Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
106.13.148.104 attackbots
BF attempts
2020-07-14 18:12:56
106.13.148.104 attackbots
Jul  4 14:07:18 abendstille sshd\[8841\]: Invalid user all from 106.13.148.104
Jul  4 14:07:18 abendstille sshd\[8841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Jul  4 14:07:20 abendstille sshd\[8841\]: Failed password for invalid user all from 106.13.148.104 port 54992 ssh2
Jul  4 14:10:31 abendstille sshd\[11777\]: Invalid user m1 from 106.13.148.104
Jul  4 14:10:31 abendstille sshd\[11777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-07-05 00:45:30
106.13.148.104 attackbotsspam
2020-06-04T05:37:10.885791devel sshd[1833]: Failed password for root from 106.13.148.104 port 33708 ssh2
2020-06-04T05:38:29.418096devel sshd[1919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
2020-06-04T05:38:31.358581devel sshd[1919]: Failed password for root from 106.13.148.104 port 51124 ssh2
2020-06-04 18:33:49
106.13.148.104 attackspambots
Jun  3 15:03:23 [host] sshd[32082]: pam_unix(sshd:
Jun  3 15:03:25 [host] sshd[32082]: Failed passwor
Jun  3 15:06:21 [host] sshd[32205]: pam_unix(sshd:
2020-06-03 21:16:31
106.13.148.104 attackspambots
Invalid user admin from 106.13.148.104 port 59152
2020-05-28 07:39:31
106.13.148.104 attackbots
May 22 14:39:54 home sshd[31246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May 22 14:39:56 home sshd[31246]: Failed password for invalid user ics from 106.13.148.104 port 51206 ssh2
May 22 14:44:25 home sshd[31918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-05-22 23:58:57
106.13.148.104 attack
May  9 18:39:25 ns382633 sshd\[2624\]: Invalid user juliane from 106.13.148.104 port 48350
May  9 18:39:25 ns382633 sshd\[2624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May  9 18:39:26 ns382633 sshd\[2624\]: Failed password for invalid user juliane from 106.13.148.104 port 48350 ssh2
May  9 18:44:48 ns382633 sshd\[3517\]: Invalid user spam from 106.13.148.104 port 40024
May  9 18:44:48 ns382633 sshd\[3517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
2020-05-10 04:07:46
106.13.148.104 attackbots
frenzy
2020-04-26 06:31:11
106.13.148.104 attackspambots
Apr 24 06:51:53 vps647732 sshd[5808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Apr 24 06:51:54 vps647732 sshd[5808]: Failed password for invalid user testserver from 106.13.148.104 port 42790 ssh2
...
2020-04-24 15:38:46
106.13.148.104 attack
$f2bV_matches
2020-04-16 23:58:19
106.13.148.104 attackspam
2020-04-10T17:18:50.260104rocketchat.forhosting.nl sshd[23953]: Invalid user oracle from 106.13.148.104 port 48606
2020-04-10T17:18:51.812820rocketchat.forhosting.nl sshd[23953]: Failed password for invalid user oracle from 106.13.148.104 port 48606 ssh2
2020-04-10T17:35:39.507475rocketchat.forhosting.nl sshd[24482]: Invalid user test from 106.13.148.104 port 44798
...
2020-04-10 23:38:38
106.13.148.104 attack
Apr  8 21:25:08 localhost sshd\[29831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
Apr  8 21:25:10 localhost sshd\[29831\]: Failed password for root from 106.13.148.104 port 56122 ssh2
Apr  8 21:46:37 localhost sshd\[30225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
...
2020-04-09 10:20:02
106.13.148.104 attack
ssh brute force
2020-04-08 13:43:55
106.13.148.75 attack
Feb  7 14:52:36 reporting1 sshd[13539]: Did not receive identification string from 106.13.148.75
Feb  7 14:55:46 reporting1 sshd[15143]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:46 reporting1 sshd[15143]: Failed password for invalid user r.r from 106.13.148.75 port 34612 ssh2
Feb  7 14:55:50 reporting1 sshd[15164]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:50 reporting1 sshd[15164]: Failed password for invalid user r.r from 106.13.148.75 port 40226 ssh2
Feb  7 14:55:55 reporting1 sshd[15221]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:55 reporting1 sshd[15221]: Failed password for invalid user r.r from 106.13.148.75 port 45814 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.148.75
2020-02-08 05:52:19
106.13.148.44 attackspam
Unauthorized connection attempt detected from IP address 106.13.148.44 to port 2220 [J]
2020-02-01 14:09:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.148.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37455
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.13.148.238.			IN	A

;; AUTHORITY SECTION:
.			313	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 18:54:27 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 238.148.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 238.148.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.13.59.16 attackbots
[Aegis] @ 2019-07-01 03:39:37  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-04-29 15:56:53
82.194.17.106 attackspambots
Dovecot Invalid User Login Attempt.
2020-04-29 16:26:55
87.226.165.143 attackbots
$f2bV_matches
2020-04-29 16:09:50
208.109.14.122 attackspam
Invalid user kd from 208.109.14.122 port 41070
2020-04-29 16:29:05
74.82.47.59 attackbotsspam
1883/tcp 5555/tcp 873/tcp...
[2020-03-03/04-29]38pkt,14pt.(tcp),2pt.(udp)
2020-04-29 16:10:06
94.102.56.181 attackspam
firewall-block, port(s): 5011/tcp
2020-04-29 16:33:54
51.79.73.171 attack
Apr 29 13:56:11 itv-usvr-02 sshd[16250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.73.171  user=root
Apr 29 13:56:14 itv-usvr-02 sshd[16250]: Failed password for root from 51.79.73.171 port 59228 ssh2
Apr 29 14:03:18 itv-usvr-02 sshd[16497]: Invalid user hosting from 51.79.73.171 port 36698
Apr 29 14:03:18 itv-usvr-02 sshd[16497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.73.171
Apr 29 14:03:18 itv-usvr-02 sshd[16497]: Invalid user hosting from 51.79.73.171 port 36698
Apr 29 14:03:20 itv-usvr-02 sshd[16497]: Failed password for invalid user hosting from 51.79.73.171 port 36698 ssh2
2020-04-29 15:54:51
128.199.199.234 attack
xmlrpc attack
2020-04-29 16:04:30
94.71.161.45 attackbots
Automatic report - Port Scan Attack
2020-04-29 16:34:52
218.92.0.212 attackbotsspam
Apr 29 08:13:32 ip-172-31-61-156 sshd[28040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Apr 29 08:13:33 ip-172-31-61-156 sshd[28040]: Failed password for root from 218.92.0.212 port 6560 ssh2
...
2020-04-29 16:24:00
51.178.2.79 attackspambots
2020-04-29T07:24:21.311966abusebot-8.cloudsearch.cf sshd[5770]: Invalid user jann from 51.178.2.79 port 35712
2020-04-29T07:24:21.320572abusebot-8.cloudsearch.cf sshd[5770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip79.ip-51-178-2.eu
2020-04-29T07:24:21.311966abusebot-8.cloudsearch.cf sshd[5770]: Invalid user jann from 51.178.2.79 port 35712
2020-04-29T07:24:22.997864abusebot-8.cloudsearch.cf sshd[5770]: Failed password for invalid user jann from 51.178.2.79 port 35712 ssh2
2020-04-29T07:31:22.973245abusebot-8.cloudsearch.cf sshd[6168]: Invalid user sftpuser from 51.178.2.79 port 37148
2020-04-29T07:31:22.982335abusebot-8.cloudsearch.cf sshd[6168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip79.ip-51-178-2.eu
2020-04-29T07:31:22.973245abusebot-8.cloudsearch.cf sshd[6168]: Invalid user sftpuser from 51.178.2.79 port 37148
2020-04-29T07:31:25.124978abusebot-8.cloudsearch.cf sshd[6168]: Failed pa
...
2020-04-29 16:10:27
173.245.239.105 attackspam
Dovecot Invalid User Login Attempt.
2020-04-29 15:59:51
45.77.119.191 attackspam
Lines containing failures of 45.77.119.191
Apr 28 23:11:53 ghostnameioc sshd[6618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.119.191  user=r.r
Apr 28 23:11:55 ghostnameioc sshd[6618]: Failed password for r.r from 45.77.119.191 port 38828 ssh2
Apr 28 23:11:56 ghostnameioc sshd[6618]: Received disconnect from 45.77.119.191 port 38828:11: Bye Bye [preauth]
Apr 28 23:11:56 ghostnameioc sshd[6618]: Disconnected from authenticating user r.r 45.77.119.191 port 38828 [preauth]
Apr 28 23:21:30 ghostnameioc sshd[7016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.119.191  user=r.r
Apr 28 23:21:32 ghostnameioc sshd[7016]: Failed password for r.r from 45.77.119.191 port 37508 ssh2
Apr 28 23:21:33 ghostnameioc sshd[7016]: Received disconnect from 45.77.119.191 port 37508:11: Bye Bye [preauth]
Apr 28 23:21:33 ghostnameioc sshd[7016]: Disconnected from authenticating user r.r 45.77.119........
------------------------------
2020-04-29 16:28:39
186.31.25.4 attackbots
$f2bV_matches
2020-04-29 16:30:32
103.27.238.202 attackbots
Apr 29 09:01:50 xeon sshd[18897]: Failed password for invalid user p from 103.27.238.202 port 45380 ssh2
2020-04-29 16:19:10

Recently Reported IPs

80.44.250.183 114.29.38.221 49.228.236.208 59.96.242.237
45.182.115.23 112.119.27.91 105.112.189.102 61.3.151.111
138.255.150.95 178.128.34.129 213.108.3.166 84.53.254.36
27.34.22.188 120.86.253.27 46.245.52.143 167.71.236.131
54.172.229.23 89.14.73.55 115.230.233.37 123.7.229.180