Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
51.158.173.243 106.13.148.52 - - [12/Nov/2019:22:33:55 +0000] "GET /TP/public/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
51.158.173.243 106.13.148.52 - - [12/Nov/2019:22:33:56 +0000] "GET /TP/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
...
2019-11-13 08:35:51
Comments on same subnet:
IP Type Details Datetime
106.13.148.104 attackbots
BF attempts
2020-07-14 18:12:56
106.13.148.104 attackbots
Jul  4 14:07:18 abendstille sshd\[8841\]: Invalid user all from 106.13.148.104
Jul  4 14:07:18 abendstille sshd\[8841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Jul  4 14:07:20 abendstille sshd\[8841\]: Failed password for invalid user all from 106.13.148.104 port 54992 ssh2
Jul  4 14:10:31 abendstille sshd\[11777\]: Invalid user m1 from 106.13.148.104
Jul  4 14:10:31 abendstille sshd\[11777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-07-05 00:45:30
106.13.148.104 attackbotsspam
2020-06-04T05:37:10.885791devel sshd[1833]: Failed password for root from 106.13.148.104 port 33708 ssh2
2020-06-04T05:38:29.418096devel sshd[1919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
2020-06-04T05:38:31.358581devel sshd[1919]: Failed password for root from 106.13.148.104 port 51124 ssh2
2020-06-04 18:33:49
106.13.148.104 attackspambots
Jun  3 15:03:23 [host] sshd[32082]: pam_unix(sshd:
Jun  3 15:03:25 [host] sshd[32082]: Failed passwor
Jun  3 15:06:21 [host] sshd[32205]: pam_unix(sshd:
2020-06-03 21:16:31
106.13.148.104 attackspambots
Invalid user admin from 106.13.148.104 port 59152
2020-05-28 07:39:31
106.13.148.104 attackbots
May 22 14:39:54 home sshd[31246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May 22 14:39:56 home sshd[31246]: Failed password for invalid user ics from 106.13.148.104 port 51206 ssh2
May 22 14:44:25 home sshd[31918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-05-22 23:58:57
106.13.148.104 attack
May  9 18:39:25 ns382633 sshd\[2624\]: Invalid user juliane from 106.13.148.104 port 48350
May  9 18:39:25 ns382633 sshd\[2624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May  9 18:39:26 ns382633 sshd\[2624\]: Failed password for invalid user juliane from 106.13.148.104 port 48350 ssh2
May  9 18:44:48 ns382633 sshd\[3517\]: Invalid user spam from 106.13.148.104 port 40024
May  9 18:44:48 ns382633 sshd\[3517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
2020-05-10 04:07:46
106.13.148.104 attackbots
frenzy
2020-04-26 06:31:11
106.13.148.104 attackspambots
Apr 24 06:51:53 vps647732 sshd[5808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Apr 24 06:51:54 vps647732 sshd[5808]: Failed password for invalid user testserver from 106.13.148.104 port 42790 ssh2
...
2020-04-24 15:38:46
106.13.148.104 attack
$f2bV_matches
2020-04-16 23:58:19
106.13.148.104 attackspam
2020-04-10T17:18:50.260104rocketchat.forhosting.nl sshd[23953]: Invalid user oracle from 106.13.148.104 port 48606
2020-04-10T17:18:51.812820rocketchat.forhosting.nl sshd[23953]: Failed password for invalid user oracle from 106.13.148.104 port 48606 ssh2
2020-04-10T17:35:39.507475rocketchat.forhosting.nl sshd[24482]: Invalid user test from 106.13.148.104 port 44798
...
2020-04-10 23:38:38
106.13.148.104 attack
Apr  8 21:25:08 localhost sshd\[29831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
Apr  8 21:25:10 localhost sshd\[29831\]: Failed password for root from 106.13.148.104 port 56122 ssh2
Apr  8 21:46:37 localhost sshd\[30225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
...
2020-04-09 10:20:02
106.13.148.104 attack
ssh brute force
2020-04-08 13:43:55
106.13.148.75 attack
Feb  7 14:52:36 reporting1 sshd[13539]: Did not receive identification string from 106.13.148.75
Feb  7 14:55:46 reporting1 sshd[15143]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:46 reporting1 sshd[15143]: Failed password for invalid user r.r from 106.13.148.75 port 34612 ssh2
Feb  7 14:55:50 reporting1 sshd[15164]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:50 reporting1 sshd[15164]: Failed password for invalid user r.r from 106.13.148.75 port 40226 ssh2
Feb  7 14:55:55 reporting1 sshd[15221]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:55 reporting1 sshd[15221]: Failed password for invalid user r.r from 106.13.148.75 port 45814 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.148.75
2020-02-08 05:52:19
106.13.148.44 attackspam
Unauthorized connection attempt detected from IP address 106.13.148.44 to port 2220 [J]
2020-02-01 14:09:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.148.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52449
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.148.52.			IN	A

;; AUTHORITY SECTION:
.			115	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111201 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 13 08:35:48 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 52.148.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.148.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
50.251.252.182 attackspam
Scan detected 2020.03.11 03:15:19 blocked until 2020.04.05 00:46:42
2020-03-11 11:39:57
92.63.194.107 attackbotsspam
2020-03-11T02:21:29.270517shield sshd\[1816\]: Invalid user admin from 92.63.194.107 port 37953
2020-03-11T02:21:29.279700shield sshd\[1816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.107
2020-03-11T02:21:30.711511shield sshd\[1816\]: Failed password for invalid user admin from 92.63.194.107 port 37953 ssh2
2020-03-11T02:21:46.268158shield sshd\[1882\]: Invalid user ubnt from 92.63.194.107 port 44467
2020-03-11T02:21:46.276561shield sshd\[1882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.107
2020-03-11 11:21:16
159.89.169.125 attackbots
Mar 11 03:46:35 [host] sshd[31762]: pam_unix(sshd:
Mar 11 03:46:37 [host] sshd[31762]: Failed passwor
Mar 11 03:50:02 [host] sshd[31952]: pam_unix(sshd:
2020-03-11 11:19:31
107.170.129.141 attackbotsspam
Mar 10 21:08:29 askasleikir sshd[190117]: Failed password for invalid user patrycja from 107.170.129.141 port 43648 ssh2
2020-03-11 11:56:31
113.190.208.167 attack
Unauthorized connection attempt from IP address 113.190.208.167 on Port 445(SMB)
2020-03-11 11:23:15
77.42.123.15 attackspam
Unauthorized connection attempt from IP address 77.42.123.15 on Port 445(SMB)
2020-03-11 11:56:49
114.200.117.119 attackbotsspam
Port probing on unauthorized port 5555
2020-03-11 11:35:21
213.87.101.176 attackspambots
Mar 11 03:15:09 host sshd[58854]: Invalid user Julio from 213.87.101.176 port 44164
...
2020-03-11 11:52:36
190.24.142.90 attack
Unauthorized connection attempt from IP address 190.24.142.90 on Port 445(SMB)
2020-03-11 11:46:59
45.95.168.159 attack
SMTP/25 AUTH
2020-03-11 11:36:12
117.6.132.9 attackspambots
Unauthorized connection attempt from IP address 117.6.132.9 on Port 445(SMB)
2020-03-11 11:19:57
180.244.232.150 attackspambots
Automatic report - Port Scan
2020-03-11 11:34:57
113.160.158.3 attack
Lines containing failures of 113.160.158.3
/var/log/apache/pucorp.org.log:2020-03-11T03:04:20.306847+01:00 desktop sshd[22667]: Did not receive identification string from 113.160.158.3 port 34209
/var/log/apache/pucorp.org.log:2020-03-11T03:04:28.118081+01:00 desktop sshd[22674]: Address 113.160.158.3 maps to static.vnpt.vn, but this does not map back to the address.
/var/log/apache/pucorp.org.log:2020-03-11T03:04:28.126424+01:00 desktop sshd[22674]: Invalid user user from 113.160.158.3 port 48493
/var/log/apache/pucorp.org.log:2020-03-11T03:04:26.715646+01:00 edughostname sshd[709655]: Address 113.160.158.3 maps to static.vnpt.vn, but this does not map back to the address.
/var/log/apache/pucorp.org.log:2020-03-11T03:04:26.722468+01:00 edughostname sshd[709655]: Invalid user user from 113.160.158.3 port 8258
/var/log/apache/pucorp.org.log:2020-03-11T03:04:28.155747+01:00 edughostname sshd[709655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........
------------------------------
2020-03-11 11:24:57
200.89.178.79 attackbotsspam
SSH invalid-user multiple login try
2020-03-11 12:00:47
183.66.137.10 attackbotsspam
Mar 11 03:07:07 Ubuntu-1404-trusty-64-minimal sshd\[9810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.66.137.10  user=root
Mar 11 03:07:10 Ubuntu-1404-trusty-64-minimal sshd\[9810\]: Failed password for root from 183.66.137.10 port 50657 ssh2
Mar 11 03:13:40 Ubuntu-1404-trusty-64-minimal sshd\[13177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.66.137.10  user=root
Mar 11 03:13:42 Ubuntu-1404-trusty-64-minimal sshd\[13177\]: Failed password for root from 183.66.137.10 port 39951 ssh2
Mar 11 03:15:25 Ubuntu-1404-trusty-64-minimal sshd\[13882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.66.137.10  user=root
2020-03-11 11:27:50

Recently Reported IPs

42.231.93.199 222.141.89.160 175.29.127.11 183.177.205.196
182.126.73.34 177.86.151.18 177.10.148.53 185.3.251.126
78.171.96.161 46.167.110.240 45.95.32.72 63.88.23.211
122.107.68.4 45.125.65.63 46.29.255.100 12.143.91.206
251.80.150.156 44.151.208.108 247.213.252.104 117.139.199.186