City: unknown
Region: Beijing
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attackbots | Sep 4 00:42:42 markkoudstaal sshd[18728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 Sep 4 00:42:44 markkoudstaal sshd[18728]: Failed password for invalid user vboxuser from 106.13.104.94 port 36128 ssh2 Sep 4 00:46:21 markkoudstaal sshd[19120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 |
2019-09-04 11:22:33 |
| attackspam | Aug 28 20:14:34 [munged] sshd[17268]: Invalid user vishvjit from 106.13.104.94 port 38867 Aug 28 20:14:34 [munged] sshd[17268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 |
2019-08-29 07:19:33 |
| attackspambots | Brute force attempt |
2019-07-13 01:19:06 |
| attackspambots | Jun 28 07:01:50 ns341937 sshd[14140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 Jun 28 07:01:52 ns341937 sshd[14140]: Failed password for invalid user css from 106.13.104.94 port 48983 ssh2 Jun 28 07:16:28 ns341937 sshd[16953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 ... |
2019-06-28 14:47:10 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.104.8 | attack | firewall-block, port(s): 24565/tcp |
2020-10-06 02:37:22 |
| 106.13.104.8 | attack | Found on CINS badguys / proto=6 . srcport=54148 . dstport=11451 . (3502) |
2020-10-05 18:25:25 |
| 106.13.104.8 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 93 - port: 5069 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-27 02:04:47 |
| 106.13.104.8 | attackspam | Jun 20 22:35:42 dignus sshd[31848]: Failed password for invalid user helong from 106.13.104.8 port 57672 ssh2 Jun 20 22:39:35 dignus sshd[32144]: Invalid user raimundo from 106.13.104.8 port 50040 Jun 20 22:39:35 dignus sshd[32144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.8 Jun 20 22:39:37 dignus sshd[32144]: Failed password for invalid user raimundo from 106.13.104.8 port 50040 ssh2 Jun 20 22:43:29 dignus sshd[32450]: Invalid user help from 106.13.104.8 port 42402 ... |
2020-06-21 13:46:28 |
| 106.13.104.8 | attackspam | May 13 12:13:04 itv-usvr-02 sshd[4982]: Invalid user readnews from 106.13.104.8 port 35802 May 13 12:13:04 itv-usvr-02 sshd[4982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.8 May 13 12:13:04 itv-usvr-02 sshd[4982]: Invalid user readnews from 106.13.104.8 port 35802 May 13 12:13:06 itv-usvr-02 sshd[4982]: Failed password for invalid user readnews from 106.13.104.8 port 35802 ssh2 May 13 12:15:23 itv-usvr-02 sshd[5060]: Invalid user debian from 106.13.104.8 port 60236 |
2020-05-13 14:53:24 |
| 106.13.104.8 | attackbotsspam | Invalid user sebastian from 106.13.104.8 port 51016 |
2020-04-27 07:05:33 |
| 106.13.104.8 | attackbots | Apr 20 16:01:37 server sshd[19518]: Failed password for root from 106.13.104.8 port 59874 ssh2 Apr 20 16:07:11 server sshd[23360]: Failed password for root from 106.13.104.8 port 33458 ssh2 Apr 20 16:12:34 server sshd[27270]: Failed password for invalid user admin from 106.13.104.8 port 59472 ssh2 |
2020-04-21 03:33:10 |
| 106.13.104.92 | attackspam | Feb 27 05:49:11 server sshd[1957796]: Failed password for invalid user deploy from 106.13.104.92 port 39558 ssh2 Feb 27 05:53:57 server sshd[1958756]: Failed password for invalid user ashish from 106.13.104.92 port 36904 ssh2 Feb 27 05:58:40 server sshd[1959634]: Failed password for invalid user odoo from 106.13.104.92 port 34232 ssh2 |
2020-02-27 13:47:37 |
| 106.13.104.92 | attackbotsspam | Feb 23 22:49:15 |
2020-02-24 05:50:43 |
| 106.13.104.92 | attackspambots | 2020-01-17 05:24:19 server sshd[12758]: Failed password for invalid user jack from 106.13.104.92 port 47900 ssh2 |
2020-01-18 01:12:52 |
| 106.13.104.92 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-01-16 04:52:24 |
| 106.13.104.92 | attack | Jan 14 12:29:37 vzmaster sshd[27337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:29:39 vzmaster sshd[27337]: Failed password for r.r from 106.13.104.92 port 43520 ssh2 Jan 14 12:46:09 vzmaster sshd[31085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:46:11 vzmaster sshd[31085]: Failed password for r.r from 106.13.104.92 port 55852 ssh2 Jan 14 12:49:15 vzmaster sshd[4403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:49:17 vzmaster sshd[4403]: Failed password for r.r from 106.13.104.92 port 51164 ssh2 Jan 14 12:53:04 vzmaster sshd[11160]: Invalid user ubuntu from 106.13.104.92 Jan 14 12:53:04 vzmaster sshd[11160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 Jan 14 12:53:06 vzmaster ss........ ------------------------------- |
2020-01-14 21:33:58 |
| 106.13.104.103 | attackspambots | Nov 11 21:02:12 server sshd\[3170\]: Invalid user rolimnet from 106.13.104.103 Nov 11 21:02:12 server sshd\[3170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.103 Nov 11 21:02:14 server sshd\[3170\]: Failed password for invalid user rolimnet from 106.13.104.103 port 17928 ssh2 Nov 12 09:25:19 server sshd\[8102\]: Invalid user rolimnet from 106.13.104.103 Nov 12 09:25:19 server sshd\[8102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.103 ... |
2019-11-12 19:18:11 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.104.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41461
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.104.94. IN A
;; AUTHORITY SECTION:
. 2991 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 21:25:12 +08 2019
;; MSG SIZE rcvd: 117
Host 94.104.13.106.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 94.104.13.106.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 85.173.214.52 | attack | Attempted connection to port 445. |
2020-05-12 19:45:59 |
| 111.231.135.209 | attackbots | DATE:2020-05-12 13:17:46, IP:111.231.135.209, PORT:ssh SSH brute force auth (docker-dc) |
2020-05-12 19:35:52 |
| 191.55.200.171 | attack | Unauthorized connection attempt detected from IP address 191.55.200.171 to port 1433 |
2020-05-12 19:32:24 |
| 103.28.60.185 | attackspambots | Port probing on unauthorized port 23 |
2020-05-12 19:37:22 |
| 151.80.173.36 | attack | May 12 08:01:14 XXX sshd[59275]: Invalid user vogel from 151.80.173.36 port 43054 |
2020-05-12 19:26:06 |
| 223.152.186.226 | attack | Attempted connection to port 80. |
2020-05-12 19:50:58 |
| 123.24.213.188 | attack | May 12 10:46:13 sso sshd[3185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.213.188 May 12 10:46:15 sso sshd[3185]: Failed password for invalid user avanthi from 123.24.213.188 port 55751 ssh2 ... |
2020-05-12 19:23:52 |
| 51.211.172.38 | attackspambots | Unauthorized connection attempt from IP address 51.211.172.38 on Port 445(SMB) |
2020-05-12 19:47:00 |
| 113.23.6.119 | attack | May 12 05:46:33 web2 sshd[12898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.23.6.119 May 12 05:46:35 web2 sshd[12898]: Failed password for invalid user user1 from 113.23.6.119 port 23599 ssh2 |
2020-05-12 19:21:26 |
| 112.197.71.12 | attack | Unauthorized connection attempt from IP address 112.197.71.12 on Port 445(SMB) |
2020-05-12 19:41:25 |
| 106.13.15.122 | attackspambots | Invalid user connect from 106.13.15.122 port 56990 |
2020-05-12 19:14:19 |
| 113.53.97.43 | attackspambots | Unauthorized connection attempt from IP address 113.53.97.43 on Port 445(SMB) |
2020-05-12 19:38:33 |
| 42.118.182.100 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-05-12 19:51:51 |
| 212.241.16.158 | attackspambots | 20/5/11@23:46:05: FAIL: Alarm-Network address from=212.241.16.158 ... |
2020-05-12 19:47:31 |
| 210.245.52.207 | attack | Unauthorized connection attempt from IP address 210.245.52.207 on Port 445(SMB) |
2020-05-12 19:42:34 |