Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Apr  3 21:04:33 php1 sshd\[4529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Apr  3 21:04:35 php1 sshd\[4529\]: Failed password for root from 106.13.130.66 port 40622 ssh2
Apr  3 21:09:37 php1 sshd\[5101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Apr  3 21:09:39 php1 sshd\[5101\]: Failed password for root from 106.13.130.66 port 37576 ssh2
Apr  3 21:14:25 php1 sshd\[5483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
2020-04-04 17:57:00
attack
Invalid user ws from 106.13.130.66 port 48216
2020-04-03 23:21:50
attackbots
Mar 26 12:12:34 legacy sshd[6736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Mar 26 12:12:37 legacy sshd[6736]: Failed password for invalid user jboss from 106.13.130.66 port 46144 ssh2
Mar 26 12:14:08 legacy sshd[6755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
...
2020-03-26 20:18:09
attackbots
SSH Authentication Attempts Exceeded
2020-03-24 16:21:44
attackbotsspam
Mar  3 07:10:46 lnxded63 sshd[3915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2020-03-03 15:22:12
attackbots
$f2bV_matches
2020-02-13 16:04:35
attackspam
Unauthorized connection attempt detected from IP address 106.13.130.66 to port 2220 [J]
2020-01-29 15:28:15
attackbots
(sshd) Failed SSH login from 106.13.130.66 (CN/China/-): 5 in the last 3600 secs
2020-01-19 14:48:58
attackspambots
Jan 11 14:23:34 ns37 sshd[6325]: Failed password for root from 106.13.130.66 port 56604 ssh2
Jan 11 14:23:34 ns37 sshd[6325]: Failed password for root from 106.13.130.66 port 56604 ssh2
Jan 11 14:27:50 ns37 sshd[6550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2020-01-11 21:34:09
attackspam
Unauthorized connection attempt detected from IP address 106.13.130.66 to port 2220 [J]
2020-01-05 19:51:47
attackbotsspam
Invalid user jalila from 106.13.130.66 port 38074
2020-01-04 15:53:10
attackbots
Dec 18 00:35:38 linuxvps sshd\[16356\]: Invalid user skjeltorp from 106.13.130.66
Dec 18 00:35:38 linuxvps sshd\[16356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Dec 18 00:35:40 linuxvps sshd\[16356\]: Failed password for invalid user skjeltorp from 106.13.130.66 port 56124 ssh2
Dec 18 00:43:19 linuxvps sshd\[21063\]: Invalid user arianna12345678 from 106.13.130.66
Dec 18 00:43:19 linuxvps sshd\[21063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2019-12-18 14:12:01
attackbots
Dec 14 07:42:07 eventyay sshd[19796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Dec 14 07:42:10 eventyay sshd[19796]: Failed password for invalid user webuser from 106.13.130.66 port 50602 ssh2
Dec 14 07:49:19 eventyay sshd[19987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
...
2019-12-14 15:53:29
attack
Nov 23 08:42:23 OPSO sshd\[17705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Nov 23 08:42:26 OPSO sshd\[17705\]: Failed password for root from 106.13.130.66 port 50126 ssh2
Nov 23 08:47:02 OPSO sshd\[18824\]: Invalid user sprague from 106.13.130.66 port 53344
Nov 23 08:47:02 OPSO sshd\[18824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Nov 23 08:47:03 OPSO sshd\[18824\]: Failed password for invalid user sprague from 106.13.130.66 port 53344 ssh2
2019-11-23 17:40:18
attackbots
Invalid user hjelmtvedt from 106.13.130.66 port 46154
2019-11-14 18:43:52
attack
Oct 28 18:38:18 microserver sshd[53996]: Invalid user lance from 106.13.130.66 port 57776
Oct 28 18:38:18 microserver sshd[53996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Oct 28 18:38:20 microserver sshd[53996]: Failed password for invalid user lance from 106.13.130.66 port 57776 ssh2
Oct 28 18:44:17 microserver sshd[54728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Oct 28 18:44:19 microserver sshd[54728]: Failed password for root from 106.13.130.66 port 36802 ssh2
Oct 28 18:56:10 microserver sshd[56601]: Invalid user wwwtest from 106.13.130.66 port 51338
Oct 28 18:56:10 microserver sshd[56601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Oct 28 18:56:12 microserver sshd[56601]: Failed password for invalid user wwwtest from 106.13.130.66 port 51338 ssh2
Oct 28 19:02:14 microserver sshd[57306]: pam_unix(sshd:auth): authent
2019-10-29 05:07:12
attackbots
2019-10-25T17:40:39.869537scmdmz1 sshd\[28029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
2019-10-25T17:40:42.304598scmdmz1 sshd\[28029\]: Failed password for root from 106.13.130.66 port 36316 ssh2
2019-10-25T17:45:12.229585scmdmz1 sshd\[28386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
...
2019-10-25 23:55:10
attack
Lines containing failures of 106.13.130.66
Oct 22 00:12:33 majoron sshd[20814]: Invalid user kyleh from 106.13.130.66 port 53310
Oct 22 00:12:33 majoron sshd[20814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66 
Oct 22 00:12:35 majoron sshd[20814]: Failed password for invalid user kyleh from 106.13.130.66 port 53310 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.130.66
2019-10-24 18:15:55
attackbotsspam
2019-10-22T15:14:02.076211shield sshd\[9071\]: Invalid user vboxadmin from 106.13.130.66 port 39836
2019-10-22T15:14:02.081000shield sshd\[9071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2019-10-22T15:14:04.297166shield sshd\[9071\]: Failed password for invalid user vboxadmin from 106.13.130.66 port 39836 ssh2
2019-10-22T15:19:41.222492shield sshd\[10218\]: Invalid user yyy from 106.13.130.66 port 48270
2019-10-22T15:19:41.226469shield sshd\[10218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2019-10-23 03:38:55
Comments on same subnet:
IP Type Details Datetime
106.13.130.166 attack
Automatic report - Banned IP Access
2020-10-04 08:51:20
106.13.130.166 attackspambots
Automatic report - Banned IP Access
2020-10-04 01:24:56
106.13.130.208 attackspam
May 14 12:23:16 vlre-nyc-1 sshd\[12889\]: Invalid user deploy from 106.13.130.208
May 14 12:23:16 vlre-nyc-1 sshd\[12889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
May 14 12:23:18 vlre-nyc-1 sshd\[12889\]: Failed password for invalid user deploy from 106.13.130.208 port 53648 ssh2
May 14 12:26:54 vlre-nyc-1 sshd\[13014\]: Invalid user test3 from 106.13.130.208
May 14 12:26:54 vlre-nyc-1 sshd\[13014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
...
2020-05-14 22:35:19
106.13.130.208 attackspambots
2020-05-11T10:00:40.124954randservbullet-proofcloud-66.localdomain sshd[28565]: Invalid user yh from 106.13.130.208 port 56350
2020-05-11T10:00:40.130484randservbullet-proofcloud-66.localdomain sshd[28565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
2020-05-11T10:00:40.124954randservbullet-proofcloud-66.localdomain sshd[28565]: Invalid user yh from 106.13.130.208 port 56350
2020-05-11T10:00:42.297407randservbullet-proofcloud-66.localdomain sshd[28565]: Failed password for invalid user yh from 106.13.130.208 port 56350 ssh2
...
2020-05-11 18:21:20
106.13.130.208 attack
SSH login attempts.
2020-03-30 13:58:54
106.13.130.208 attackbotsspam
Mar 27 06:49:06 mockhub sshd[22872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
Mar 27 06:49:08 mockhub sshd[22872]: Failed password for invalid user jkl from 106.13.130.208 port 33824 ssh2
...
2020-03-28 01:29:28
106.13.130.208 attackbotsspam
Mar 24 01:03:22 silence02 sshd[16057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
Mar 24 01:03:24 silence02 sshd[16057]: Failed password for invalid user cassy from 106.13.130.208 port 46516 ssh2
Mar 24 01:06:43 silence02 sshd[16198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
2020-03-24 10:07:25
106.13.130.80 attack
Invalid user ark from 106.13.130.80 port 47172
2020-03-20 18:18:53
106.13.130.133 attackspambots
Dec 27 15:44:13 serwer sshd\[31073\]: Invalid user pcap from 106.13.130.133 port 57854
Dec 27 15:44:13 serwer sshd\[31073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.133
Dec 27 15:44:15 serwer sshd\[31073\]: Failed password for invalid user pcap from 106.13.130.133 port 57854 ssh2
...
2019-12-28 06:46:19
106.13.130.133 attack
SSH brute-force: detected 6 distinct usernames within a 24-hour window.
2019-12-23 05:19:54
106.13.130.133 attackbotsspam
Lines containing failures of 106.13.130.133
Dec 18 18:41:09 shared07 sshd[14776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.133  user=r.r
Dec 18 18:41:11 shared07 sshd[14776]: Failed password for r.r from 106.13.130.133 port 57322 ssh2
Dec 18 18:41:11 shared07 sshd[14776]: Received disconnect from 106.13.130.133 port 57322:11: Bye Bye [preauth]
Dec 18 18:41:11 shared07 sshd[14776]: Disconnected from authenticating user r.r 106.13.130.133 port 57322 [preauth]
Dec 18 19:16:44 shared07 sshd[27604]: Invalid user komachi from 106.13.130.133 port 38438
Dec 18 19:16:44 shared07 sshd[27604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.133
Dec 18 19:16:46 shared07 sshd[27604]: Failed password for invalid user komachi from 106.13.130.133 port 38438 ssh2
Dec 18 19:16:46 shared07 sshd[27604]: Received disconnect from 106.13.130.133 port 38438:11: Bye Bye [preauth]
Dec 18 1........
------------------------------
2019-12-21 04:41:31
106.13.130.146 attackbotsspam
Nov  3 10:57:41 DAAP sshd[24130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146  user=root
Nov  3 10:57:43 DAAP sshd[24130]: Failed password for root from 106.13.130.146 port 48136 ssh2
Nov  3 11:02:42 DAAP sshd[24193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146  user=root
Nov  3 11:02:44 DAAP sshd[24193]: Failed password for root from 106.13.130.146 port 56838 ssh2
Nov  3 11:07:33 DAAP sshd[24206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146  user=root
Nov  3 11:07:36 DAAP sshd[24206]: Failed password for root from 106.13.130.146 port 37274 ssh2
...
2019-11-03 18:51:59
106.13.130.146 attackspambots
Nov  2 04:40:48 mail sshd[24852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146  user=root
Nov  2 04:40:49 mail sshd[24852]: Failed password for root from 106.13.130.146 port 53332 ssh2
Nov  2 04:48:12 mail sshd[3797]: Invalid user 2897 from 106.13.130.146
Nov  2 04:48:12 mail sshd[3797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146
Nov  2 04:48:12 mail sshd[3797]: Invalid user 2897 from 106.13.130.146
Nov  2 04:48:15 mail sshd[3797]: Failed password for invalid user 2897 from 106.13.130.146 port 44726 ssh2
...
2019-11-02 16:30:37
106.13.130.146 attack
2019-11-01T13:00:16.650543abusebot-2.cloudsearch.cf sshd\[8729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.146  user=root
2019-11-01 21:30:44
106.13.130.218 attackbots
Lines containing failures of 106.13.130.218
Nov  1 03:21:11 shared04 sshd[11671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.218  user=r.r
Nov  1 03:21:13 shared04 sshd[11671]: Failed password for r.r from 106.13.130.218 port 59700 ssh2
Nov  1 03:21:13 shared04 sshd[11671]: Received disconnect from 106.13.130.218 port 59700:11: Bye Bye [preauth]
Nov  1 03:21:13 shared04 sshd[11671]: Disconnected from authenticating user r.r 106.13.130.218 port 59700 [preauth]
Nov  1 03:39:37 shared04 sshd[16278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.218  user=r.r
Nov  1 03:39:39 shared04 sshd[16278]: Failed password for r.r from 106.13.130.218 port 47828 ssh2
Nov  1 03:39:39 shared04 sshd[16278]: Received disconnect from 106.13.130.218 port 47828:11: Bye Bye [preauth]
Nov  1 03:39:39 shared04 sshd[16278]: Disconnected from authenticating user r.r 106.13.130.218 port 47828........
------------------------------
2019-11-01 16:19:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.130.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54348
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.130.66.			IN	A

;; AUTHORITY SECTION:
.			518	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102201 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 23 03:38:52 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 66.130.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.130.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
190.5.228.74 attack
20 attempts against mh-ssh on cloud
2020-09-15 22:38:14
178.128.61.101 attack
Unauthorized SSH login attempts
2020-09-15 22:47:38
91.121.176.34 attack
2020-09-15T16:00:06.742608ks3355764 sshd[20749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.176.34  user=root
2020-09-15T16:00:08.772953ks3355764 sshd[20749]: Failed password for root from 91.121.176.34 port 47276 ssh2
...
2020-09-15 22:40:41
188.92.213.183 attack
Unauthorized SMTP/IMAP/POP3 connection attempt
2020-09-15 23:01:43
152.89.216.33 attack
SSH/22 MH Probe, BF, Hack -
2020-09-15 22:38:52
5.188.84.119 attack
0,17-02/03 [bc01/m09] PostRequest-Spammer scoring: essen
2020-09-15 22:41:16
157.245.200.68 attackspambots
$f2bV_matches
2020-09-15 22:42:34
208.109.13.208 attackbots
Unauthorized SSH login attempts
2020-09-15 22:51:51
36.156.24.91 attack
Honeypot hit.
2020-09-15 22:53:35
185.220.101.8 attackspam
Sep 15 16:22:14 serwer sshd\[15958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.8  user=root
Sep 15 16:22:16 serwer sshd\[15958\]: Failed password for root from 185.220.101.8 port 29968 ssh2
Sep 15 16:22:18 serwer sshd\[15958\]: Failed password for root from 185.220.101.8 port 29968 ssh2
...
2020-09-15 22:42:07
103.151.118.227 attackbotsspam
SIP/5060 Probe, BF, Hack -
2020-09-15 22:34:33
218.92.0.138 attackbotsspam
2020-09-15T16:02:22.787282ns386461 sshd\[27997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
2020-09-15T16:02:24.486328ns386461 sshd\[27997\]: Failed password for root from 218.92.0.138 port 16342 ssh2
2020-09-15T16:02:27.513123ns386461 sshd\[27997\]: Failed password for root from 218.92.0.138 port 16342 ssh2
2020-09-15T16:02:30.950511ns386461 sshd\[27997\]: Failed password for root from 218.92.0.138 port 16342 ssh2
2020-09-15T16:02:35.451617ns386461 sshd\[27997\]: Failed password for root from 218.92.0.138 port 16342 ssh2
...
2020-09-15 22:44:07
156.54.168.71 attack
Brute-force attempt banned
2020-09-15 22:50:06
104.154.147.52 attack
Sep 15 16:08:10 *hidden* sshd[50155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.154.147.52 user=root Sep 15 16:08:12 *hidden* sshd[50155]: Failed password for *hidden* from 104.154.147.52 port 41475 ssh2 Sep 15 16:10:36 *hidden* sshd[50919]: Invalid user digitaluser from 104.154.147.52 port 34371
2020-09-15 22:33:59
201.20.185.14 attackbotsspam
Sep 14 18:36:48 mail.srvfarm.net postfix/smtpd[2076885]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed: 
Sep 14 18:36:49 mail.srvfarm.net postfix/smtpd[2076885]: lost connection after AUTH from unknown[201.20.185.14]
Sep 14 18:38:10 mail.srvfarm.net postfix/smtpd[2076880]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed: 
Sep 14 18:38:10 mail.srvfarm.net postfix/smtpd[2076880]: lost connection after AUTH from unknown[201.20.185.14]
Sep 14 18:39:03 mail.srvfarm.net postfix/smtpd[2073290]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed:
2020-09-15 22:59:32

Recently Reported IPs

3.230.119.80 229.25.58.147 158.80.138.126 105.104.191.59
103.133.49.113 12.20.109.176 113.16.252.174 209.126.140.216
209.149.207.2 77.136.205.4 169.156.83.29 120.111.147.222
69.63.95.184 50.244.101.214 183.138.30.218 156.62.55.216
78.228.172.123 130.39.146.85 186.80.180.241 76.249.195.99