Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
SSH login attempts with user root at 2020-01-02.
2020-01-03 03:26:13
Comments on same subnet:
IP Type Details Datetime
106.13.114.54 attackbots
Unauthorized connection attempt detected from IP address 106.13.114.54 to port 6379 [T]
2020-04-15 01:28:57
106.13.114.112 attack
Invalid user teampspeak from 106.13.114.112 port 36538
2020-04-12 14:01:46
106.13.114.228 attack
Mar 29 01:20:39 hosting sshd[22175]: Invalid user yxg from 106.13.114.228 port 50714
...
2020-03-29 07:22:31
106.13.114.228 attackspambots
2020-03-05T08:03:19.215096vps751288.ovh.net sshd\[27576\]: Invalid user deployer from 106.13.114.228 port 44340
2020-03-05T08:03:19.220942vps751288.ovh.net sshd\[27576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228
2020-03-05T08:03:21.476775vps751288.ovh.net sshd\[27576\]: Failed password for invalid user deployer from 106.13.114.228 port 44340 ssh2
2020-03-05T08:09:25.884007vps751288.ovh.net sshd\[27615\]: Invalid user demo from 106.13.114.228 port 55728
2020-03-05T08:09:25.891737vps751288.ovh.net sshd\[27615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228
2020-03-05 15:12:25
106.13.114.228 attackbotsspam
Feb  9 16:26:34 server sshd\[22839\]: Invalid user ayl from 106.13.114.228
Feb  9 16:26:34 server sshd\[22839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 
Feb  9 16:26:36 server sshd\[22839\]: Failed password for invalid user ayl from 106.13.114.228 port 53806 ssh2
Feb  9 16:30:20 server sshd\[23555\]: Invalid user xws from 106.13.114.228
Feb  9 16:30:20 server sshd\[23555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 
...
2020-02-10 04:09:46
106.13.114.26 attack
Feb  9 06:10:13 mockhub sshd[2453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26
Feb  9 06:10:15 mockhub sshd[2453]: Failed password for invalid user vji from 106.13.114.26 port 56546 ssh2
...
2020-02-10 00:43:01
106.13.114.228 attackbots
Feb  9 11:32:22 vps647732 sshd[16234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228
Feb  9 11:32:24 vps647732 sshd[16234]: Failed password for invalid user ylg from 106.13.114.228 port 56922 ssh2
...
2020-02-09 21:14:18
106.13.114.26 attackbots
$f2bV_matches
2020-02-09 16:34:35
106.13.114.228 attackspam
Jan  1 10:29:41 plusreed sshd[16386]: Invalid user dragana from 106.13.114.228
...
2020-01-01 23:36:48
106.13.114.26 attackbots
ssh failed login
2020-01-01 22:41:25
106.13.114.228 attack
Jan  1 06:24:06 v22018086721571380 sshd[7111]: Failed password for invalid user pcap from 106.13.114.228 port 52914 ssh2
Jan  1 07:25:33 v22018086721571380 sshd[13735]: Failed password for invalid user semler from 106.13.114.228 port 35666 ssh2
2020-01-01 17:16:01
106.13.114.26 attackspambots
Dec 31 05:56:19 163-172-32-151 sshd[7205]: Invalid user fupeng from 106.13.114.26 port 59740
...
2019-12-31 13:39:00
106.13.114.26 attackbots
Dec 28 05:49:40 itv-usvr-02 sshd[481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26  user=root
Dec 28 05:52:34 itv-usvr-02 sshd[518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26  user=root
Dec 28 05:55:26 itv-usvr-02 sshd[558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26
2019-12-28 08:00:57
106.13.114.26 attackbots
Dec 16 04:37:47 web1 sshd\[26051\]: Invalid user web from 106.13.114.26
Dec 16 04:37:47 web1 sshd\[26051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26
Dec 16 04:37:49 web1 sshd\[26051\]: Failed password for invalid user web from 106.13.114.26 port 54744 ssh2
Dec 16 04:45:51 web1 sshd\[27080\]: Invalid user yoyo from 106.13.114.26
Dec 16 04:45:51 web1 sshd\[27080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26
2019-12-16 22:56:36
106.13.114.228 attackspam
Dec 10 23:13:42 server sshd\[9291\]: Failed password for invalid user muralidhar from 106.13.114.228 port 40754 ssh2
Dec 11 09:08:48 server sshd\[20217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228  user=root
Dec 11 09:08:50 server sshd\[20217\]: Failed password for root from 106.13.114.228 port 38700 ssh2
Dec 11 09:24:54 server sshd\[24470\]: Invalid user kybernetikk from 106.13.114.228
Dec 11 09:24:54 server sshd\[24470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 
...
2019-12-11 21:26:04
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.114.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50441
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.114.2.			IN	A

;; AUTHORITY SECTION:
.			449	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010200 1800 900 604800 86400

;; Query time: 323 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 03 03:26:10 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 2.114.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.114.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.76.36.158 attack
(sshd) Failed SSH login from 180.76.36.158 (CN/China/-): 5 in the last 3600 secs
2020-05-24 12:41:36
141.98.9.160 attackbots
May 24 06:17:10 localhost sshd\[17324\]: Invalid user user from 141.98.9.160
May 24 06:17:10 localhost sshd\[17324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
May 24 06:17:12 localhost sshd\[17324\]: Failed password for invalid user user from 141.98.9.160 port 43131 ssh2
May 24 06:17:34 localhost sshd\[17366\]: Invalid user guest from 141.98.9.160
May 24 06:17:34 localhost sshd\[17366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
...
2020-05-24 12:40:21
222.186.175.183 attackspam
Brute force attempt
2020-05-24 12:36:56
194.26.25.109 attackbotsspam
SmallBizIT.US 8 packets to tcp(4245,4415,4459,4472,4498,4519,4541,4599)
2020-05-24 12:48:46
141.98.81.83 attackspambots
$f2bV_matches
2020-05-24 12:43:59
222.186.175.169 attackspam
May 24 04:32:51 ip-172-31-61-156 sshd[10485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169  user=root
May 24 04:32:53 ip-172-31-61-156 sshd[10485]: Failed password for root from 222.186.175.169 port 13146 ssh2
...
2020-05-24 12:51:21
61.91.33.22 attackspam
Dovecot Invalid User Login Attempt.
2020-05-24 12:38:37
183.89.214.144 attack
(imapd) Failed IMAP login from 183.89.214.144 (TH/Thailand/mx-ll-183.89.214-144.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 24 08:24:58 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=183.89.214.144, lip=5.63.12.44, TLS: Connection closed, session=<9ekT01ym8J63WdaQ>
2020-05-24 13:06:15
45.133.9.4 attack
May 24 06:23:56 inter-technics sshd[24598]: Invalid user ipe from 45.133.9.4 port 33194
May 24 06:23:56 inter-technics sshd[24598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.133.9.4
May 24 06:23:56 inter-technics sshd[24598]: Invalid user ipe from 45.133.9.4 port 33194
May 24 06:23:58 inter-technics sshd[24598]: Failed password for invalid user ipe from 45.133.9.4 port 33194 ssh2
May 24 06:27:23 inter-technics sshd[5133]: Invalid user ijm from 45.133.9.4 port 38776
...
2020-05-24 12:32:57
27.78.14.83 attack
May 24 06:28:11 nextcloud sshd\[31396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.78.14.83  user=root
May 24 06:28:13 nextcloud sshd\[31396\]: Failed password for root from 27.78.14.83 port 34514 ssh2
May 24 06:29:12 nextcloud sshd\[32479\]: Invalid user admin from 27.78.14.83
2020-05-24 12:36:20
211.169.249.231 attackspam
May 24 06:24:59 ns382633 sshd\[17004\]: Invalid user pnz from 211.169.249.231 port 58670
May 24 06:24:59 ns382633 sshd\[17004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.231
May 24 06:25:01 ns382633 sshd\[17004\]: Failed password for invalid user pnz from 211.169.249.231 port 58670 ssh2
May 24 06:29:26 ns382633 sshd\[18743\]: Invalid user wangyan from 211.169.249.231 port 55208
May 24 06:29:26 ns382633 sshd\[18743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.231
2020-05-24 13:05:42
54.38.242.206 attack
Invalid user qba from 54.38.242.206 port 48626
2020-05-24 13:04:01
37.59.60.115 attackbots
37.59.60.115 - - [24/May/2020:05:55:12 +0200] "GET /wp-login.php HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.59.60.115 - - [24/May/2020:05:55:14 +0200] "POST /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.59.60.115 - - [24/May/2020:05:55:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-24 12:50:44
93.81.217.93 attackbots
1590292490 - 05/24/2020 05:54:50 Host: 93.81.217.93/93.81.217.93 Port: 445 TCP Blocked
2020-05-24 13:10:55
216.244.66.237 attack
20 attempts against mh-misbehave-ban on tree
2020-05-24 12:54:45

Recently Reported IPs

177.55.66.72 61.80.7.254 106.12.211.2 180.211.29.17
216.200.61.93 12.94.56.45 31.249.78.255 106.12.3.1
188.52.245.179 106.12.100.1 139.168.232.26 176.250.43.254
68.12.249.188 106.0.36.1 1.215.26.113 124.161.160.120
104.248.163.1 90.113.90.28 136.143.219.253 81.111.41.110