City: unknown
Region: unknown
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: unknown
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attackbots | Dec 20 08:31:13 localhost sshd\[14807\]: Invalid user guest from 106.13.139.163 Dec 20 08:31:13 localhost sshd\[14807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Dec 20 08:31:16 localhost sshd\[14807\]: Failed password for invalid user guest from 106.13.139.163 port 34148 ssh2 Dec 20 08:37:02 localhost sshd\[15218\]: Invalid user dunleavy from 106.13.139.163 Dec 20 08:37:02 localhost sshd\[15218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 ... |
2019-12-20 18:26:48 |
| attackspambots | Dec 19 07:17:47 hcbbdb sshd\[22939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 user=root Dec 19 07:17:49 hcbbdb sshd\[22939\]: Failed password for root from 106.13.139.163 port 43758 ssh2 Dec 19 07:24:37 hcbbdb sshd\[23770\]: Invalid user padiangan from 106.13.139.163 Dec 19 07:24:37 hcbbdb sshd\[23770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Dec 19 07:24:39 hcbbdb sshd\[23770\]: Failed password for invalid user padiangan from 106.13.139.163 port 38334 ssh2 |
2019-12-19 15:30:18 |
| attack | Dec 16 00:30:11 ns3042688 sshd\[15817\]: Invalid user user from 106.13.139.163 Dec 16 00:30:11 ns3042688 sshd\[15817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Dec 16 00:30:13 ns3042688 sshd\[15817\]: Failed password for invalid user user from 106.13.139.163 port 44352 ssh2 Dec 16 00:36:49 ns3042688 sshd\[18843\]: Invalid user apache from 106.13.139.163 Dec 16 00:36:49 ns3042688 sshd\[18843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 ... |
2019-12-16 07:52:24 |
| attack | Dec 15 00:45:05 localhost sshd\[1556\]: Invalid user wwwadmin from 106.13.139.163 port 40538 Dec 15 00:45:05 localhost sshd\[1556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Dec 15 00:45:07 localhost sshd\[1556\]: Failed password for invalid user wwwadmin from 106.13.139.163 port 40538 ssh2 |
2019-12-15 08:55:59 |
| attackspambots | Dec 6 07:22:48 legacy sshd[27246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Dec 6 07:22:51 legacy sshd[27246]: Failed password for invalid user yamashita from 106.13.139.163 port 53600 ssh2 Dec 6 07:30:14 legacy sshd[27541]: Failed password for root from 106.13.139.163 port 52070 ssh2 ... |
2019-12-06 14:58:35 |
| attackbotsspam | $f2bV_matches |
2019-11-19 13:41:34 |
| attack | Nov 17 07:43:31 web9 sshd\[17598\]: Invalid user apache from 106.13.139.163 Nov 17 07:43:31 web9 sshd\[17598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Nov 17 07:43:32 web9 sshd\[17598\]: Failed password for invalid user apache from 106.13.139.163 port 46512 ssh2 Nov 17 07:47:49 web9 sshd\[18147\]: Invalid user wozniak from 106.13.139.163 Nov 17 07:47:49 web9 sshd\[18147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 |
2019-11-18 01:58:28 |
| attack | Nov 12 07:40:16 MK-Soft-VM7 sshd[8241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Nov 12 07:40:18 MK-Soft-VM7 sshd[8241]: Failed password for invalid user magic from 106.13.139.163 port 34306 ssh2 ... |
2019-11-12 14:43:41 |
| attackspam | Sep 24 05:58:12 lnxmysql61 sshd[26880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Sep 24 05:58:12 lnxmysql61 sshd[26880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 |
2019-09-24 12:39:43 |
| attackbotsspam | Automatic report - Banned IP Access |
2019-09-20 02:48:38 |
| attackspambots | Aug 3 21:45:22 v22018076622670303 sshd\[16708\]: Invalid user tech from 106.13.139.163 port 51480 Aug 3 21:45:22 v22018076622670303 sshd\[16708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.163 Aug 3 21:45:23 v22018076622670303 sshd\[16708\]: Failed password for invalid user tech from 106.13.139.163 port 51480 ssh2 ... |
2019-08-04 05:07:15 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.139.79 | attackbotsspam | Port Scan ... |
2020-09-12 22:37:44 |
| 106.13.139.79 | attackbotsspam | Port Scan ... |
2020-09-12 14:41:45 |
| 106.13.139.79 | attackbots | " " |
2020-09-12 06:29:51 |
| 106.13.139.79 | attackbots | Aug 26 00:06:14 meumeu sshd[304551]: Invalid user elias from 106.13.139.79 port 40412 Aug 26 00:06:14 meumeu sshd[304551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 Aug 26 00:06:14 meumeu sshd[304551]: Invalid user elias from 106.13.139.79 port 40412 Aug 26 00:06:16 meumeu sshd[304551]: Failed password for invalid user elias from 106.13.139.79 port 40412 ssh2 Aug 26 00:09:18 meumeu sshd[304702]: Invalid user prueba from 106.13.139.79 port 56794 Aug 26 00:09:18 meumeu sshd[304702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 Aug 26 00:09:18 meumeu sshd[304702]: Invalid user prueba from 106.13.139.79 port 56794 Aug 26 00:09:20 meumeu sshd[304702]: Failed password for invalid user prueba from 106.13.139.79 port 56794 ssh2 Aug 26 00:12:27 meumeu sshd[304815]: Invalid user im from 106.13.139.79 port 44956 ... |
2020-08-26 06:41:21 |
| 106.13.139.79 | attack | SSH BruteForce Attack |
2020-08-19 19:35:28 |
| 106.13.139.79 | attackspambots | Aug 6 01:14:09 ws19vmsma01 sshd[206344]: Failed password for root from 106.13.139.79 port 58482 ssh2 Aug 6 02:19:09 ws19vmsma01 sshd[148540]: Failed password for root from 106.13.139.79 port 39362 ssh2 ... |
2020-08-06 19:14:58 |
| 106.13.139.79 | attackbots | Aug 5 17:52:05 ny01 sshd[19144]: Failed password for root from 106.13.139.79 port 41474 ssh2 Aug 5 17:56:35 ny01 sshd[20089]: Failed password for root from 106.13.139.79 port 49478 ssh2 |
2020-08-06 06:23:35 |
| 106.13.139.79 | attackspambots | 2020-07-27T21:05:12.710011shield sshd\[15491\]: Invalid user ibpzxz from 106.13.139.79 port 59044 2020-07-27T21:05:12.720073shield sshd\[15491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 2020-07-27T21:05:15.186363shield sshd\[15491\]: Failed password for invalid user ibpzxz from 106.13.139.79 port 59044 ssh2 2020-07-27T21:14:19.688965shield sshd\[18742\]: Invalid user yangliping from 106.13.139.79 port 45884 2020-07-27T21:14:19.697794shield sshd\[18742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 |
2020-07-28 05:31:07 |
| 106.13.139.111 | attack | Apr 16 08:34:22 pkdns2 sshd\[18548\]: Invalid user clamav from 106.13.139.111Apr 16 08:34:23 pkdns2 sshd\[18548\]: Failed password for invalid user clamav from 106.13.139.111 port 59810 ssh2Apr 16 08:38:24 pkdns2 sshd\[18739\]: Invalid user vagrant3 from 106.13.139.111Apr 16 08:38:27 pkdns2 sshd\[18739\]: Failed password for invalid user vagrant3 from 106.13.139.111 port 55838 ssh2Apr 16 08:42:23 pkdns2 sshd\[18958\]: Invalid user craft from 106.13.139.111Apr 16 08:42:25 pkdns2 sshd\[18958\]: Failed password for invalid user craft from 106.13.139.111 port 51870 ssh2 ... |
2020-04-16 14:06:39 |
| 106.13.139.26 | attack | $f2bV_matches |
2020-04-15 23:10:39 |
| 106.13.139.111 | attack | Apr 13 06:21:16 plex sshd[6882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 user=root Apr 13 06:21:18 plex sshd[6882]: Failed password for root from 106.13.139.111 port 43860 ssh2 |
2020-04-13 13:00:29 |
| 106.13.139.26 | attack | Apr 12 19:40:16 webhost01 sshd[13124]: Failed password for root from 106.13.139.26 port 54720 ssh2 ... |
2020-04-12 21:10:38 |
| 106.13.139.111 | attackspam | Apr 8 09:29:06 lukav-desktop sshd\[15010\]: Invalid user test from 106.13.139.111 Apr 8 09:29:06 lukav-desktop sshd\[15010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 Apr 8 09:29:08 lukav-desktop sshd\[15010\]: Failed password for invalid user test from 106.13.139.111 port 44100 ssh2 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: Invalid user developer from 106.13.139.111 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 |
2020-04-08 15:32:18 |
| 106.13.139.26 | attack | 2020-04-04T15:13:50.067663shield sshd\[7912\]: Invalid user sk from 106.13.139.26 port 46940 2020-04-04T15:13:50.071054shield sshd\[7912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.26 2020-04-04T15:13:51.478671shield sshd\[7912\]: Failed password for invalid user sk from 106.13.139.26 port 46940 ssh2 2020-04-04T15:19:14.801088shield sshd\[8702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.26 user=root 2020-04-04T15:19:16.690187shield sshd\[8702\]: Failed password for root from 106.13.139.26 port 40514 ssh2 |
2020-04-05 02:26:47 |
| 106.13.139.26 | attack | k+ssh-bruteforce |
2020-04-03 14:23:51 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.139.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10112
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.139.163. IN A
;; AUTHORITY SECTION:
. 1431 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080301 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 04 05:07:10 CST 2019
;; MSG SIZE rcvd: 118Host 163.139.13.106.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 67.207.67.2, trying next server
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 163.139.13.106.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.4.217.138 | attack | 2020-07-14T21:00:40.216054server.mjenks.net sshd[1820675]: Invalid user drupal from 103.4.217.138 port 49296 2020-07-14T21:00:40.219233server.mjenks.net sshd[1820675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 2020-07-14T21:00:40.216054server.mjenks.net sshd[1820675]: Invalid user drupal from 103.4.217.138 port 49296 2020-07-14T21:00:42.634816server.mjenks.net sshd[1820675]: Failed password for invalid user drupal from 103.4.217.138 port 49296 ssh2 2020-07-14T21:02:42.049431server.mjenks.net sshd[1820930]: Invalid user webmaster from 103.4.217.138 port 60490 ... |
2020-07-15 13:55:52 |
| 159.89.204.111 | attack | Jul 14 21:54:41 server1 sshd\[20559\]: Failed password for mysql from 159.89.204.111 port 53243 ssh2 Jul 14 21:58:14 server1 sshd\[21588\]: Invalid user server from 159.89.204.111 Jul 14 21:58:14 server1 sshd\[21588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.204.111 Jul 14 21:58:16 server1 sshd\[21588\]: Failed password for invalid user server from 159.89.204.111 port 51703 ssh2 Jul 14 22:01:44 server1 sshd\[22630\]: Invalid user hg from 159.89.204.111 ... |
2020-07-15 13:58:23 |
| 1.2.129.167 | attackspam | Unauthorized connection attempt from IP address 1.2.129.167 on Port 445(SMB) |
2020-07-15 14:03:45 |
| 185.100.87.246 | attackbotsspam | 185.100.87.246 - - \[15/Jul/2020:07:07:19 +0200\] "GET /nmaplowercheck1594789639 HTTP/1.1" 403 470 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/36.0.1985.125 Safari/537.36" 185.100.87.246 - - \[15/Jul/2020:07:07:19 +0200\] "GET /evox/about HTTP/1.1" 403 456 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/36.0.1985.125 Safari/537.36" 185.100.87.246 - - \[15/Jul/2020:07:07:20 +0200\] "HEAD / HTTP/1.1" 403 216 "-" "Mozilla/5.0 \(Windows NT 6.1\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/36.0.1985.125 Safari/537.36" ... |
2020-07-15 13:46:49 |
| 52.191.248.156 | attackbotsspam | ssh brute force |
2020-07-15 14:02:33 |
| 13.77.158.96 | attackbots | SSH brute-force attempt |
2020-07-15 13:47:57 |
| 152.136.231.89 | attack | Jul 15 07:38:48 pornomens sshd\[7507\]: Invalid user cmsftp from 152.136.231.89 port 38128 Jul 15 07:38:48 pornomens sshd\[7507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.231.89 Jul 15 07:38:49 pornomens sshd\[7507\]: Failed password for invalid user cmsftp from 152.136.231.89 port 38128 ssh2 ... |
2020-07-15 14:04:10 |
| 185.176.27.86 | attackbotsspam | SmallBizIT.US 6 packets to tcp(12703,17297,34162,36134,46533,60138) |
2020-07-15 13:40:22 |
| 192.162.102.33 | attackbots | TCP Port Scanning |
2020-07-15 13:57:32 |
| 190.129.12.139 | attackbotsspam | 1594778563 - 07/15/2020 04:02:43 Host: 190.129.12.139/190.129.12.139 Port: 445 TCP Blocked |
2020-07-15 13:51:03 |
| 123.16.230.129 | attackbotsspam | 1594778561 - 07/15/2020 04:02:41 Host: 123.16.230.129/123.16.230.129 Port: 445 TCP Blocked |
2020-07-15 13:56:45 |
| 171.241.14.202 | attack | 1594778562 - 07/15/2020 04:02:42 Host: 171.241.14.202/171.241.14.202 Port: 445 TCP Blocked |
2020-07-15 13:54:31 |
| 37.139.16.229 | attack |
|
2020-07-15 13:39:50 |
| 185.176.27.126 | attackspam | Port-scan: detected 240 distinct ports within a 24-hour window. |
2020-07-15 13:37:38 |
| 45.145.66.12 | attackspambots |
|
2020-07-15 14:07:03 |