106.13.139.252

Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Invalid user motion from 106.13.139.252 port 55422	2020-01-15 04:44:54
attack	Jan 1 14:25:08 server sshd\[17968\]: Invalid user quevedo from 106.13.139.252 Jan 1 14:25:08 server sshd\[17968\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 Jan 1 14:25:11 server sshd\[17968\]: Failed password for invalid user quevedo from 106.13.139.252 port 49224 ssh2 Jan 1 17:46:37 server sshd\[25935\]: Invalid user guest from 106.13.139.252 Jan 1 17:46:37 server sshd\[25935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 ...	2020-01-02 03:21:59
attackbots	Dec 20 01:16:55 server sshd\[31905\]: Invalid user system from 106.13.139.252 Dec 20 01:16:55 server sshd\[31905\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 Dec 20 01:16:57 server sshd\[31905\]: Failed password for invalid user system from 106.13.139.252 port 57604 ssh2 Dec 20 01:35:15 server sshd\[4515\]: Invalid user marstraner from 106.13.139.252 Dec 20 01:35:15 server sshd\[4515\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 ...	2019-12-20 07:20:28
attack	Dec 19 08:28:44 vpn01 sshd[5270]: Failed password for root from 106.13.139.252 port 45124 ssh2 ...	2019-12-19 15:52:05
attackspambots	158 failed attempt(s) in the last 24h	2019-12-12 09:53:58
attack	Dec 5 01:46:41 areeb-Workstation sshd[18984]: Failed password for root from 106.13.139.252 port 33316 ssh2 Dec 5 01:52:01 areeb-Workstation sshd[19494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 ...	2019-12-05 05:08:20
attack	Dec 3 14:24:02 web9 sshd\[15299\]: Invalid user emiliojose from 106.13.139.252 Dec 3 14:24:02 web9 sshd\[15299\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 Dec 3 14:24:04 web9 sshd\[15299\]: Failed password for invalid user emiliojose from 106.13.139.252 port 46664 ssh2 Dec 3 14:30:37 web9 sshd\[16184\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 user=root Dec 3 14:30:39 web9 sshd\[16184\]: Failed password for root from 106.13.139.252 port 49790 ssh2	2019-12-04 08:36:55
attack	Dec 2 00:32:57 linuxvps sshd\[40822\]: Invalid user glor from 106.13.139.252 Dec 2 00:32:57 linuxvps sshd\[40822\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 Dec 2 00:32:59 linuxvps sshd\[40822\]: Failed password for invalid user glor from 106.13.139.252 port 43208 ssh2 Dec 2 00:39:00 linuxvps sshd\[44687\]: Invalid user named from 106.13.139.252 Dec 2 00:39:00 linuxvps sshd\[44687\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252	2019-12-02 13:54:13
attackbots	Nov 29 20:20:25 ldap01vmsma01 sshd[54072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.252 Nov 29 20:20:26 ldap01vmsma01 sshd[54072]: Failed password for invalid user bringaker from 106.13.139.252 port 50236 ssh2 ...	2019-11-30 07:54:50
attackspambots	Nov 29 16:13:02 mout sshd[23256]: Invalid user 123440 from 106.13.139.252 port 49978	2019-11-30 00:19:30
attackspambots	Nov 8 18:10:26 firewall sshd[9497]: Invalid user 123456e from 106.13.139.252 Nov 8 18:10:28 firewall sshd[9497]: Failed password for invalid user 123456e from 106.13.139.252 port 52734 ssh2 Nov 8 18:14:52 firewall sshd[9587]: Invalid user poker from 106.13.139.252 ...	2019-11-09 05:29:35

Comments on same subnet:

IP	Type	Details	Datetime
106.13.139.79	attackbotsspam	Port Scan ...	2020-09-12 22:37:44
106.13.139.79	attackbotsspam	Port Scan ...	2020-09-12 14:41:45
106.13.139.79	attackbots	" "	2020-09-12 06:29:51
106.13.139.79	attackbots	Aug 26 00:06:14 meumeu sshd[304551]: Invalid user elias from 106.13.139.79 port 40412 Aug 26 00:06:14 meumeu sshd[304551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 Aug 26 00:06:14 meumeu sshd[304551]: Invalid user elias from 106.13.139.79 port 40412 Aug 26 00:06:16 meumeu sshd[304551]: Failed password for invalid user elias from 106.13.139.79 port 40412 ssh2 Aug 26 00:09:18 meumeu sshd[304702]: Invalid user prueba from 106.13.139.79 port 56794 Aug 26 00:09:18 meumeu sshd[304702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 Aug 26 00:09:18 meumeu sshd[304702]: Invalid user prueba from 106.13.139.79 port 56794 Aug 26 00:09:20 meumeu sshd[304702]: Failed password for invalid user prueba from 106.13.139.79 port 56794 ssh2 Aug 26 00:12:27 meumeu sshd[304815]: Invalid user im from 106.13.139.79 port 44956 ...	2020-08-26 06:41:21
106.13.139.79	attack	SSH BruteForce Attack	2020-08-19 19:35:28
106.13.139.79	attackspambots	Aug 6 01:14:09 ws19vmsma01 sshd[206344]: Failed password for root from 106.13.139.79 port 58482 ssh2 Aug 6 02:19:09 ws19vmsma01 sshd[148540]: Failed password for root from 106.13.139.79 port 39362 ssh2 ...	2020-08-06 19:14:58
106.13.139.79	attackbots	Aug 5 17:52:05 ny01 sshd[19144]: Failed password for root from 106.13.139.79 port 41474 ssh2 Aug 5 17:56:35 ny01 sshd[20089]: Failed password for root from 106.13.139.79 port 49478 ssh2	2020-08-06 06:23:35
106.13.139.79	attackspambots	2020-07-27T21:05:12.710011shield sshd\[15491\]: Invalid user ibpzxz from 106.13.139.79 port 59044 2020-07-27T21:05:12.720073shield sshd\[15491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79 2020-07-27T21:05:15.186363shield sshd\[15491\]: Failed password for invalid user ibpzxz from 106.13.139.79 port 59044 ssh2 2020-07-27T21:14:19.688965shield sshd\[18742\]: Invalid user yangliping from 106.13.139.79 port 45884 2020-07-27T21:14:19.697794shield sshd\[18742\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.79	2020-07-28 05:31:07
106.13.139.111	attack	Apr 16 08:34:22 pkdns2 sshd\[18548\]: Invalid user clamav from 106.13.139.111Apr 16 08:34:23 pkdns2 sshd\[18548\]: Failed password for invalid user clamav from 106.13.139.111 port 59810 ssh2Apr 16 08:38:24 pkdns2 sshd\[18739\]: Invalid user vagrant3 from 106.13.139.111Apr 16 08:38:27 pkdns2 sshd\[18739\]: Failed password for invalid user vagrant3 from 106.13.139.111 port 55838 ssh2Apr 16 08:42:23 pkdns2 sshd\[18958\]: Invalid user craft from 106.13.139.111Apr 16 08:42:25 pkdns2 sshd\[18958\]: Failed password for invalid user craft from 106.13.139.111 port 51870 ssh2 ...	2020-04-16 14:06:39
106.13.139.26	attack	$f2bV_matches	2020-04-15 23:10:39
106.13.139.111	attack	Apr 13 06:21:16 plex sshd[6882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 user=root Apr 13 06:21:18 plex sshd[6882]: Failed password for root from 106.13.139.111 port 43860 ssh2	2020-04-13 13:00:29
106.13.139.26	attack	Apr 12 19:40:16 webhost01 sshd[13124]: Failed password for root from 106.13.139.26 port 54720 ssh2 ...	2020-04-12 21:10:38
106.13.139.111	attackspam	Apr 8 09:29:06 lukav-desktop sshd\[15010\]: Invalid user test from 106.13.139.111 Apr 8 09:29:06 lukav-desktop sshd\[15010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111 Apr 8 09:29:08 lukav-desktop sshd\[15010\]: Failed password for invalid user test from 106.13.139.111 port 44100 ssh2 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: Invalid user developer from 106.13.139.111 Apr 8 09:32:48 lukav-desktop sshd\[15193\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.111	2020-04-08 15:32:18
106.13.139.26	attack	2020-04-04T15:13:50.067663shield sshd\[7912\]: Invalid user sk from 106.13.139.26 port 46940 2020-04-04T15:13:50.071054shield sshd\[7912\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.26 2020-04-04T15:13:51.478671shield sshd\[7912\]: Failed password for invalid user sk from 106.13.139.26 port 46940 ssh2 2020-04-04T15:19:14.801088shield sshd\[8702\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.139.26 user=root 2020-04-04T15:19:16.690187shield sshd\[8702\]: Failed password for root from 106.13.139.26 port 40514 ssh2	2020-04-05 02:26:47
106.13.139.26	attack	k+ssh-bruteforce	2020-04-03 14:23:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.139.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25417
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.139.252.			IN	A

;; AUTHORITY SECTION:
.			555	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110801 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 05:29:31 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 252.139.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.139.13.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.207.45.79	attackspambots	Automatic report - Port Scan Attack	2020-10-09 02:13:32
45.129.33.121	attackbots	TCP (SYN) 45.129.33.121:54778 -> port 689, len 44	2020-10-09 02:20:54
189.238.98.182	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-10-09 02:23:25
165.22.232.94	attackspam	non-SMTP command used ...	2020-10-09 02:07:27
62.210.151.21	attack	[2020-10-08 10:31:51] NOTICE[1182][C-00001f73] chan_sip.c: Call from '' (62.210.151.21:57041) to extension '9002441665529305' rejected because extension not found in context 'public'. [2020-10-08 10:31:51] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-08T10:31:51.845-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9002441665529305",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/57041",ACLName="no_extension_match" [2020-10-08 10:31:58] NOTICE[1182][C-00001f75] chan_sip.c: Call from '' (62.210.151.21:51598) to extension '9005441665529305' rejected because extension not found in context 'public'. [2020-10-08 10:31:58] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-08T10:31:58.004-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9005441665529305",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ...	2020-10-09 02:30:52
122.194.229.37	attackspambots	2020-10-08T18:30:23.285340shield sshd\[23170\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.194.229.37 user=root 2020-10-08T18:30:24.909705shield sshd\[23170\]: Failed password for root from 122.194.229.37 port 15954 ssh2 2020-10-08T18:30:28.207576shield sshd\[23170\]: Failed password for root from 122.194.229.37 port 15954 ssh2 2020-10-08T18:30:31.917856shield sshd\[23170\]: Failed password for root from 122.194.229.37 port 15954 ssh2 2020-10-08T18:30:34.844739shield sshd\[23170\]: Failed password for root from 122.194.229.37 port 15954 ssh2	2020-10-09 02:36:02
171.224.177.45	attackspam	Oct 8 02:28:51 cdc sshd[4002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.224.177.45 Oct 8 02:28:53 cdc sshd[4002]: Failed password for invalid user Administrator from 171.224.177.45 port 29728 ssh2	2020-10-09 02:33:48
194.5.177.67	attackspambots	Oct 8 18:47:06 haigwepa sshd[12816]: Failed password for root from 194.5.177.67 port 60324 ssh2 ...	2020-10-09 02:15:50
201.75.53.218	attackbotsspam	2020-10-08T08:28:23.105335morrigan.ad5gb.com sshd[2793202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.75.53.218 user=root 2020-10-08T08:28:25.168284morrigan.ad5gb.com sshd[2793202]: Failed password for root from 201.75.53.218 port 34917 ssh2	2020-10-09 02:13:58
74.120.14.28	attackspam	TCP (SYN) 74.120.14.28:53903 -> port 443, len 44	2020-10-09 02:06:14
46.231.79.185	attackbots	Attempted Brute Force (dovecot)	2020-10-09 02:36:19
49.235.104.204	attackbotsspam	Automatic Fail2ban report - Trying login SSH	2020-10-09 02:35:37
112.216.3.211	attack	$f2bV_matches	2020-10-09 02:43:48
157.230.243.163	attackspambots	Oct 8 04:25:10 web9 sshd\[28601\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.163 user=root Oct 8 04:25:12 web9 sshd\[28601\]: Failed password for root from 157.230.243.163 port 37444 ssh2 Oct 8 04:29:24 web9 sshd\[29078\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.163 user=root Oct 8 04:29:25 web9 sshd\[29078\]: Failed password for root from 157.230.243.163 port 43066 ssh2 Oct 8 04:33:31 web9 sshd\[29584\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.163 user=root	2020-10-09 02:24:38
176.213.140.45	attackbots	TCP (SYN) 176.213.140.45:18402 -> port 23, len 44	2020-10-09 02:26:42

Recently Reported IPs

175.111.131.86	94.247.58.201	175.111.131.190	212.112.151.95
5.8.184.151	116.102.36.197	110.78.156.6	92.32.88.68
177.37.199.130	139.190.42.199	41.109.179.206	130.61.123.41
178.236.35.42	37.145.190.72	202.101.116.160	125.160.66.195
203.207.58.199	200.68.139.39	174.253.140.176	183.87.215.100