Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Oct 11 17:56:59 firewall sshd[26023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207  user=root
Oct 11 17:57:01 firewall sshd[26023]: Failed password for root from 106.13.144.207 port 43918 ssh2
Oct 11 17:59:14 firewall sshd[26065]: Invalid user deployer from 106.13.144.207
...
2020-10-12 05:58:47
attack
"fail2ban match"
2020-10-11 22:06:34
attackbotsspam
"fail2ban match"
2020-10-11 14:04:12
attackbots
detected by Fail2Ban
2020-10-11 07:26:02
attack
Sep 12 16:53:28 nuernberg-4g-01 sshd[21023]: Failed password for root from 106.13.144.207 port 54576 ssh2
Sep 12 16:58:06 nuernberg-4g-01 sshd[22590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207 
Sep 12 16:58:08 nuernberg-4g-01 sshd[22590]: Failed password for invalid user admin from 106.13.144.207 port 48522 ssh2
2020-09-12 23:23:44
attackspam
Sep 12 07:55:20 dhoomketu sshd[3026535]: Failed password for root from 106.13.144.207 port 52194 ssh2
Sep 12 07:56:28 dhoomketu sshd[3026551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207  user=root
Sep 12 07:56:30 dhoomketu sshd[3026551]: Failed password for root from 106.13.144.207 port 38840 ssh2
Sep 12 07:57:35 dhoomketu sshd[3026589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207  user=root
Sep 12 07:57:37 dhoomketu sshd[3026589]: Failed password for root from 106.13.144.207 port 53720 ssh2
...
2020-09-12 15:28:29
attackspam
Aug 19 05:22:19 rocket sshd[30396]: Failed password for root from 106.13.144.207 port 33564 ssh2
Aug 19 05:26:54 rocket sshd[31024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207
...
2020-08-19 12:36:58
attack
Bruteforce detected by fail2ban
2020-08-10 22:28:13
attackspambots
SSH brutforce
2020-07-16 19:44:58
attackbotsspam
$f2bV_matches
2020-07-12 15:56:11
attackbots
SSH login attempts.
2020-07-08 00:30:32
attack
Jul  5 21:21:26 php1 sshd\[17113\]: Invalid user uftp from 106.13.144.207
Jul  5 21:21:26 php1 sshd\[17113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207
Jul  5 21:21:27 php1 sshd\[17113\]: Failed password for invalid user uftp from 106.13.144.207 port 58730 ssh2
Jul  5 21:22:52 php1 sshd\[17197\]: Invalid user sarvesh from 106.13.144.207
Jul  5 21:22:52 php1 sshd\[17197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.207
2020-07-06 15:23:35
attackspambots
SSH/22 MH Probe, BF, Hack -
2020-06-14 18:35:23
attackspam
SSH Invalid Login
2020-05-27 06:34:10
attackbotsspam
Brute force SMTP login attempted.
...
2020-05-25 00:12:03
attackspambots
May 19 20:06:29 server sshd[16578]: Failed password for invalid user lzjian from 106.13.144.207 port 52644 ssh2
May 19 20:08:29 server sshd[18834]: Failed password for invalid user bim from 106.13.144.207 port 46492 ssh2
May 19 20:09:11 server sshd[19497]: Failed password for invalid user gun from 106.13.144.207 port 54962 ssh2
2020-05-20 02:32:20
attackbotsspam
Invalid user bini from 106.13.144.207 port 39008
2020-05-01 18:20:41
Comments on same subnet:
IP Type Details Datetime
106.13.144.8 attackspam
Aug  1 21:31:21 game-panel sshd[22791]: Failed password for root from 106.13.144.8 port 60414 ssh2
Aug  1 21:34:00 game-panel sshd[22891]: Failed password for root from 106.13.144.8 port 41748 ssh2
2020-08-02 05:37:28
106.13.144.8 attackspam
(sshd) Failed SSH login from 106.13.144.8 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 28 09:41:09 s1 sshd[26890]: Invalid user zcx from 106.13.144.8 port 37296
Jul 28 09:41:11 s1 sshd[26890]: Failed password for invalid user zcx from 106.13.144.8 port 37296 ssh2
Jul 28 09:48:13 s1 sshd[27059]: Invalid user jzhang71 from 106.13.144.8 port 46252
Jul 28 09:48:15 s1 sshd[27059]: Failed password for invalid user jzhang71 from 106.13.144.8 port 46252 ssh2
Jul 28 09:51:06 s1 sshd[27223]: Invalid user icmsectest from 106.13.144.8 port 51158
2020-07-28 15:37:14
106.13.144.8 attackspambots
Invalid user mcftp from 106.13.144.8 port 56572
2020-07-19 01:18:16
106.13.144.8 attack
Jul  6 09:37:14 lnxded64 sshd[12943]: Failed password for root from 106.13.144.8 port 45766 ssh2
Jul  6 09:37:14 lnxded64 sshd[12943]: Failed password for root from 106.13.144.8 port 45766 ssh2
2020-07-06 15:39:34
106.13.144.8 attackbotsspam
Jun 27 12:43:17 mail sshd\[51804\]: Invalid user sftp from 106.13.144.8
Jun 27 12:43:17 mail sshd\[51804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.8
...
2020-06-28 04:18:29
106.13.144.8 attackbotsspam
Jun 20 21:04:51 home sshd[694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.8
Jun 20 21:04:53 home sshd[694]: Failed password for invalid user hadoop from 106.13.144.8 port 32772 ssh2
Jun 20 21:06:30 home sshd[885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.8
...
2020-06-21 03:31:31
106.13.144.8 attackspam
Jun  4 22:04:05 mail sshd[17077]: Failed password for root from 106.13.144.8 port 43316 ssh2
...
2020-06-05 06:54:55
106.13.144.8 attack
May 28 02:03:39 firewall sshd[8836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.8  user=root
May 28 02:03:41 firewall sshd[8836]: Failed password for root from 106.13.144.8 port 41600 ssh2
May 28 02:07:54 firewall sshd[8961]: Invalid user test from 106.13.144.8
...
2020-05-28 14:10:02
106.13.144.8 attackspambots
May 25 21:39:57 rotator sshd\[16128\]: Failed password for root from 106.13.144.8 port 33890 ssh2May 25 21:43:05 rotator sshd\[16893\]: Failed password for root from 106.13.144.8 port 50178 ssh2May 25 21:46:07 rotator sshd\[17663\]: Invalid user gz from 106.13.144.8May 25 21:46:09 rotator sshd\[17663\]: Failed password for invalid user gz from 106.13.144.8 port 38236 ssh2May 25 21:49:08 rotator sshd\[17690\]: Invalid user cristie from 106.13.144.8May 25 21:49:10 rotator sshd\[17690\]: Failed password for invalid user cristie from 106.13.144.8 port 54518 ssh2
...
2020-05-26 04:15:30
106.13.144.8 attackspam
Apr 27 05:14:03 mockhub sshd[13537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.8
Apr 27 05:14:05 mockhub sshd[13537]: Failed password for invalid user janu from 106.13.144.8 port 39592 ssh2
...
2020-04-27 20:25:00
106.13.144.78 attackspambots
Port 27164 scan denied
2020-04-19 17:43:41
106.13.144.78 attack
2020-04-12T04:04:56.9098531495-001 sshd[38374]: Invalid user nagios from 106.13.144.78 port 47590
2020-04-12T04:04:56.9168541495-001 sshd[38374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.78
2020-04-12T04:04:56.9098531495-001 sshd[38374]: Invalid user nagios from 106.13.144.78 port 47590
2020-04-12T04:04:58.8853791495-001 sshd[38374]: Failed password for invalid user nagios from 106.13.144.78 port 47590 ssh2
2020-04-12T04:08:16.2249561495-001 sshd[38489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.144.78  user=root
2020-04-12T04:08:18.6502351495-001 sshd[38489]: Failed password for root from 106.13.144.78 port 57176 ssh2
...
2020-04-12 23:03:46
106.13.144.164 attackbots
IP blocked
2020-04-12 04:25:38
106.13.144.164 attackbots
$f2bV_matches
2020-04-07 14:58:02
106.13.144.78 attackspambots
Apr  5 00:45:28 ws24vmsma01 sshd[198342]: Failed password for root from 106.13.144.78 port 58352 ssh2
...
2020-04-05 13:46:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.144.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62726
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.144.207.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 18:20:34 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 207.144.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.144.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.182 attack
Dec 16 08:45:04 mail sshd\[19125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Dec 16 08:45:06 mail sshd\[19125\]: Failed password for root from 222.186.175.182 port 53120 ssh2
Dec 16 08:45:28 mail sshd\[19185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
...
2019-12-16 15:47:40
39.35.0.113 attackbotsspam
1576477741 - 12/16/2019 07:29:01 Host: 39.35.0.113/39.35.0.113 Port: 445 TCP Blocked
2019-12-16 15:55:40
202.83.43.216 attack
Lines containing failures of 202.83.43.216
Dec 16 07:33:43 shared01 sshd[21092]: Invalid user backuppc from 202.83.43.216 port 44758
Dec 16 07:33:43 shared01 sshd[21092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.43.216
Dec 16 07:33:45 shared01 sshd[21092]: Failed password for invalid user backuppc from 202.83.43.216 port 44758 ssh2
Dec 16 07:33:46 shared01 sshd[21092]: Connection closed by invalid user backuppc 202.83.43.216 port 44758 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=202.83.43.216
2019-12-16 15:48:14
86.47.36.250 attack
Dec 16 08:11:53 v22018053744266470 sshd[12706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.47.36.250
Dec 16 08:11:55 v22018053744266470 sshd[12706]: Failed password for invalid user inglebert from 86.47.36.250 port 45092 ssh2
Dec 16 08:20:32 v22018053744266470 sshd[13300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.47.36.250
...
2019-12-16 15:45:26
196.194.95.133 attack
1576477750 - 12/16/2019 07:29:10 Host: 196.194.95.133/196.194.95.133 Port: 445 TCP Blocked
2019-12-16 15:45:58
51.91.193.116 attackbots
Dec 15 21:59:05 web9 sshd\[26460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.193.116  user=root
Dec 15 21:59:07 web9 sshd\[26460\]: Failed password for root from 51.91.193.116 port 40724 ssh2
Dec 15 22:04:47 web9 sshd\[27186\]: Invalid user dovecot from 51.91.193.116
Dec 15 22:04:47 web9 sshd\[27186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.193.116
Dec 15 22:04:49 web9 sshd\[27186\]: Failed password for invalid user dovecot from 51.91.193.116 port 48980 ssh2
2019-12-16 16:15:54
178.128.150.158 attackspam
SSH bruteforce (Triggered fail2ban)
2019-12-16 15:52:02
140.143.127.179 attack
Dec 16 08:00:43 game-panel sshd[14721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.127.179
Dec 16 08:00:45 game-panel sshd[14721]: Failed password for invalid user ssh from 140.143.127.179 port 39016 ssh2
Dec 16 08:07:47 game-panel sshd[15021]: Failed password for root from 140.143.127.179 port 40300 ssh2
2019-12-16 16:17:27
185.232.67.8 attackbotsspam
Dec 16 08:38:54 dedicated sshd[14063]: Invalid user admin from 185.232.67.8 port 46672
2019-12-16 16:04:20
52.73.169.169 attackspam
12/16/2019-02:28:31.489302 52.73.169.169 Protocol: 17 ET CINS Active Threat Intelligence Poor Reputation IP group 52
2019-12-16 15:52:25
222.186.175.161 attackspam
Dec 16 09:10:28 eventyay sshd[27433]: Failed password for root from 222.186.175.161 port 45342 ssh2
Dec 16 09:10:40 eventyay sshd[27433]: error: maximum authentication attempts exceeded for root from 222.186.175.161 port 45342 ssh2 [preauth]
Dec 16 09:10:45 eventyay sshd[27441]: Failed password for root from 222.186.175.161 port 2586 ssh2
...
2019-12-16 16:14:07
201.0.41.232 attackspam
SMB Server BruteForce Attack
2019-12-16 16:09:58
129.204.181.48 attack
Dec 16 07:44:39 hcbbdb sshd\[29515\]: Invalid user haakseth from 129.204.181.48
Dec 16 07:44:39 hcbbdb sshd\[29515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.181.48
Dec 16 07:44:41 hcbbdb sshd\[29515\]: Failed password for invalid user haakseth from 129.204.181.48 port 55912 ssh2
Dec 16 07:51:37 hcbbdb sshd\[30375\]: Invalid user sixers from 129.204.181.48
Dec 16 07:51:37 hcbbdb sshd\[30375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.181.48
2019-12-16 15:53:14
5.135.101.228 attack
2019-12-16T07:59:57.749846shield sshd\[10172\]: Invalid user password000 from 5.135.101.228 port 60722
2019-12-16T07:59:57.754489shield sshd\[10172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=noxia.org
2019-12-16T07:59:59.955725shield sshd\[10172\]: Failed password for invalid user password000 from 5.135.101.228 port 60722 ssh2
2019-12-16T08:05:25.476043shield sshd\[11995\]: Invalid user 444444 from 5.135.101.228 port 38510
2019-12-16T08:05:25.480500shield sshd\[11995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=noxia.org
2019-12-16 16:18:36
117.54.13.216 attackbotsspam
Dec 16 07:33:19 pi sshd\[12924\]: Failed password for root from 117.54.13.216 port 55904 ssh2
Dec 16 07:42:10 pi sshd\[13398\]: Invalid user sp from 117.54.13.216 port 60050
Dec 16 07:42:10 pi sshd\[13398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.54.13.216
Dec 16 07:42:12 pi sshd\[13398\]: Failed password for invalid user sp from 117.54.13.216 port 60050 ssh2
Dec 16 07:51:01 pi sshd\[13822\]: Invalid user nfs from 117.54.13.216 port 35959
...
2019-12-16 16:01:25

Recently Reported IPs

91.121.65.15 150.154.6.4 29.233.225.195 215.80.50.40
119.235.176.222 38.193.200.216 127.139.12.77 219.245.150.7
137.121.95.24 59.26.188.156 80.253.21.122 91.73.7.205
198.42.18.165 20.86.161.196 139.167.141.49 61.134.255.74
42.147.230.163 108.50.144.228 9.73.176.228 112.25.106.179