Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
leo_www
2020-08-18 07:46:54
attack
Aug 11 21:41:18 ajax sshd[6729]: Failed password for root from 106.13.103.1 port 36540 ssh2
2020-08-12 07:31:45
attackspam
Aug 11 21:12:19 haigwepa sshd[10571]: Failed password for root from 106.13.103.1 port 53562 ssh2
...
2020-08-12 03:34:19
attackbots
Brute-force attempt banned
2020-08-07 08:13:20
attackbots
Jul 26 11:27:17 myvps sshd[6965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 
Jul 26 11:27:19 myvps sshd[6965]: Failed password for invalid user crp from 106.13.103.1 port 43490 ssh2
Jul 26 11:36:40 myvps sshd[12655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 
...
2020-07-26 17:43:53
attackspam
Jul 25 20:44:08 dhoomketu sshd[1868820]: Failed password for invalid user postgres from 106.13.103.1 port 47876 ssh2
Jul 25 20:46:30 dhoomketu sshd[1868894]: Invalid user xp from 106.13.103.1 port 44876
Jul 25 20:46:30 dhoomketu sshd[1868894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 
Jul 25 20:46:30 dhoomketu sshd[1868894]: Invalid user xp from 106.13.103.1 port 44876
Jul 25 20:46:32 dhoomketu sshd[1868894]: Failed password for invalid user xp from 106.13.103.1 port 44876 ssh2
...
2020-07-25 23:17:12
attackbotsspam
Jul 21 04:09:24 plex-server sshd[183163]: Invalid user ts3user from 106.13.103.1 port 48894
Jul 21 04:09:24 plex-server sshd[183163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 
Jul 21 04:09:24 plex-server sshd[183163]: Invalid user ts3user from 106.13.103.1 port 48894
Jul 21 04:09:25 plex-server sshd[183163]: Failed password for invalid user ts3user from 106.13.103.1 port 48894 ssh2
Jul 21 04:12:49 plex-server sshd[183477]: Invalid user dg from 106.13.103.1 port 36936
...
2020-07-21 13:13:41
attackspam
SSH Attack
2020-07-12 19:49:00
attack
$f2bV_matches
2020-07-09 02:30:00
attackbots
Jul  5 05:52:04 raspberrypi sshd[17318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
Jul  5 05:52:06 raspberrypi sshd[17318]: Failed password for invalid user root from 106.13.103.1 port 36766 ssh2
...
2020-07-05 16:28:12
attackbots
2020-06-20T06:09:01.623245shield sshd\[32655\]: Invalid user wilson from 106.13.103.1 port 58262
2020-06-20T06:09:01.627159shield sshd\[32655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
2020-06-20T06:09:03.643321shield sshd\[32655\]: Failed password for invalid user wilson from 106.13.103.1 port 58262 ssh2
2020-06-20T06:12:46.386327shield sshd\[815\]: Invalid user chef from 106.13.103.1 port 47236
2020-06-20T06:12:46.390043shield sshd\[815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
2020-06-20 15:07:25
attackbotsspam
Jun 18 16:37:01 vserver sshd\[25110\]: Invalid user apache from 106.13.103.1Jun 18 16:37:03 vserver sshd\[25110\]: Failed password for invalid user apache from 106.13.103.1 port 46814 ssh2Jun 18 16:43:10 vserver sshd\[25243\]: Failed password for root from 106.13.103.1 port 41304 ssh2Jun 18 16:44:16 vserver sshd\[25247\]: Invalid user tommy from 106.13.103.1
...
2020-06-19 02:46:18
attackbots
Jun 11 07:09:39 lnxmysql61 sshd[25254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
2020-06-11 13:39:03
attack
$f2bV_matches
2020-06-10 01:09:27
attackbots
Jun  8 16:52:17 ns382633 sshd\[7382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
Jun  8 16:52:19 ns382633 sshd\[7382\]: Failed password for root from 106.13.103.1 port 37454 ssh2
Jun  8 17:13:36 ns382633 sshd\[11650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
Jun  8 17:13:38 ns382633 sshd\[11650\]: Failed password for root from 106.13.103.1 port 48856 ssh2
Jun  8 17:18:24 ns382633 sshd\[12544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
2020-06-08 23:41:53
attackspam
(sshd) Failed SSH login from 106.13.103.1 (CN/China/-): 5 in the last 3600 secs
2020-06-03 22:24:24
attackspam
(sshd) Failed SSH login from 106.13.103.1 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 28 18:28:08 amsweb01 sshd[11104]: User admin from 106.13.103.1 not allowed because not listed in AllowUsers
May 28 18:28:08 amsweb01 sshd[11104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=admin
May 28 18:28:10 amsweb01 sshd[11104]: Failed password for invalid user admin from 106.13.103.1 port 46498 ssh2
May 28 18:52:48 amsweb01 sshd[12756]: Invalid user 00000 from 106.13.103.1 port 46486
May 28 18:52:50 amsweb01 sshd[12756]: Failed password for invalid user 00000 from 106.13.103.1 port 46486 ssh2
2020-05-29 01:51:35
attack
Failed password for invalid user mug from 106.13.103.1 port 52602 ssh2
2020-05-24 16:42:20
attack
SSH Invalid Login
2020-05-02 06:47:59
attack
Apr 28 07:06:29 ns382633 sshd\[21370\]: Invalid user yarn from 106.13.103.1 port 50290
Apr 28 07:06:29 ns382633 sshd\[21370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Apr 28 07:06:31 ns382633 sshd\[21370\]: Failed password for invalid user yarn from 106.13.103.1 port 50290 ssh2
Apr 28 07:11:10 ns382633 sshd\[22338\]: Invalid user ebs from 106.13.103.1 port 35976
Apr 28 07:11:10 ns382633 sshd\[22338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
2020-04-28 15:31:28
attackspam
Apr 13 08:55:58 gw1 sshd[2627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Apr 13 08:56:00 gw1 sshd[2627]: Failed password for invalid user oracle from 106.13.103.1 port 58230 ssh2
...
2020-04-13 15:00:29
attack
Invalid user sysop from 106.13.103.1 port 56732
2020-03-26 14:01:49
attackspambots
Mar 21 14:17:17 prox sshd[3421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 
Mar 21 14:17:18 prox sshd[3421]: Failed password for invalid user stu2 from 106.13.103.1 port 60666 ssh2
2020-03-21 22:15:52
attackspam
Mar 13 17:24:16 webhost01 sshd[31122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Mar 13 17:24:18 webhost01 sshd[31122]: Failed password for invalid user guest from 106.13.103.1 port 53158 ssh2
...
2020-03-13 18:52:35
attack
Feb 25 03:07:44 mail sshd[20063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
Feb 25 03:07:46 mail sshd[20063]: Failed password for root from 106.13.103.1 port 33190 ssh2
Feb 25 03:37:45 mail sshd[32159]: Invalid user lab from 106.13.103.1
Feb 25 03:37:45 mail sshd[32159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Feb 25 03:37:45 mail sshd[32159]: Invalid user lab from 106.13.103.1
Feb 25 03:37:47 mail sshd[32159]: Failed password for invalid user lab from 106.13.103.1 port 36540 ssh2
...
2020-02-25 12:19:53
attackbots
Feb 11 22:32:46 srv-ubuntu-dev3 sshd[103407]: Invalid user fuckme from 106.13.103.1
Feb 11 22:32:46 srv-ubuntu-dev3 sshd[103407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Feb 11 22:32:46 srv-ubuntu-dev3 sshd[103407]: Invalid user fuckme from 106.13.103.1
Feb 11 22:32:49 srv-ubuntu-dev3 sshd[103407]: Failed password for invalid user fuckme from 106.13.103.1 port 58396 ssh2
Feb 11 22:35:10 srv-ubuntu-dev3 sshd[103592]: Invalid user washington from 106.13.103.1
Feb 11 22:35:10 srv-ubuntu-dev3 sshd[103592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
Feb 11 22:35:10 srv-ubuntu-dev3 sshd[103592]: Invalid user washington from 106.13.103.1
Feb 11 22:35:12 srv-ubuntu-dev3 sshd[103592]: Failed password for invalid user washington from 106.13.103.1 port 52552 ssh2
Feb 11 22:37:34 srv-ubuntu-dev3 sshd[103859]: Invalid user gateway from 106.13.103.1
...
2020-02-12 06:17:42
attack
Unauthorized connection attempt detected from IP address 106.13.103.1 to port 2220 [J]
2020-01-26 18:45:35
attack
Unauthorized connection attempt detected from IP address 106.13.103.1 to port 2220 [J]
2020-01-18 20:25:13
attackbots
Brute force SMTP login attempted.
...
2020-01-11 08:57:34
attackspambots
Dec 31 08:12:42 localhost sshd\[504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1  user=root
Dec 31 08:12:44 localhost sshd\[504\]: Failed password for root from 106.13.103.1 port 51666 ssh2
Dec 31 08:15:54 localhost sshd\[1062\]: Invalid user ph from 106.13.103.1 port 47770
2019-12-31 15:30:31
Comments on same subnet:
IP Type Details Datetime
106.13.103.251 attackspam
Jun 29 12:52:17 mail sshd[21112]: Failed password for root from 106.13.103.251 port 37364 ssh2
Jun 29 13:06:50 mail sshd[23098]: Failed password for root from 106.13.103.251 port 35224 ssh2
...
2020-06-29 23:50:40
106.13.103.251 attack
Port scan: Attack repeated for 24 hours
2020-06-12 08:51:56
106.13.103.251 attack
May 23 12:00:57 sshgateway sshd\[27718\]: Invalid user lxa from 106.13.103.251
May 23 12:00:57 sshgateway sshd\[27718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.251
May 23 12:00:59 sshgateway sshd\[27718\]: Failed password for invalid user lxa from 106.13.103.251 port 46242 ssh2
2020-05-23 22:58:47
106.13.103.203 attack
$f2bV_matches
2020-04-11 00:07:38
106.13.103.203 attack
Apr  6 05:38:05 srv206 sshd[22092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.203  user=root
Apr  6 05:38:07 srv206 sshd[22092]: Failed password for root from 106.13.103.203 port 56066 ssh2
Apr  6 05:50:30 srv206 sshd[22187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.203  user=root
Apr  6 05:50:32 srv206 sshd[22187]: Failed password for root from 106.13.103.203 port 59336 ssh2
...
2020-04-06 18:16:04
106.13.103.203 attackbotsspam
Apr  4 18:51:41 work-partkepr sshd\[9964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.203  user=root
Apr  4 18:51:43 work-partkepr sshd\[9964\]: Failed password for root from 106.13.103.203 port 51618 ssh2
...
2020-04-05 05:21:47
106.13.103.203 attack
Total attacks: 2
2020-04-01 14:39:42
106.13.103.128 attack
$f2bV_matches
2020-03-24 03:47:28
106.13.103.203 attackspambots
Lines containing failures of 106.13.103.203
Mar 17 20:16:44 mailserver sshd[1365]: Invalid user em3-user from 106.13.103.203 port 37000
Mar 17 20:16:44 mailserver sshd[1365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.203
Mar 17 20:16:46 mailserver sshd[1365]: Failed password for invalid user em3-user from 106.13.103.203 port 37000 ssh2
Mar 17 20:16:47 mailserver sshd[1365]: Received disconnect from 106.13.103.203 port 37000:11: Bye Bye [preauth]
Mar 17 20:16:47 mailserver sshd[1365]: Disconnected from invalid user em3-user 106.13.103.203 port 37000 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.103.203
2020-03-20 10:09:44
106.13.103.128 attackbots
Mar 12 13:31:38 lnxmail61 sshd[24008]: Failed password for root from 106.13.103.128 port 56360 ssh2
Mar 12 13:31:38 lnxmail61 sshd[24008]: Failed password for root from 106.13.103.128 port 56360 ssh2
2020-03-12 21:32:17
106.13.103.128 attackbots
(sshd) Failed SSH login from 106.13.103.128 (CN/China/-): 5 in the last 3600 secs
2020-03-06 14:23:49
106.13.103.128 attack
Mar  3 13:19:34 eddieflores sshd\[27410\]: Invalid user ovhuser from 106.13.103.128
Mar  3 13:19:34 eddieflores sshd\[27410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.128
Mar  3 13:19:36 eddieflores sshd\[27410\]: Failed password for invalid user ovhuser from 106.13.103.128 port 40184 ssh2
Mar  3 13:28:34 eddieflores sshd\[28160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.128  user=sync
Mar  3 13:28:37 eddieflores sshd\[28160\]: Failed password for sync from 106.13.103.128 port 58570 ssh2
2020-03-04 07:47:19
106.13.103.128 attackspam
Feb 13 08:58:37 MK-Soft-VM8 sshd[15723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.128 
Feb 13 08:58:40 MK-Soft-VM8 sshd[15723]: Failed password for invalid user saport from 106.13.103.128 port 58822 ssh2
...
2020-02-13 16:02:56
106.13.103.132 attackbots
2019-12-07T11:22:31.975779shield sshd\[22797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.132  user=root
2019-12-07T11:22:34.098138shield sshd\[22797\]: Failed password for root from 106.13.103.132 port 38354 ssh2
2019-12-07T11:29:32.537175shield sshd\[25208\]: Invalid user test from 106.13.103.132 port 36970
2019-12-07T11:29:32.543108shield sshd\[25208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.132
2019-12-07T11:29:34.128334shield sshd\[25208\]: Failed password for invalid user test from 106.13.103.132 port 36970 ssh2
2019-12-07 19:30:15
106.13.103.132 attackspambots
Dec  2 03:23:22 php1 sshd\[7790\]: Invalid user jeffchen from 106.13.103.132
Dec  2 03:23:22 php1 sshd\[7790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.132
Dec  2 03:23:24 php1 sshd\[7790\]: Failed password for invalid user jeffchen from 106.13.103.132 port 56630 ssh2
Dec  2 03:32:09 php1 sshd\[9379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.132  user=root
Dec  2 03:32:10 php1 sshd\[9379\]: Failed password for root from 106.13.103.132 port 54642 ssh2
2019-12-03 02:36:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.103.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20793
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.103.1.			IN	A

;; AUTHORITY SECTION:
.			405	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102502 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 26 09:24:05 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 1.103.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.103.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
59.5.113.168 attackbots
unauthorized connection attempt
2020-01-09 16:58:42
41.78.110.28 attack
unauthorized connection attempt
2020-01-09 16:31:19
185.234.217.237 attack
unauthorized connection attempt
2020-01-09 17:09:11
202.53.68.173 attackspambots
unauthorized connection attempt
2020-01-09 17:05:18
91.126.204.240 attack
Unauthorized connection attempt detected from IP address 91.126.204.240 to port 5555
2020-01-09 16:56:31
202.128.88.201 attackbotsspam
unauthorized connection attempt
2020-01-09 17:04:51
59.63.206.212 attackspambots
unauthorized connection attempt
2020-01-09 16:29:15
115.134.215.244 attack
unauthorized connection attempt
2020-01-09 16:39:46
190.142.56.195 attack
unauthorized connection attempt
2020-01-09 16:36:40
185.172.129.84 attackspam
unauthorized connection attempt
2020-01-09 17:09:53
87.107.158.166 attackspambots
unauthorized connection attempt
2020-01-09 16:42:12
59.57.248.34 attack
unauthorized connection attempt
2020-01-09 16:58:11
31.161.46.58 attackspambots
unauthorized connection attempt
2020-01-09 16:43:02
183.82.21.7 attackspambots
unauthorized connection attempt
2020-01-09 16:46:46
210.111.171.94 attack
unauthorized connection attempt
2020-01-09 17:04:00

Recently Reported IPs

86.84.145.218 246.170.135.78 227.237.94.166 186.49.80.123
240.122.133.214 212.176.171.123 59.26.125.150 170.169.168.244
231.237.57.38 6.90.202.12 31.87.77.124 225.133.32.58
46.79.79.121 50.130.233.33 50.161.86.190 124.63.28.115
73.43.208.54 192.52.39.166 94.28.127.30 64.202.160.233