Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackbotsspam
Jan  3 23:25:21 [host] sshd[18984]: Invalid user ndb from 106.13.142.247
Jan  3 23:25:21 [host] sshd[18984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Jan  3 23:25:22 [host] sshd[18984]: Failed password for invalid user ndb from 106.13.142.247 port 52448 ssh2
2020-01-04 06:29:30
attack
Dec 21 16:28:01 MK-Soft-VM7 sshd[11118]: Failed password for root from 106.13.142.247 port 48988 ssh2
...
2019-12-22 00:14:46
attack
Dec 21 15:25:08 MK-Soft-VM7 sshd[10299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247 
Dec 21 15:25:11 MK-Soft-VM7 sshd[10299]: Failed password for invalid user pornsawanm from 106.13.142.247 port 33288 ssh2
...
2019-12-21 22:53:13
attack
Dec 15 08:35:52 localhost sshd\[3825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247  user=root
Dec 15 08:35:55 localhost sshd\[3825\]: Failed password for root from 106.13.142.247 port 38596 ssh2
Dec 15 08:42:44 localhost sshd\[4671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247  user=root
2019-12-15 15:43:46
attackspam
k+ssh-bruteforce
2019-11-17 22:29:12
attackspambots
Oct 31 05:53:27 vps666546 sshd\[22872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247  user=root
Oct 31 05:53:29 vps666546 sshd\[22872\]: Failed password for root from 106.13.142.247 port 45892 ssh2
Oct 31 05:58:55 vps666546 sshd\[22993\]: Invalid user allison from 106.13.142.247 port 54760
Oct 31 05:58:55 vps666546 sshd\[22993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Oct 31 05:58:58 vps666546 sshd\[22993\]: Failed password for invalid user allison from 106.13.142.247 port 54760 ssh2
...
2019-10-31 19:04:38
attack
Sep 11 11:03:31 hcbb sshd\[30566\]: Invalid user sftpuser from 106.13.142.247
Sep 11 11:03:31 hcbb sshd\[30566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Sep 11 11:03:33 hcbb sshd\[30566\]: Failed password for invalid user sftpuser from 106.13.142.247 port 42254 ssh2
Sep 11 11:06:46 hcbb sshd\[30845\]: Invalid user www-upload from 106.13.142.247
Sep 11 11:06:46 hcbb sshd\[30845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
2019-09-12 05:14:57
attack
Sep  5 14:05:46 ny01 sshd[12700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Sep  5 14:05:49 ny01 sshd[12700]: Failed password for invalid user christian from 106.13.142.247 port 57266 ssh2
Sep  5 14:11:00 ny01 sshd[13686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
2019-09-06 03:01:22
attackbots
Sep  4 01:19:42 nextcloud sshd\[16426\]: Invalid user git from 106.13.142.247
Sep  4 01:19:42 nextcloud sshd\[16426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Sep  4 01:19:44 nextcloud sshd\[16426\]: Failed password for invalid user git from 106.13.142.247 port 53192 ssh2
...
2019-09-04 08:32:14
attackbotsspam
Sep  2 11:02:37 aat-srv002 sshd[14766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Sep  2 11:02:39 aat-srv002 sshd[14766]: Failed password for invalid user ftpusr from 106.13.142.247 port 56182 ssh2
Sep  2 11:18:47 aat-srv002 sshd[15139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
Sep  2 11:18:49 aat-srv002 sshd[15139]: Failed password for invalid user test from 106.13.142.247 port 55136 ssh2
Sep  2 11:21:26 aat-srv002 sshd[15244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
...
2019-09-03 05:41:12
attack
Aug 19 04:59:51 lnxweb62 sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247
2019-08-19 11:15:49
attackspambots
Aug 15 03:25:15 plex sshd[15229]: Invalid user dp from 106.13.142.247 port 37532
2019-08-15 15:29:57
attackspam
Jul  7 16:23:40 web sshd\[20742\]: Invalid user webmaster from 106.13.142.247
Jul  7 16:23:40 web sshd\[20742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247 
Jul  7 16:23:42 web sshd\[20742\]: Failed password for invalid user webmaster from 106.13.142.247 port 42386 ssh2
Jul  7 16:30:24 web sshd\[20751\]: Invalid user jeevan from 106.13.142.247
Jul  7 16:30:24 web sshd\[20751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.247 
...
2019-07-07 23:20:51
Comments on same subnet:
IP Type Details Datetime
106.13.142.93 attack
Oct  4 02:51:03 server sshd[11146]: Failed password for root from 106.13.142.93 port 32940 ssh2
Oct  4 02:53:52 server sshd[12520]: Failed password for root from 106.13.142.93 port 46996 ssh2
Oct  4 02:56:41 server sshd[14046]: Failed password for invalid user test from 106.13.142.93 port 32842 ssh2
2020-10-04 09:04:37
106.13.142.93 attack
3x Failed Password
2020-10-04 01:40:47
106.13.142.93 attack
Oct  2 23:03:18 OPSO sshd\[13574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.93  user=root
Oct  2 23:03:20 OPSO sshd\[13574\]: Failed password for root from 106.13.142.93 port 35102 ssh2
Oct  2 23:07:12 OPSO sshd\[14255\]: Invalid user oliver from 106.13.142.93 port 36792
Oct  2 23:07:12 OPSO sshd\[14255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.93
Oct  2 23:07:14 OPSO sshd\[14255\]: Failed password for invalid user oliver from 106.13.142.93 port 36792 ssh2
2020-10-03 17:26:26
106.13.142.222 attackspambots
Invalid user whh from 106.13.142.222 port 34382
2020-08-18 01:48:28
106.13.142.222 attack
Invalid user pim from 106.13.142.222 port 34708
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.222
Invalid user pim from 106.13.142.222 port 34708
Failed password for invalid user pim from 106.13.142.222 port 34708 ssh2
Invalid user jamesm from 106.13.142.222 port 37988
2020-08-16 18:46:07
106.13.142.222 attackbots
Bruteforce detected by fail2ban
2020-08-07 15:21:39
106.13.142.222 attack
Lines containing failures of 106.13.142.222 (max 1000)
Aug  2 01:28:25 localhost sshd[24045]: User r.r from 106.13.142.222 not allowed because listed in DenyUsers
Aug  2 01:28:25 localhost sshd[24045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.222  user=r.r
Aug  2 01:28:27 localhost sshd[24045]: Failed password for invalid user r.r from 106.13.142.222 port 35746 ssh2
Aug  2 01:28:29 localhost sshd[24045]: Received disconnect from 106.13.142.222 port 35746:11: Bye Bye [preauth]
Aug  2 01:28:29 localhost sshd[24045]: Disconnected from invalid user r.r 106.13.142.222 port 35746 [preauth]
Aug  5 15:04:34 localhost sshd[2614]: User r.r from 106.13.142.222 not allowed because listed in DenyUsers
Aug  5 15:04:34 localhost sshd[2614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.222  user=r.r
Aug  5 15:04:36 localhost sshd[2614]: Failed password for invalid user r.r fro........
------------------------------
2020-08-06 02:44:18
106.13.142.115 attackspam
firewall-block, port(s): 5245/tcp
2020-06-12 18:54:57
106.13.142.115 attack
Apr 30 06:12:12 ns392434 sshd[17684]: Invalid user admin from 106.13.142.115 port 46494
Apr 30 06:12:12 ns392434 sshd[17684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.115
Apr 30 06:12:12 ns392434 sshd[17684]: Invalid user admin from 106.13.142.115 port 46494
Apr 30 06:12:14 ns392434 sshd[17684]: Failed password for invalid user admin from 106.13.142.115 port 46494 ssh2
Apr 30 06:22:03 ns392434 sshd[18069]: Invalid user swen from 106.13.142.115 port 60930
Apr 30 06:22:03 ns392434 sshd[18069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.115
Apr 30 06:22:03 ns392434 sshd[18069]: Invalid user swen from 106.13.142.115 port 60930
Apr 30 06:22:05 ns392434 sshd[18069]: Failed password for invalid user swen from 106.13.142.115 port 60930 ssh2
Apr 30 06:25:45 ns392434 sshd[18241]: Invalid user vlads from 106.13.142.115 port 49016
2020-04-30 14:51:16
106.13.142.115 attackbots
Apr 27 12:55:30 ip-172-31-62-245 sshd\[25967\]: Failed password for root from 106.13.142.115 port 45184 ssh2\
Apr 27 12:57:54 ip-172-31-62-245 sshd\[25989\]: Invalid user bc2 from 106.13.142.115\
Apr 27 12:57:56 ip-172-31-62-245 sshd\[25989\]: Failed password for invalid user bc2 from 106.13.142.115 port 49204 ssh2\
Apr 27 13:00:35 ip-172-31-62-245 sshd\[26006\]: Failed password for root from 106.13.142.115 port 53224 ssh2\
Apr 27 13:03:12 ip-172-31-62-245 sshd\[26037\]: Invalid user liza from 106.13.142.115\
2020-04-28 00:22:07
106.13.142.115 attack
Invalid user ie from 106.13.142.115 port 35306
2020-04-23 14:22:20
106.13.142.115 attackbotsspam
DATE:2020-04-14 22:50:37, IP:106.13.142.115, PORT:ssh SSH brute force auth (docker-dc)
2020-04-15 05:22:25
106.13.142.115 attackbotsspam
Nov 27 13:58:33 woltan sshd[27001]: Failed password for invalid user fin from 106.13.142.115 port 47588 ssh2
2020-04-12 15:38:54
106.13.142.115 attackspam
k+ssh-bruteforce
2020-04-08 02:26:01
106.13.142.115 attackbotsspam
Invalid user satomi from 106.13.142.115 port 54624
2020-04-02 16:29:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.142.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53154
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.142.247.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061801 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 19 09:47:38 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 247.142.13.106.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 247.142.13.106.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
200.192.247.166 attackbotsspam
23/tcp 23/tcp 23/tcp...
[2019-07-09/08-23]7pkt,1pt.(tcp)
2019-08-24 04:04:55
200.170.139.169 attack
Aug 23 21:54:03 localhost sshd\[4353\]: Invalid user mihai from 200.170.139.169 port 60549
Aug 23 21:54:03 localhost sshd\[4353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.170.139.169
Aug 23 21:54:04 localhost sshd\[4353\]: Failed password for invalid user mihai from 200.170.139.169 port 60549 ssh2
2019-08-24 04:05:15
46.101.235.214 attackbotsspam
Invalid user user from 46.101.235.214 port 35022
2019-08-24 03:54:37
177.207.204.230 attack
445/tcp 445/tcp 445/tcp...
[2019-06-23/08-23]22pkt,1pt.(tcp)
2019-08-24 04:20:01
119.27.167.231 attackspambots
Aug 23 10:05:52 kapalua sshd\[29361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.167.231  user=root
Aug 23 10:05:54 kapalua sshd\[29361\]: Failed password for root from 119.27.167.231 port 55802 ssh2
Aug 23 10:10:42 kapalua sshd\[29922\]: Invalid user testuser from 119.27.167.231
Aug 23 10:10:42 kapalua sshd\[29922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.167.231
Aug 23 10:10:44 kapalua sshd\[29922\]: Failed password for invalid user testuser from 119.27.167.231 port 41036 ssh2
2019-08-24 04:15:06
67.225.130.211 attackbotsspam
Spam
2019-08-24 04:01:25
121.122.45.221 attackbotsspam
Aug 23 06:14:03 php1 sshd\[25502\]: Invalid user Admin from 121.122.45.221
Aug 23 06:14:03 php1 sshd\[25502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.45.221
Aug 23 06:14:05 php1 sshd\[25502\]: Failed password for invalid user Admin from 121.122.45.221 port 37230 ssh2
Aug 23 06:19:25 php1 sshd\[25998\]: Invalid user super@123 from 121.122.45.221
Aug 23 06:19:25 php1 sshd\[25998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.45.221
2019-08-24 03:51:49
144.217.242.111 attack
Aug 23 21:29:50 vps691689 sshd[25026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.242.111
Aug 23 21:29:52 vps691689 sshd[25026]: Failed password for invalid user hlds from 144.217.242.111 port 38810 ssh2
...
2019-08-24 03:42:33
185.70.189.82 attackspam
445/tcp 445/tcp 445/tcp...
[2019-06-28/08-23]14pkt,1pt.(tcp)
2019-08-24 03:44:02
185.164.72.140 attack
Unauthorised access (Aug 23) SRC=185.164.72.140 LEN=40 TTL=243 ID=26402 TCP DPT=3389 WINDOW=1024 SYN
2019-08-24 04:08:47
68.183.230.224 attackbotsspam
Aug 23 22:14:47 nextcloud sshd\[6413\]: Invalid user jpg from 68.183.230.224
Aug 23 22:14:47 nextcloud sshd\[6413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.230.224
Aug 23 22:14:49 nextcloud sshd\[6413\]: Failed password for invalid user jpg from 68.183.230.224 port 33682 ssh2
...
2019-08-24 04:19:06
168.121.70.37 attackspambots
445/tcp 445/tcp 445/tcp...
[2019-06-25/08-23]16pkt,1pt.(tcp)
2019-08-24 04:23:22
128.199.255.146 attack
Aug 23 20:13:37 MK-Soft-VM5 sshd\[30072\]: Invalid user com1 from 128.199.255.146 port 47402
Aug 23 20:13:37 MK-Soft-VM5 sshd\[30072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.255.146
Aug 23 20:13:40 MK-Soft-VM5 sshd\[30072\]: Failed password for invalid user com1 from 128.199.255.146 port 47402 ssh2
...
2019-08-24 04:15:41
188.40.131.167 attackspambots
WordpressAttack
2019-08-24 03:50:50
185.209.0.4 attackbots
RDP Bruteforce
2019-08-24 03:54:53

Recently Reported IPs

190.187.6.71 97.90.49.141 178.239.156.240 224.141.210.29
95.190.62.27 41.235.128.224 83.227.81.193 177.70.157.110
10.35.106.237 180.29.200.112 50.231.250.34 49.67.19.10
228.145.217.244 201.123.124.148 94.191.64.168 180.247.152.12
164.199.247.214 115.38.239.34 235.206.43.221 94.194.244.129