106.13.136.73 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-03-10 01:51:00
attack	web-1 [ssh] SSH Attack	2020-02-26 22:00:24
attackspambots	Feb 13 18:52:32 hpm sshd\[31067\]: Invalid user ronneberg from 106.13.136.73 Feb 13 18:52:32 hpm sshd\[31067\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73 Feb 13 18:52:34 hpm sshd\[31067\]: Failed password for invalid user ronneberg from 106.13.136.73 port 34966 ssh2 Feb 13 18:56:47 hpm sshd\[31554\]: Invalid user morita from 106.13.136.73 Feb 13 18:56:47 hpm sshd\[31554\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73	2020-02-14 15:13:50
attack	Feb 9 23:09:28 lnxmysql61 sshd[19956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.73	2020-02-10 06:19:56
attack	Unauthorized connection attempt detected from IP address 106.13.136.73 to port 2220 [J]	2020-02-02 14:12:21

Comments on same subnet:

IP	Type	Details	Datetime
106.13.136.8	attackbots	Fail2Ban Ban Triggered	2020-09-23 23:28:10
106.13.136.8	attackbots	Sep 23 01:27:43 ip-172-31-42-142 sshd\[24601\]: Invalid user gy from 106.13.136.8\ Sep 23 01:27:45 ip-172-31-42-142 sshd\[24601\]: Failed password for invalid user gy from 106.13.136.8 port 35400 ssh2\ Sep 23 01:33:18 ip-172-31-42-142 sshd\[24630\]: Invalid user smart from 106.13.136.8\ Sep 23 01:33:20 ip-172-31-42-142 sshd\[24630\]: Failed password for invalid user smart from 106.13.136.8 port 59216 ssh2\ Sep 23 01:34:47 ip-172-31-42-142 sshd\[24634\]: Invalid user eva from 106.13.136.8\	2020-09-23 15:41:03
106.13.136.8	attackbotsspam	SSH Brute-Force Attack	2020-09-23 07:35:11
106.13.136.8	attack	Failed password for invalid user ubuntu from 106.13.136.8 port 57612 ssh2	2020-09-01 18:32:47
106.13.136.8	attack	Aug 3 14:15:13 roki-contabo sshd\[1008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8 user=root Aug 3 14:15:14 roki-contabo sshd\[1008\]: Failed password for root from 106.13.136.8 port 60272 ssh2 Aug 3 14:22:19 roki-contabo sshd\[1253\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8 user=root Aug 3 14:22:21 roki-contabo sshd\[1253\]: Failed password for root from 106.13.136.8 port 45562 ssh2 Aug 3 14:25:45 roki-contabo sshd\[1405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8 user=root ...	2020-08-03 22:59:22
106.13.136.238	attackspambots	SSH Brute Force	2020-04-29 13:00:43
106.13.136.3	attackbots	Apr 5 23:54:52 legacy sshd[22630]: Failed password for root from 106.13.136.3 port 56834 ssh2 Apr 5 23:58:39 legacy sshd[22758]: Failed password for root from 106.13.136.3 port 55570 ssh2 ...	2020-04-06 06:04:15
106.13.136.3	attack	(sshd) Failed SSH login from 106.13.136.3 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 28 05:27:56 s1 sshd[27861]: Invalid user fgu from 106.13.136.3 port 48922 Mar 28 05:27:58 s1 sshd[27861]: Failed password for invalid user fgu from 106.13.136.3 port 48922 ssh2 Mar 28 05:43:07 s1 sshd[28145]: Invalid user xis from 106.13.136.3 port 35746 Mar 28 05:43:09 s1 sshd[28145]: Failed password for invalid user xis from 106.13.136.3 port 35746 ssh2 Mar 28 05:47:09 s1 sshd[28249]: Invalid user mbp from 106.13.136.3 port 33100	2020-03-28 18:09:33
106.13.136.3	attack	Mar 23 11:42:29 ny01 sshd[27807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3 Mar 23 11:42:31 ny01 sshd[27807]: Failed password for invalid user nakjimall from 106.13.136.3 port 59906 ssh2 Mar 23 11:46:57 ny01 sshd[29676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.3	2020-03-24 02:20:56
106.13.136.3	attackbots	$f2bV_matches	2020-03-20 13:50:59
106.13.136.139	attackbots	2020-03-19T08:56:31.425676linuxbox-skyline sshd[66703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.139 user=root 2020-03-19T08:56:33.758217linuxbox-skyline sshd[66703]: Failed password for root from 106.13.136.139 port 33330 ssh2 ...	2020-03-20 04:01:51
106.13.136.3	attackspambots	Invalid user takazawa from 106.13.136.3 port 37408	2020-03-19 18:57:39
106.13.136.139	attack	Mar 13 20:13:25 ncomp sshd[25810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.139 user=root Mar 13 20:13:27 ncomp sshd[25810]: Failed password for root from 106.13.136.139 port 38510 ssh2 Mar 13 20:16:44 ncomp sshd[25860]: Invalid user superman from 106.13.136.139	2020-03-14 02:54:15
106.13.136.238	attack	Mar 12 00:01:46 plusreed sshd[31761]: Invalid user wp-user from 106.13.136.238 Mar 12 00:01:46 plusreed sshd[31761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.238 Mar 12 00:01:46 plusreed sshd[31761]: Invalid user wp-user from 106.13.136.238 Mar 12 00:01:48 plusreed sshd[31761]: Failed password for invalid user wp-user from 106.13.136.238 port 45890 ssh2 ...	2020-03-12 19:50:54
106.13.136.3	attack	Feb 21 07:00:12 mout sshd[7779]: Connection closed by 106.13.136.3 port 45466 [preauth]	2020-02-21 14:17:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.136.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51964
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.136.73.			IN	A

;; AUTHORITY SECTION:
.			363	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020200 1800 900 604800 86400

;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 02 14:12:15 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 73.136.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 73.136.13.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
64.31.33.70	attackspam	\[2019-07-06 13:22:03\] NOTICE\[13443\] chan_sip.c: Registration from '"2001" \' failed for '64.31.33.70:5549' - Wrong password \[2019-07-06 13:22:03\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-06T13:22:03.987-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2001",SessionID="0x7f02f8335788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.33.70/5549",Challenge="4819752f",ReceivedChallenge="4819752f",ReceivedHash="ffd24243384bcee6a7c924cec70ba0f5" \[2019-07-06 13:22:04\] NOTICE\[13443\] chan_sip.c: Registration from '"2001" \' failed for '64.31.33.70:5549' - Wrong password \[2019-07-06 13:22:04\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-06T13:22:04.101-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2001",SessionID="0x7f02f801bd88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-07 01:26:04
202.84.33.214	attackbots	Jul 6 20:21:20 vtv3 sshd\[6628\]: Invalid user nen from 202.84.33.214 port 45692 Jul 6 20:21:20 vtv3 sshd\[6628\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.84.33.214 Jul 6 20:21:22 vtv3 sshd\[6628\]: Failed password for invalid user nen from 202.84.33.214 port 45692 ssh2 Jul 6 20:30:30 vtv3 sshd\[11041\]: Invalid user compta from 202.84.33.214 port 37895 Jul 6 20:30:30 vtv3 sshd\[11041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.84.33.214	2019-07-07 01:48:58
45.168.74.6	attack	NAME : 20.399.723/0001-12 CIDR : 45.168.72.0/22 DDoS attack Brazil - block certain countries :) IP: 45.168.74.6 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-07-07 01:42:31
185.234.218.238	attack	Jul 6 18:47:14 mail postfix/smtpd\[18230\]: warning: unknown\[185.234.218.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 6 18:57:34 mail postfix/smtpd\[18230\]: warning: unknown\[185.234.218.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 6 19:07:53 mail postfix/smtpd\[18637\]: warning: unknown\[185.234.218.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 6 19:38:52 mail postfix/smtpd\[19190\]: warning: unknown\[185.234.218.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-07-07 01:56:02
182.75.248.254	attackspam	Jul 6 15:26:23 tux-35-217 sshd\[10087\]: Invalid user uftp from 182.75.248.254 port 39176 Jul 6 15:26:23 tux-35-217 sshd\[10087\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254 Jul 6 15:26:25 tux-35-217 sshd\[10087\]: Failed password for invalid user uftp from 182.75.248.254 port 39176 ssh2 Jul 6 15:29:04 tux-35-217 sshd\[10096\]: Invalid user zhanghua from 182.75.248.254 port 35682 Jul 6 15:29:04 tux-35-217 sshd\[10096\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254 ...	2019-07-07 01:38:17
212.3.148.52	attackbots	[portscan] Port scan	2019-07-07 01:35:12
59.88.202.200	attackspambots	Jul 6 18:56:12 ubuntu-2gb-nbg1-dc3-1 sshd[20366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.88.202.200 Jul 6 18:56:14 ubuntu-2gb-nbg1-dc3-1 sshd[20366]: Failed password for invalid user weixinapp from 59.88.202.200 port 47826 ssh2 ...	2019-07-07 01:46:38
81.22.45.253	attack	Port scan on 9 port(s): 1935 4200 5200 6364 11001 13619 20464 23748 26139	2019-07-07 01:37:49
187.85.214.44	attack	failed_logins	2019-07-07 02:10:06
142.44.243.126	attack	detected by Fail2Ban	2019-07-07 01:43:09
125.191.33.98	attackspam	Autoban 125.191.33.98 AUTH/CONNECT	2019-07-07 01:24:59
165.22.32.249	attack	RDPBruteCAu	2019-07-07 01:23:59
2.136.114.40	attack	SSH Bruteforce Attack	2019-07-07 01:27:40
178.128.117.55	attack	Jul 3 16:50:15 linuxrulz sshd[19290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.117.55 user=r.r Jul 3 16:50:17 linuxrulz sshd[19290]: Failed password for r.r from 178.128.117.55 port 43274 ssh2 Jul 3 16:50:17 linuxrulz sshd[19290]: Connection closed by 178.128.117.55 port 43274 [preauth] Jul 3 16:50:18 linuxrulz sshd[19293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.117.55 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=178.128.117.55	2019-07-07 01:52:12
41.222.196.57	attackspambots	Jul 6 15:53:26 localhost sshd\[15984\]: Invalid user test from 41.222.196.57 Jul 6 15:53:26 localhost sshd\[15984\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.222.196.57 Jul 6 15:53:28 localhost sshd\[15984\]: Failed password for invalid user test from 41.222.196.57 port 59144 ssh2 Jul 6 15:56:18 localhost sshd\[16155\]: Invalid user grafana from 41.222.196.57 Jul 6 15:56:18 localhost sshd\[16155\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.222.196.57 ...	2019-07-07 02:00:38

Recently Reported IPs

208.37.213.142	49.43.85.190	72.247.160.20	171.241.16.119
204.4.152.90	202.196.114.216	114.244.106.93	151.136.34.28
52.12.139.170	2.68.222.192	218.234.40.64	173.195.225.63
192.222.180.10	107.180.79.52	137.117.182.16	42.231.162.14
196.246.8.216	164.164.122.56	126.235.32.190	152.236.42.37