Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackbots
Apr  5 23:54:52 legacy sshd[22630]: Failed password for root from 106.13.136.3 port 56834 ssh2
Apr  5 23:58:39 legacy sshd[22758]: Failed password for root from 106.13.136.3 port 55570 ssh2
...
2020-04-06 06:04:15
attack
(sshd) Failed SSH login from 106.13.136.3 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 28 05:27:56 s1 sshd[27861]: Invalid user fgu from 106.13.136.3 port 48922
Mar 28 05:27:58 s1 sshd[27861]: Failed password for invalid user fgu from 106.13.136.3 port 48922 ssh2
Mar 28 05:43:07 s1 sshd[28145]: Invalid user xis from 106.13.136.3 port 35746
Mar 28 05:43:09 s1 sshd[28145]: Failed password for invalid user xis from 106.13.136.3 port 35746 ssh2
Mar 28 05:47:09 s1 sshd[28249]: Invalid user mbp from 106.13.136.3 port 33100
2020-03-28 18:09:33
attack
Mar 23 11:42:29 ny01 sshd[27807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Mar 23 11:42:31 ny01 sshd[27807]: Failed password for invalid user nakjimall from 106.13.136.3 port 59906 ssh2
Mar 23 11:46:57 ny01 sshd[29676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
2020-03-24 02:20:56
attackbots
$f2bV_matches
2020-03-20 13:50:59
attackspambots
Invalid user takazawa from 106.13.136.3 port 37408
2020-03-19 18:57:39
attack
Feb 21 07:00:12 mout sshd[7779]: Connection closed by 106.13.136.3 port 45466 [preauth]
2020-02-21 14:17:02
attackspam
Feb  8 16:27:01 lukav-desktop sshd\[15932\]: Invalid user rmt from 106.13.136.3
Feb  8 16:27:01 lukav-desktop sshd\[15932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Feb  8 16:27:03 lukav-desktop sshd\[15932\]: Failed password for invalid user rmt from 106.13.136.3 port 58130 ssh2
Feb  8 16:30:54 lukav-desktop sshd\[15952\]: Invalid user fog from 106.13.136.3
Feb  8 16:30:54 lukav-desktop sshd\[15952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
2020-02-08 22:37:27
attackbotsspam
Feb  3 06:31:23 lnxded64 sshd[25170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Feb  3 06:31:23 lnxded64 sshd[25170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
2020-02-03 13:40:29
attackspambots
Invalid user sabina from 106.13.136.3 port 56780
2020-01-10 23:45:47
attack
$f2bV_matches
2020-01-09 05:07:29
attack
$f2bV_matches
2020-01-08 13:06:36
attackbots
Dec 21 15:54:41 srv206 sshd[11161]: Invalid user bienheureux from 106.13.136.3
...
2019-12-22 00:59:10
attackbots
$f2bV_matches
2019-12-06 07:22:03
attackspambots
Dec  5 04:30:24 gw1 sshd[499]: Failed password for root from 106.13.136.3 port 44588 ssh2
...
2019-12-05 08:31:44
attack
Nov  2 12:50:11 localhost sshd\[16134\]: Invalid user user from 106.13.136.3
Nov  2 12:50:11 localhost sshd\[16134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Nov  2 12:50:13 localhost sshd\[16134\]: Failed password for invalid user user from 106.13.136.3 port 58430 ssh2
Nov  2 12:55:23 localhost sshd\[16350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3  user=root
Nov  2 12:55:25 localhost sshd\[16350\]: Failed password for root from 106.13.136.3 port 37756 ssh2
...
2019-11-02 23:16:53
attackbots
detected by Fail2Ban
2019-11-01 20:16:02
attack
Nov  1 06:54:46 sauna sshd[150641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Nov  1 06:54:49 sauna sshd[150641]: Failed password for invalid user frappe from 106.13.136.3 port 37812 ssh2
...
2019-11-01 12:59:16
attackbotsspam
Oct 30 21:53:28 vps01 sshd[31492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Oct 30 21:53:31 vps01 sshd[31492]: Failed password for invalid user pv@123 from 106.13.136.3 port 39372 ssh2
2019-10-31 05:06:09
attackspambots
Oct 30 08:29:41 MK-Soft-VM6 sshd[13935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3 
Oct 30 08:29:44 MK-Soft-VM6 sshd[13935]: Failed password for invalid user amitech from 106.13.136.3 port 60944 ssh2
...
2019-10-30 15:41:20
attack
Oct 29 07:04:21 root sshd[3174]: Failed password for root from 106.13.136.3 port 51802 ssh2
Oct 29 07:09:50 root sshd[3267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3 
Oct 29 07:09:52 root sshd[3267]: Failed password for invalid user lf from 106.13.136.3 port 60710 ssh2
...
2019-10-29 16:07:37
attackbotsspam
Oct 19 02:14:38 web9 sshd\[6842\]: Invalid user savafr3kingat from 106.13.136.3
Oct 19 02:14:38 web9 sshd\[6842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
Oct 19 02:14:40 web9 sshd\[6842\]: Failed password for invalid user savafr3kingat from 106.13.136.3 port 39156 ssh2
Oct 19 02:20:29 web9 sshd\[7570\]: Invalid user Blade@2017 from 106.13.136.3
Oct 19 02:20:29 web9 sshd\[7570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3
2019-10-19 21:46:09
attackbots
ssh failed login
2019-10-16 11:33:34
attackspam
Automatic report - Banned IP Access
2019-10-14 15:33:15
attackbotsspam
Oct  3 03:14:30 site2 sshd\[3485\]: Invalid user web from 106.13.136.3Oct  3 03:14:33 site2 sshd\[3485\]: Failed password for invalid user web from 106.13.136.3 port 38878 ssh2Oct  3 03:19:11 site2 sshd\[3634\]: Invalid user bernier1 from 106.13.136.3Oct  3 03:19:13 site2 sshd\[3634\]: Failed password for invalid user bernier1 from 106.13.136.3 port 46458 ssh2Oct  3 03:23:56 site2 sshd\[3783\]: Failed password for manager from 106.13.136.3 port 54008 ssh2
...
2019-10-03 08:26:20
Comments on same subnet:
IP Type Details Datetime
106.13.136.8 attackbots
Fail2Ban Ban Triggered
2020-09-23 23:28:10
106.13.136.8 attackbots
Sep 23 01:27:43 ip-172-31-42-142 sshd\[24601\]: Invalid user gy from 106.13.136.8\
Sep 23 01:27:45 ip-172-31-42-142 sshd\[24601\]: Failed password for invalid user gy from 106.13.136.8 port 35400 ssh2\
Sep 23 01:33:18 ip-172-31-42-142 sshd\[24630\]: Invalid user smart from 106.13.136.8\
Sep 23 01:33:20 ip-172-31-42-142 sshd\[24630\]: Failed password for invalid user smart from 106.13.136.8 port 59216 ssh2\
Sep 23 01:34:47 ip-172-31-42-142 sshd\[24634\]: Invalid user eva from 106.13.136.8\
2020-09-23 15:41:03
106.13.136.8 attackbotsspam
SSH Brute-Force Attack
2020-09-23 07:35:11
106.13.136.8 attack
Failed password for invalid user ubuntu from 106.13.136.8 port 57612 ssh2
2020-09-01 18:32:47
106.13.136.8 attack
Aug  3 14:15:13 roki-contabo sshd\[1008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
Aug  3 14:15:14 roki-contabo sshd\[1008\]: Failed password for root from 106.13.136.8 port 60272 ssh2
Aug  3 14:22:19 roki-contabo sshd\[1253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
Aug  3 14:22:21 roki-contabo sshd\[1253\]: Failed password for root from 106.13.136.8 port 45562 ssh2
Aug  3 14:25:45 roki-contabo sshd\[1405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
...
2020-08-03 22:59:22
106.13.136.238 attackspambots
SSH Brute Force
2020-04-29 13:00:43
106.13.136.139 attackbots
2020-03-19T08:56:31.425676linuxbox-skyline sshd[66703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.139  user=root
2020-03-19T08:56:33.758217linuxbox-skyline sshd[66703]: Failed password for root from 106.13.136.139 port 33330 ssh2
...
2020-03-20 04:01:51
106.13.136.139 attack
Mar 13 20:13:25 ncomp sshd[25810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.139  user=root
Mar 13 20:13:27 ncomp sshd[25810]: Failed password for root from 106.13.136.139 port 38510 ssh2
Mar 13 20:16:44 ncomp sshd[25860]: Invalid user superman from 106.13.136.139
2020-03-14 02:54:15
106.13.136.238 attack
Mar 12 00:01:46 plusreed sshd[31761]: Invalid user wp-user from 106.13.136.238
Mar 12 00:01:46 plusreed sshd[31761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238
Mar 12 00:01:46 plusreed sshd[31761]: Invalid user wp-user from 106.13.136.238
Mar 12 00:01:48 plusreed sshd[31761]: Failed password for invalid user wp-user from 106.13.136.238 port 45890 ssh2
...
2020-03-12 19:50:54
106.13.136.73 attackspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-03-10 01:51:00
106.13.136.73 attack
web-1 [ssh] SSH Attack
2020-02-26 22:00:24
106.13.136.73 attackspambots
Feb 13 18:52:32 hpm sshd\[31067\]: Invalid user ronneberg from 106.13.136.73
Feb 13 18:52:32 hpm sshd\[31067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73
Feb 13 18:52:34 hpm sshd\[31067\]: Failed password for invalid user ronneberg from 106.13.136.73 port 34966 ssh2
Feb 13 18:56:47 hpm sshd\[31554\]: Invalid user morita from 106.13.136.73
Feb 13 18:56:47 hpm sshd\[31554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73
2020-02-14 15:13:50
106.13.136.73 attack
Feb  9 23:09:28 lnxmysql61 sshd[19956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73
2020-02-10 06:19:56
106.13.136.238 attackspam
...
2020-02-04 21:29:49
106.13.136.73 attack
Unauthorized connection attempt detected from IP address 106.13.136.73 to port 2220 [J]
2020-02-02 14:12:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.136.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.136.3.			IN	A

;; AUTHORITY SECTION:
.			464	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100203 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 03 08:26:16 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 3.136.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.136.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
49.145.160.220 attackspambots
/.git/HEAD
2020-07-20 03:19:13
165.22.193.229 attackspam
404 NOT FOUND
2020-07-20 03:32:15
112.35.62.225 attackbotsspam
SSH auth scanning - multiple failed logins
2020-07-20 03:31:04
45.10.88.19 attack
Jul 19 18:10:14 master sshd[7777]: Failed password for invalid user any from 45.10.88.19 port 61473 ssh2
Jul 19 18:10:17 master sshd[7779]: Failed password for invalid user support from 45.10.88.19 port 61491 ssh2
Jul 19 18:10:22 master sshd[7782]: Failed password for invalid user admin from 45.10.88.19 port 61496 ssh2
Jul 19 18:10:25 master sshd[7784]: Failed password for invalid user any from 45.10.88.19 port 61529 ssh2
Jul 19 18:10:30 master sshd[7786]: Failed password for root from 45.10.88.19 port 61560 ssh2
2020-07-20 03:53:15
81.133.142.45 attackbotsspam
Jul 19 17:59:19 server sshd[3962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.133.142.45
Jul 19 17:59:21 server sshd[3962]: Failed password for invalid user hsd from 81.133.142.45 port 36180 ssh2
Jul 19 18:05:11 server sshd[5288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.133.142.45
Jul 19 18:05:13 server sshd[5288]: Failed password for invalid user admin from 81.133.142.45 port 52968 ssh2
...
2020-07-20 03:29:36
193.27.228.220 attack
Jul 19 19:52:48 debian-2gb-nbg1-2 kernel: \[17439712.154960\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.27.228.220 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=40645 PROTO=TCP SPT=44102 DPT=56840 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-20 03:17:41
170.130.187.38 attackspambots
Unauthorized connection attempt detected from IP address 170.130.187.38 to port 5900
2020-07-20 03:51:24
159.65.184.79 attackbots
SS5,WP GET /wp-login.php
2020-07-20 03:24:34
213.32.91.71 attackbotsspam
213.32.91.71 - - \[19/Jul/2020:21:42:11 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
213.32.91.71 - - \[19/Jul/2020:21:42:12 +0200\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
213.32.91.71 - - \[19/Jul/2020:21:42:12 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-07-20 03:48:48
27.155.99.122 attackbotsspam
Jul 19 20:24:24 server sshd[59113]: Failed password for invalid user sophia from 27.155.99.122 port 34024 ssh2
Jul 19 20:45:45 server sshd[11282]: Failed password for invalid user sahil from 27.155.99.122 port 49150 ssh2
Jul 19 20:50:49 server sshd[15902]: Failed password for invalid user celeste from 27.155.99.122 port 45192 ssh2
2020-07-20 03:42:06
107.170.91.121 attackbotsspam
...
2020-07-20 03:17:16
222.186.173.215 attackbotsspam
Jul 19 21:17:03 pve1 sshd[4209]: Failed password for root from 222.186.173.215 port 22160 ssh2
Jul 19 21:17:08 pve1 sshd[4209]: Failed password for root from 222.186.173.215 port 22160 ssh2
...
2020-07-20 03:52:22
176.41.148.147 attack
Jul 19 21:05:14 ns381471 sshd[21827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.41.148.147
Jul 19 21:05:17 ns381471 sshd[21827]: Failed password for invalid user administrador from 176.41.148.147 port 34104 ssh2
2020-07-20 03:28:32
188.166.117.213 attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-07-20 03:18:05
77.95.0.59 attack
Failed password for invalid user guest from 77.95.0.59 port 47288 ssh2
2020-07-20 03:27:10

Recently Reported IPs

191.241.145.239 182.50.151.61 123.155.7.52 101.53.143.136
108.235.174.84 55.186.50.196 94.177.242.181 69.88.107.117
160.155.199.248 205.206.161.244 0.200.253.200 173.82.240.55
171.94.57.133 19.150.66.87 208.187.219.180 141.100.147.17
129.220.176.92 76.181.15.155 44.252.246.211 147.173.131.107