Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-08-13 07:50:30
attackspam
Jul  4 14:13:49 debian-2gb-nbg1-2 kernel: \[16123447.427878\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.13.138.162 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=10958 PROTO=TCP SPT=56704 DPT=14441 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-04 20:59:09
attackspambots
 TCP (SYN) 106.13.138.162:59032 -> port 66, len 44
2020-06-02 04:48:48
attackspambots
SSH Brute Force
2020-04-29 13:00:17
attack
(sshd) Failed SSH login from 106.13.138.162 (CN/China/-): 5 in the last 3600 secs
2020-04-11 14:16:54
attackbots
SSH Brute-Force Attack
2020-04-09 16:57:58
attackbotsspam
Apr  8 14:49:41 ns392434 sshd[2006]: Invalid user vanessa from 106.13.138.162 port 45412
Apr  8 14:49:41 ns392434 sshd[2006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Apr  8 14:49:41 ns392434 sshd[2006]: Invalid user vanessa from 106.13.138.162 port 45412
Apr  8 14:49:43 ns392434 sshd[2006]: Failed password for invalid user vanessa from 106.13.138.162 port 45412 ssh2
Apr  8 14:54:22 ns392434 sshd[2152]: Invalid user sysadm from 106.13.138.162 port 34688
Apr  8 14:54:22 ns392434 sshd[2152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Apr  8 14:54:22 ns392434 sshd[2152]: Invalid user sysadm from 106.13.138.162 port 34688
Apr  8 14:54:23 ns392434 sshd[2152]: Failed password for invalid user sysadm from 106.13.138.162 port 34688 ssh2
Apr  8 14:57:43 ns392434 sshd[2307]: Invalid user postgres from 106.13.138.162 port 42742
2020-04-08 22:40:29
attackbots
$f2bV_matches
2020-03-31 23:53:41
attack
Mar 29 17:46:50 gw1 sshd[13540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Mar 29 17:46:52 gw1 sshd[13540]: Failed password for invalid user usi from 106.13.138.162 port 36754 ssh2
...
2020-03-29 23:13:41
attackspambots
Mar 27 14:46:30 game-panel sshd[20652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Mar 27 14:46:32 game-panel sshd[20652]: Failed password for invalid user lkq from 106.13.138.162 port 50932 ssh2
Mar 27 14:50:30 game-panel sshd[20787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
2020-03-28 01:23:55
attackbots
Mar 21 05:39:47 XXX sshd[49497]: Invalid user server-pilotuser from 106.13.138.162 port 42980
2020-03-21 14:52:14
attack
Mar  8 05:55:47 prox sshd[16990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162 
Mar  8 05:55:48 prox sshd[16990]: Failed password for invalid user genedimen from 106.13.138.162 port 50324 ssh2
2020-03-08 15:44:29
attackspambots
suspicious action Tue, 03 Mar 2020 08:14:31 -0300
2020-03-03 20:25:54
attackspambots
2020-01-11T22:42:55.872942shield sshd\[14996\]: Invalid user serveur from 106.13.138.162 port 44362
2020-01-11T22:42:55.877121shield sshd\[14996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
2020-01-11T22:42:57.623464shield sshd\[14996\]: Failed password for invalid user serveur from 106.13.138.162 port 44362 ssh2
2020-01-11T22:45:02.061914shield sshd\[15450\]: Invalid user 54321 from 106.13.138.162 port 35496
2020-01-11T22:45:02.065405shield sshd\[15450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
2020-01-12 07:13:25
attackbotsspam
Unauthorized connection attempt detected from IP address 106.13.138.162 to port 2220 [J]
2020-01-06 16:10:58
attackbots
Unauthorized connection attempt detected from IP address 106.13.138.162 to port 2220 [J]
2020-01-05 03:52:00
attack
Dec 27 16:25:01 markkoudstaal sshd[15911]: Failed password for root from 106.13.138.162 port 38870 ssh2
Dec 27 16:29:06 markkoudstaal sshd[16306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Dec 27 16:29:08 markkoudstaal sshd[16306]: Failed password for invalid user applegate from 106.13.138.162 port 34348 ssh2
2019-12-27 23:44:16
attackspam
Dec 21 11:42:46 sd-53420 sshd\[23605\]: User root from 106.13.138.162 not allowed because none of user's groups are listed in AllowGroups
Dec 21 11:42:46 sd-53420 sshd\[23605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162  user=root
Dec 21 11:42:47 sd-53420 sshd\[23605\]: Failed password for invalid user root from 106.13.138.162 port 32910 ssh2
Dec 21 11:50:19 sd-53420 sshd\[26280\]: Invalid user subedah from 106.13.138.162
Dec 21 11:50:19 sd-53420 sshd\[26280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
...
2019-12-21 19:04:35
attackspambots
Dec 15 20:15:33 vibhu-HP-Z238-Microtower-Workstation sshd\[26097\]: Invalid user bot from 106.13.138.162
Dec 15 20:15:33 vibhu-HP-Z238-Microtower-Workstation sshd\[26097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Dec 15 20:15:34 vibhu-HP-Z238-Microtower-Workstation sshd\[26097\]: Failed password for invalid user bot from 106.13.138.162 port 42074 ssh2
Dec 15 20:24:24 vibhu-HP-Z238-Microtower-Workstation sshd\[26489\]: Invalid user MGR from 106.13.138.162
Dec 15 20:24:24 vibhu-HP-Z238-Microtower-Workstation sshd\[26489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
...
2019-12-15 23:06:11
attack
Dec  2 12:31:57 server sshd\[10269\]: Invalid user rpc from 106.13.138.162
Dec  2 12:31:57 server sshd\[10269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162 
Dec  2 12:31:59 server sshd\[10269\]: Failed password for invalid user rpc from 106.13.138.162 port 37486 ssh2
Dec  2 12:40:37 server sshd\[13671\]: Invalid user gober from 106.13.138.162
Dec  2 12:40:37 server sshd\[13671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162 
...
2019-12-02 18:03:36
attack
Nov 24 07:21:34 root sshd[19309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162 
Nov 24 07:21:37 root sshd[19309]: Failed password for invalid user ola from 106.13.138.162 port 37366 ssh2
Nov 24 07:30:00 root sshd[19415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162 
...
2019-11-24 14:42:19
attack
Nov 22 08:10:58 vps691689 sshd[12858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Nov 22 08:11:00 vps691689 sshd[12858]: Failed password for invalid user treisman from 106.13.138.162 port 43758 ssh2
...
2019-11-22 20:53:05
attackspambots
Oct 14 15:01:26 sauna sshd[187978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Oct 14 15:01:28 sauna sshd[187978]: Failed password for invalid user Voiture_123 from 106.13.138.162 port 55096 ssh2
...
2019-10-15 02:26:24
attackbots
Invalid user smboracle from 106.13.138.162 port 41122
2019-10-05 17:59:53
attack
Sep 29 13:43:35 plusreed sshd[32626]: Invalid user vppass from 106.13.138.162
...
2019-09-30 01:57:02
attack
Sep 24 16:12:16 dedicated sshd[31145]: Invalid user manager from 106.13.138.162 port 33150
2019-09-25 02:05:27
attackspam
SSH Brute Force, server-1 sshd[6646]: Failed password for invalid user frappe from 106.13.138.162 port 33338 ssh2
2019-09-06 14:36:52
attack
Aug 31 17:49:26 eddieflores sshd\[25227\]: Invalid user octav from 106.13.138.162
Aug 31 17:49:26 eddieflores sshd\[25227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
Aug 31 17:49:28 eddieflores sshd\[25227\]: Failed password for invalid user octav from 106.13.138.162 port 46660 ssh2
Aug 31 17:54:36 eddieflores sshd\[25705\]: Invalid user devhdfc from 106.13.138.162
Aug 31 17:54:36 eddieflores sshd\[25705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.162
2019-09-01 12:11:08
attackbotsspam
ssh failed login
2019-08-24 07:57:49
attack
Aug  8 06:49:11 mail sshd\[30809\]: Failed password for root from 106.13.138.162 port 40096 ssh2
Aug  8 07:07:02 mail sshd\[31033\]: Invalid user vhost from 106.13.138.162 port 33776
...
2019-08-08 14:12:45
Comments on same subnet:
IP Type Details Datetime
106.13.138.236 attackspambots
2020-05-27T22:38:46.616820lavrinenko.info sshd[7894]: Failed password for invalid user pgsql from 106.13.138.236 port 47760 ssh2
2020-05-27T22:40:54.937872lavrinenko.info sshd[7942]: Invalid user open from 106.13.138.236 port 51342
2020-05-27T22:40:54.944658lavrinenko.info sshd[7942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
2020-05-27T22:40:54.937872lavrinenko.info sshd[7942]: Invalid user open from 106.13.138.236 port 51342
2020-05-27T22:40:56.908189lavrinenko.info sshd[7942]: Failed password for invalid user open from 106.13.138.236 port 51342 ssh2
...
2020-05-28 04:23:48
106.13.138.236 attackbotsspam
May 24 14:06:38 h1745522 sshd[20114]: Invalid user gb from 106.13.138.236 port 59368
May 24 14:06:38 h1745522 sshd[20114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
May 24 14:06:38 h1745522 sshd[20114]: Invalid user gb from 106.13.138.236 port 59368
May 24 14:06:40 h1745522 sshd[20114]: Failed password for invalid user gb from 106.13.138.236 port 59368 ssh2
May 24 14:08:57 h1745522 sshd[20157]: Invalid user liuqiuhua from 106.13.138.236 port 34714
May 24 14:08:57 h1745522 sshd[20157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
May 24 14:08:57 h1745522 sshd[20157]: Invalid user liuqiuhua from 106.13.138.236 port 34714
May 24 14:08:59 h1745522 sshd[20157]: Failed password for invalid user liuqiuhua from 106.13.138.236 port 34714 ssh2
May 24 14:11:27 h1745522 sshd[20413]: Invalid user wws from 106.13.138.236 port 38290
...
2020-05-25 00:17:22
106.13.138.236 attackspam
Invalid user bwh from 106.13.138.236 port 60724
2020-05-22 16:59:05
106.13.138.236 attackspam
SSH Invalid Login
2020-05-21 05:48:21
106.13.138.236 attack
Apr 28 09:52:30 s158375 sshd[14880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
2020-04-29 02:02:07
106.13.138.236 attack
2020-04-25T06:00:27.742439vps751288.ovh.net sshd\[18497\]: Invalid user tanis from 106.13.138.236 port 47462
2020-04-25T06:00:27.752913vps751288.ovh.net sshd\[18497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
2020-04-25T06:00:29.720683vps751288.ovh.net sshd\[18497\]: Failed password for invalid user tanis from 106.13.138.236 port 47462 ssh2
2020-04-25T06:06:13.801704vps751288.ovh.net sshd\[18565\]: Invalid user mario from 106.13.138.236 port 33972
2020-04-25T06:06:13.807174vps751288.ovh.net sshd\[18565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.236
2020-04-25 12:32:09
106.13.138.236 attack
no
2020-04-18 17:25:00
106.13.138.3 attack
Apr  8 16:41:02 host01 sshd[22477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.3 
Apr  8 16:41:04 host01 sshd[22477]: Failed password for invalid user sam from 106.13.138.3 port 53468 ssh2
Apr  8 16:47:04 host01 sshd[23525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.3 
...
2020-04-09 00:31:26
106.13.138.236 attackspam
$f2bV_matches
2020-04-05 14:17:08
106.13.138.3 attackbotsspam
Invalid user mxh from 106.13.138.3 port 58630
2020-04-03 15:24:42
106.13.138.236 attack
DATE:2020-04-03 02:01:50, IP:106.13.138.236, PORT:ssh SSH brute force auth (docker-dc)
2020-04-03 08:32:13
106.13.138.236 attackspambots
<6 unauthorized SSH connections
2020-04-01 17:05:12
106.13.138.3 attackspam
Mar 30 18:42:40 plex sshd[12354]: Failed password for invalid user ys from 106.13.138.3 port 35284 ssh2
Mar 30 18:46:35 plex sshd[12447]: Invalid user ys from 106.13.138.3 port 53722
Mar 30 18:46:35 plex sshd[12447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.3
Mar 30 18:46:35 plex sshd[12447]: Invalid user ys from 106.13.138.3 port 53722
Mar 30 18:46:37 plex sshd[12447]: Failed password for invalid user ys from 106.13.138.3 port 53722 ssh2
2020-03-31 00:48:33
106.13.138.3 attack
Mar 28 23:02:52 eventyay sshd[22002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.3
Mar 28 23:02:54 eventyay sshd[22002]: Failed password for invalid user wqd from 106.13.138.3 port 41602 ssh2
Mar 28 23:06:18 eventyay sshd[22143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.138.3
...
2020-03-29 06:22:56
106.13.138.3 attack
DATE:2020-03-04 01:36:03, IP:106.13.138.3, PORT:ssh SSH brute force auth (docker-dc)
2020-03-04 09:40:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.138.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2605
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.138.162.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 18:27:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 162.138.13.106.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 162.138.13.106.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
27.44.248.177 attack
Invalid user admin from 27.44.248.177 port 36095
2019-07-27 22:51:39
36.66.149.211 attackspam
Invalid user dbuser from 36.66.149.211 port 39142
2019-07-27 22:51:14
181.30.45.227 attackspambots
Invalid user usuario from 181.30.45.227 port 42814
2019-07-27 22:57:43
152.32.191.57 attack
Invalid user james from 152.32.191.57 port 60064
2019-07-27 23:03:17
94.62.245.112 attackbots
Fail2Ban Ban Triggered
2019-07-27 22:46:19
178.128.104.252 attackspam
Invalid user admin from 178.128.104.252 port 52672
2019-07-27 22:40:05
200.225.220.129 attackbotsspam
Invalid user admin from 200.225.220.129 port 34702
2019-07-27 22:54:35
123.20.14.162 attackspam
Invalid user admin from 123.20.14.162 port 60546
2019-07-27 22:41:37
27.254.94.39 attack
Fail2Ban Ban Triggered
2019-07-27 23:24:56
49.144.250.165 attackspam
Invalid user dircreate from 49.144.250.165 port 54128
2019-07-27 22:48:10
115.132.235.108 attackspam
Invalid user user from 115.132.235.108 port 52640
2019-07-27 22:42:29
84.55.65.13 attackbotsspam
Invalid user guest from 84.55.65.13 port 43908
2019-07-27 23:13:38
209.141.56.234 attackspambots
Invalid user admin from 209.141.56.234 port 58402
2019-07-27 22:52:58
74.82.206.228 attackbotsspam
Invalid user wy from 74.82.206.228 port 59124
2019-07-27 23:16:00
18.228.30.118 attack
3389BruteforceFW21
2019-07-27 22:21:09

Recently Reported IPs

88.23.100.148 36.110.118.72 46.176.33.69 125.41.5.137
114.164.221.46 122.152.250.168 62.61.165.177 111.251.28.55
36.66.114.127 191.19.77.71 111.35.168.248 62.20.131.170
202.191.67.3 201.25.218.93 128.131.113.100 176.31.115.195
113.120.185.96 93.241.44.170 239.74.118.81 112.163.173.160