Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Invalid user ark from 106.13.130.80 port 47172
2020-03-20 18:18:53
Comments on same subnet:
IP Type Details Datetime
106.13.130.166 attack
Automatic report - Banned IP Access
2020-10-04 08:51:20
106.13.130.166 attackspambots
Automatic report - Banned IP Access
2020-10-04 01:24:56
106.13.130.208 attackspam
May 14 12:23:16 vlre-nyc-1 sshd\[12889\]: Invalid user deploy from 106.13.130.208
May 14 12:23:16 vlre-nyc-1 sshd\[12889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
May 14 12:23:18 vlre-nyc-1 sshd\[12889\]: Failed password for invalid user deploy from 106.13.130.208 port 53648 ssh2
May 14 12:26:54 vlre-nyc-1 sshd\[13014\]: Invalid user test3 from 106.13.130.208
May 14 12:26:54 vlre-nyc-1 sshd\[13014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
...
2020-05-14 22:35:19
106.13.130.208 attackspambots
2020-05-11T10:00:40.124954randservbullet-proofcloud-66.localdomain sshd[28565]: Invalid user yh from 106.13.130.208 port 56350
2020-05-11T10:00:40.130484randservbullet-proofcloud-66.localdomain sshd[28565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
2020-05-11T10:00:40.124954randservbullet-proofcloud-66.localdomain sshd[28565]: Invalid user yh from 106.13.130.208 port 56350
2020-05-11T10:00:42.297407randservbullet-proofcloud-66.localdomain sshd[28565]: Failed password for invalid user yh from 106.13.130.208 port 56350 ssh2
...
2020-05-11 18:21:20
106.13.130.66 attackspambots
Apr  3 21:04:33 php1 sshd\[4529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Apr  3 21:04:35 php1 sshd\[4529\]: Failed password for root from 106.13.130.66 port 40622 ssh2
Apr  3 21:09:37 php1 sshd\[5101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
Apr  3 21:09:39 php1 sshd\[5101\]: Failed password for root from 106.13.130.66 port 37576 ssh2
Apr  3 21:14:25 php1 sshd\[5483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66  user=root
2020-04-04 17:57:00
106.13.130.66 attack
Invalid user ws from 106.13.130.66 port 48216
2020-04-03 23:21:50
106.13.130.208 attack
SSH login attempts.
2020-03-30 13:58:54
106.13.130.208 attackbotsspam
Mar 27 06:49:06 mockhub sshd[22872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
Mar 27 06:49:08 mockhub sshd[22872]: Failed password for invalid user jkl from 106.13.130.208 port 33824 ssh2
...
2020-03-28 01:29:28
106.13.130.66 attackbots
Mar 26 12:12:34 legacy sshd[6736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
Mar 26 12:12:37 legacy sshd[6736]: Failed password for invalid user jboss from 106.13.130.66 port 46144 ssh2
Mar 26 12:14:08 legacy sshd[6755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
...
2020-03-26 20:18:09
106.13.130.66 attackbots
SSH Authentication Attempts Exceeded
2020-03-24 16:21:44
106.13.130.208 attackbotsspam
Mar 24 01:03:22 silence02 sshd[16057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
Mar 24 01:03:24 silence02 sshd[16057]: Failed password for invalid user cassy from 106.13.130.208 port 46516 ssh2
Mar 24 01:06:43 silence02 sshd[16198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.208
2020-03-24 10:07:25
106.13.130.66 attackbotsspam
Mar  3 07:10:46 lnxded63 sshd[3915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.130.66
2020-03-03 15:22:12
106.13.130.66 attackbots
$f2bV_matches
2020-02-13 16:04:35
106.13.130.66 attackspam
Unauthorized connection attempt detected from IP address 106.13.130.66 to port 2220 [J]
2020-01-29 15:28:15
106.13.130.66 attackbots
(sshd) Failed SSH login from 106.13.130.66 (CN/China/-): 5 in the last 3600 secs
2020-01-19 14:48:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.130.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.130.80.			IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032000 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 20 18:18:49 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 80.130.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.130.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
66.49.131.65 attackspam
2020-10-06 UTC: (41x) - root(41x)
2020-10-07 18:20:13
118.24.80.229 attackspam
118.24.80.229 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  7 04:57:54 jbs1 sshd[26178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.224.88  user=root
Oct  7 05:01:18 jbs1 sshd[27501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.80.229  user=root
Oct  7 04:57:56 jbs1 sshd[26178]: Failed password for root from 49.234.224.88 port 37752 ssh2
Oct  7 04:55:59 jbs1 sshd[25429]: Failed password for root from 91.214.114.7 port 42498 ssh2
Oct  7 04:59:01 jbs1 sshd[26601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163  user=root
Oct  7 04:59:04 jbs1 sshd[26601]: Failed password for root from 49.236.203.163 port 48476 ssh2

IP Addresses Blocked:

49.234.224.88 (CN/China/-)
2020-10-07 18:08:20
36.69.118.17 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-07 18:13:34
89.97.157.120 attackbots
SSH/22 MH Probe, BF, Hack -
2020-10-07 17:45:31
23.95.186.189 attackbots
$f2bV_matches
2020-10-07 18:07:13
139.162.122.110 attackbots
SSH login attempts.
2020-10-07 17:59:19
106.75.217.16 attackbotsspam
Attempted connection to port 4243.
2020-10-07 18:16:49
116.88.140.247 attackspambots
Automatic report - Port Scan Attack
2020-10-07 18:11:25
182.156.218.194 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: static-194.218.156.182-tataidc.co.in.
2020-10-07 18:19:59
202.134.160.99 attackbots
fail2ban
2020-10-07 18:09:24
64.68.116.203 attack
recursive DNS query (.)
2020-10-07 18:12:59
222.186.42.213 attackbots
Oct  7 11:50:07 santamaria sshd\[554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
Oct  7 11:50:10 santamaria sshd\[554\]: Failed password for root from 222.186.42.213 port 64662 ssh2
Oct  7 11:50:16 santamaria sshd\[556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213  user=root
...
2020-10-07 17:50:49
46.161.27.174 attack
Oct  7 11:48:05 host2 sshd[1690347]: Invalid user odroid from 46.161.27.174 port 46648
Oct  7 11:48:05 host2 sshd[1690347]: Invalid user odroid from 46.161.27.174 port 46648
Oct  7 11:48:05 host2 sshd[1690347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.161.27.174 
Oct  7 11:48:05 host2 sshd[1690347]: Invalid user odroid from 46.161.27.174 port 46648
Oct  7 11:48:07 host2 sshd[1690347]: Failed password for invalid user odroid from 46.161.27.174 port 46648 ssh2
...
2020-10-07 17:53:58
83.139.129.12 attackspam
xmlrpc attack
2020-10-07 17:55:14
183.16.101.199 attackspambots
ICMP MH Probe, Scan /Distributed -
2020-10-07 17:42:27

Recently Reported IPs

142.51.237.126 95.32.228.54 97.110.200.176 24.190.94.212
107.155.56.229 37.187.125.32 110.228.254.148 171.237.104.17
103.144.77.242 94.156.125.196 103.37.201.178 106.13.25.112
46.239.30.174 217.112.142.164 97.26.173.156 134.73.51.149
119.160.65.150 63.82.48.8 94.179.104.127 12.136.16.151