020
2020-03-22 09:19:46
attackbotsspam
detected by Fail2Ban
2020-03-18 17:25:17
attack
Mar  3 06:22:19 localhost sshd\[19239\]: Invalid user chris from 106.13.102.141 port 36632
Mar  3 06:22:19 localhost sshd\[19239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Mar  3 06:22:21 localhost sshd\[19239\]: Failed password for invalid user chris from 106.13.102.141 port 36632 ssh2
2020-03-03 13:34:40
attackspambots
Feb 28 14:03:42 mail sshd[7694]: Invalid user bt1944 from 106.13.102.141
Feb 28 14:03:42 mail sshd[7694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.141
Feb 28 14:03:42 mail sshd[7694]: Invalid user bt1944 from 106.13.102.141
Feb 28 14:03:45 mail sshd[7694]: Failed password for invalid user bt1944 from 106.13.102.141 port 37124 ssh2
Feb 28 14:39:41 mail sshd[12271]: Invalid user vikas from 106.13.102.141
...
2020-02-29 01:52:07
attackbotsspam
Invalid user messagebus from 106.13.102.141 port 49104
2020-02-13 07:44:01
Comments on same subnet:
IP Type Details Datetime
106.13.102.154 attackspambots
2020-08-25T15:36:03.3608251495-001 sshd[17548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154  user=root
2020-08-25T15:36:05.4098801495-001 sshd[17548]: Failed password for root from 106.13.102.154 port 59114 ssh2
2020-08-25T15:39:47.7498941495-001 sshd[17767]: Invalid user user from 106.13.102.154 port 56952
2020-08-25T15:39:47.7530011495-001 sshd[17767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154
2020-08-25T15:39:47.7498941495-001 sshd[17767]: Invalid user user from 106.13.102.154 port 56952
2020-08-25T15:39:50.2189841495-001 sshd[17767]: Failed password for invalid user user from 106.13.102.154 port 56952 ssh2
...
2020-08-26 04:41:35
106.13.102.154 attackspambots
(sshd) Failed SSH login from 106.13.102.154 (CN/China/-): 5 in the last 3600 secs
2020-08-18 03:21:00
106.13.102.154 attack
Aug  5 23:43:07 * sshd[5322]: Failed password for root from 106.13.102.154 port 56932 ssh2
2020-08-06 06:31:49
106.13.102.154 attack
Aug  4 11:53:36 dhoomketu sshd[2143479]: Invalid user P@ssw0rdzxc from 106.13.102.154 port 42078
Aug  4 11:53:36 dhoomketu sshd[2143479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154 
Aug  4 11:53:36 dhoomketu sshd[2143479]: Invalid user P@ssw0rdzxc from 106.13.102.154 port 42078
Aug  4 11:53:37 dhoomketu sshd[2143479]: Failed password for invalid user P@ssw0rdzxc from 106.13.102.154 port 42078 ssh2
Aug  4 11:57:08 dhoomketu sshd[2143529]: Invalid user 123ZAQ! from 106.13.102.154 port 52966
...
2020-08-04 16:31:59
106.13.102.154 attackbotsspam
Aug 2 05:54:00 *hidden* sshd[10034]: Failed password for *hidden* from 106.13.102.154 port 41276 ssh2 Aug 2 05:59:21 *hidden* sshd[10869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154 user=root Aug 2 05:59:23 *hidden* sshd[10869]: Failed password for *hidden* from 106.13.102.154 port 48240 ssh2
2020-08-02 12:04:32
106.13.102.154 attackspam
Jul 29 05:51:42 srv-ubuntu-dev3 sshd[102499]: Invalid user wangyan_stu from 106.13.102.154
Jul 29 05:51:42 srv-ubuntu-dev3 sshd[102499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154
Jul 29 05:51:42 srv-ubuntu-dev3 sshd[102499]: Invalid user wangyan_stu from 106.13.102.154
Jul 29 05:51:45 srv-ubuntu-dev3 sshd[102499]: Failed password for invalid user wangyan_stu from 106.13.102.154 port 57364 ssh2
Jul 29 05:54:19 srv-ubuntu-dev3 sshd[102828]: Invalid user anthony from 106.13.102.154
Jul 29 05:54:19 srv-ubuntu-dev3 sshd[102828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154
Jul 29 05:54:19 srv-ubuntu-dev3 sshd[102828]: Invalid user anthony from 106.13.102.154
Jul 29 05:54:21 srv-ubuntu-dev3 sshd[102828]: Failed password for invalid user anthony from 106.13.102.154 port 33416 ssh2
Jul 29 05:57:00 srv-ubuntu-dev3 sshd[103156]: Invalid user wushuaishuai from 106.13.102.154
...
2020-07-29 12:05:43
106.13.102.154 attackspam
Jul 28 06:02:58 vps-51d81928 sshd[231824]: Invalid user zhanghuahao from 106.13.102.154 port 46768
Jul 28 06:02:58 vps-51d81928 sshd[231824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154 
Jul 28 06:02:58 vps-51d81928 sshd[231824]: Invalid user zhanghuahao from 106.13.102.154 port 46768
Jul 28 06:02:59 vps-51d81928 sshd[231824]: Failed password for invalid user zhanghuahao from 106.13.102.154 port 46768 ssh2
Jul 28 06:07:00 vps-51d81928 sshd[232037]: Invalid user znyjjszx from 106.13.102.154 port 37356
...
2020-07-28 16:47:43
106.13.102.154 attack
SSH Login Bruteforce
2020-07-22 23:24:41
106.13.102.154 attack
2020-07-17T21:27:29.286808shield sshd\[16261\]: Invalid user test_user from 106.13.102.154 port 42480
2020-07-17T21:27:29.293935shield sshd\[16261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154
2020-07-17T21:27:31.489439shield sshd\[16261\]: Failed password for invalid user test_user from 106.13.102.154 port 42480 ssh2
2020-07-17T21:31:51.355768shield sshd\[16514\]: Invalid user math from 106.13.102.154 port 42464
2020-07-17T21:31:51.362252shield sshd\[16514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.154
2020-07-18 05:46:26
106.13.102.154 attackbots
Invalid user kamiya from 106.13.102.154 port 33146
2020-06-23 13:22:29
106.13.102.154 attack
Jun 17 18:59:57 mout sshd[3581]: Invalid user chocolateslim from 106.13.102.154 port 43346
2020-06-18 01:33:11
106.13.102.154 attackspambots
sshd
2020-06-14 03:57:40
106.13.102.154 attackspam
Jun 11 22:25:52 server sshd[3386]: Failed password for root from 106.13.102.154 port 34164 ssh2
Jun 11 22:31:53 server sshd[7868]: Failed password for root from 106.13.102.154 port 41444 ssh2
Jun 11 22:39:45 server sshd[14356]: Failed password for root from 106.13.102.154 port 55804 ssh2
2020-06-12 05:08:09
106.13.102.154 attackbotsspam
(sshd) Failed SSH login from 106.13.102.154 (CN/China/-): 5 in the last 3600 secs
2020-06-02 19:16:35
106.13.102.154 attackbotsspam
May 25 14:33:13 [host] sshd[32218]: pam_unix(sshd:
May 25 14:33:15 [host] sshd[32218]: Failed passwor
May 25 14:37:09 [host] sshd[32322]: pam_unix(sshd:
2020-05-25 22:06:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.102.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.102.141.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021202 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 07:43:58 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 141.102.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.102.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
216.104.200.2 attackbotsspam
Invalid user ping from 216.104.200.2 port 53890
2020-08-20 14:53:56
106.13.94.193 attack
Aug 20 08:06:15 OPSO sshd\[9037\]: Invalid user wang from 106.13.94.193 port 38136
Aug 20 08:06:15 OPSO sshd\[9037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.94.193
Aug 20 08:06:17 OPSO sshd\[9037\]: Failed password for invalid user wang from 106.13.94.193 port 38136 ssh2
Aug 20 08:09:39 OPSO sshd\[9724\]: Invalid user a from 106.13.94.193 port 44116
Aug 20 08:09:39 OPSO sshd\[9724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.94.193
2020-08-20 14:59:27
43.245.185.66 attackbotsspam
Aug 20 03:43:51 firewall sshd[21748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.245.185.66
Aug 20 03:43:51 firewall sshd[21748]: Invalid user admin from 43.245.185.66
Aug 20 03:43:53 firewall sshd[21748]: Failed password for invalid user admin from 43.245.185.66 port 49244 ssh2
...
2020-08-20 14:53:35
79.35.186.139 attackspam
Telnet Server BruteForce Attack
2020-08-20 14:27:23
222.179.205.14 attackspambots
$f2bV_matches
2020-08-20 14:32:15
185.220.101.207 attackbots
Aug 20 13:31:25 itv-usvr-01 sshd[11002]: Invalid user admin from 185.220.101.207
2020-08-20 14:34:25
139.99.61.247 attackspambots
Aug 20 07:57:14 pornomens sshd\[1983\]: Invalid user ubuntu from 139.99.61.247 port 36570
Aug 20 07:57:14 pornomens sshd\[1983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.61.247
Aug 20 07:57:16 pornomens sshd\[1983\]: Failed password for invalid user ubuntu from 139.99.61.247 port 36570 ssh2
...
2020-08-20 14:46:06
14.241.236.176 attackbots
20/8/19@23:52:35: FAIL: Alarm-Network address from=14.241.236.176
...
2020-08-20 15:02:21
185.250.220.170 attackbotsspam
Aug 20 04:41:39 *hidden* kernel: [165614.379814] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=185.250.220.170 DST=173.212.244.83 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=30663 PROTO=TCP SPT=47025 DPT=8881 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 20 04:46:27 *hidden* kernel: [165901.929775] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=185.250.220.170 DST=173.212.244.83 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=60200 PROTO=TCP SPT=47025 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 20 05:18:49 *hidden* kernel: [167844.067923] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=185.250.220.170 DST=173.212.244.83 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=13587 PROTO=TCP SPT=47025 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 20 05:52:08 *hidden* kernel: [169842.933141] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=185.250.220.170 DST=173.212.244.83 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=47934 PROTO=TCP
...
2020-08-20 14:54:15
192.144.215.146 attackspam
Invalid user matlab from 192.144.215.146 port 47896
2020-08-20 14:57:26
106.13.184.139 attackspam
Repeated brute force against a port
2020-08-20 14:48:53
85.209.0.253 attackspambots
 TCP (SYN) 85.209.0.253:17090 -> port 22, len 60
2020-08-20 14:24:38
203.195.132.128 attackbotsspam
Aug 20 04:18:38 game-panel sshd[13245]: Failed password for root from 203.195.132.128 port 55202 ssh2
Aug 20 04:23:52 game-panel sshd[13521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.132.128
Aug 20 04:23:54 game-panel sshd[13521]: Failed password for invalid user edgar from 203.195.132.128 port 53206 ssh2
2020-08-20 15:00:25
164.100.145.27 attackspambots
Automatic report - WordPress Brute Force
2020-08-20 15:00:05
183.89.229.137 attackspambots
Dovecot Invalid User Login Attempt.
2020-08-20 14:41:36

Recently Reported IPs

59.146.170.117 112.3.245.226 69.222.163.227 123.10.81.61
194.230.207.254 52.247.167.117 247.120.18.188 207.138.191.244
181.143.223.51 172.41.95.113 233.117.118.38 230.85.105.198
181.130.53.239 210.27.92.238 237.17.168.141 168.0.129.169
14.227.166.241 121.236.6.124 119.106.242.196 105.103.181.107