Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspam
Feb 28 11:59:48 minden010 sshd[32226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.187
Feb 28 11:59:50 minden010 sshd[32226]: Failed password for invalid user jira from 106.13.149.187 port 37560 ssh2
Feb 28 12:07:01 minden010 sshd[2447]: Failed password for root from 106.13.149.187 port 37880 ssh2
...
2020-02-28 19:10:53
Comments on same subnet:
IP Type Details Datetime
106.13.149.57 attackspambots
Aug 24 21:51:45 game-panel sshd[13385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
Aug 24 21:51:47 game-panel sshd[13385]: Failed password for invalid user blumberg from 106.13.149.57 port 58800 ssh2
Aug 24 21:56:00 game-panel sshd[13589]: Failed password for root from 106.13.149.57 port 34292 ssh2
2020-08-25 06:15:49
106.13.149.57 attackbotsspam
Aug 22 23:29:45 lukav-desktop sshd\[7527\]: Invalid user admin from 106.13.149.57
Aug 22 23:29:45 lukav-desktop sshd\[7527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
Aug 22 23:29:47 lukav-desktop sshd\[7527\]: Failed password for invalid user admin from 106.13.149.57 port 58544 ssh2
Aug 22 23:33:59 lukav-desktop sshd\[7624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57  user=root
Aug 22 23:34:01 lukav-desktop sshd\[7624\]: Failed password for root from 106.13.149.57 port 36082 ssh2
2020-08-23 04:45:10
106.13.149.227 attackbots
SSH Brute-force
2020-08-18 16:53:58
106.13.149.57 attack
2020-08-09T04:56:40.273646shield sshd\[27694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57  user=root
2020-08-09T04:56:41.771595shield sshd\[27694\]: Failed password for root from 106.13.149.57 port 55300 ssh2
2020-08-09T05:01:20.095696shield sshd\[28615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57  user=root
2020-08-09T05:01:22.366356shield sshd\[28615\]: Failed password for root from 106.13.149.57 port 55636 ssh2
2020-08-09T05:06:07.172147shield sshd\[29365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57  user=root
2020-08-09 13:47:56
106.13.149.227 attack
Port scan denied
2020-08-06 18:07:15
106.13.149.57 attackbots
Aug  5 22:34:36 buvik sshd[451]: Failed password for root from 106.13.149.57 port 48492 ssh2
Aug  5 22:38:29 buvik sshd[1069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57  user=root
Aug  5 22:38:31 buvik sshd[1069]: Failed password for root from 106.13.149.57 port 48508 ssh2
...
2020-08-06 07:13:28
106.13.149.57 attackbotsspam
Jul 28 02:12:31 journals sshd\[58590\]: Invalid user baoyonglian from 106.13.149.57
Jul 28 02:12:31 journals sshd\[58590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
Jul 28 02:12:33 journals sshd\[58590\]: Failed password for invalid user baoyonglian from 106.13.149.57 port 36688 ssh2
Jul 28 02:13:43 journals sshd\[58700\]: Invalid user mace from 106.13.149.57
Jul 28 02:13:43 journals sshd\[58700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
...
2020-07-28 07:22:08
106.13.149.57 attackbots
Jul 24 05:32:26 rush sshd[7755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
Jul 24 05:32:28 rush sshd[7755]: Failed password for invalid user java from 106.13.149.57 port 44870 ssh2
Jul 24 05:38:31 rush sshd[7962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
...
2020-07-24 13:55:30
106.13.149.227 attackspam
Unauthorized connection attempt detected from IP address 106.13.149.227 to port 11659
2020-07-16 04:27:48
106.13.149.227 attack
11898/tcp 26264/tcp 10538/tcp...
[2020-06-23/07-08]10pkt,10pt.(tcp)
2020-07-08 23:30:07
106.13.149.57 attackspam
Jul  8 09:58:19 dhoomketu sshd[1362956]: Invalid user tudor from 106.13.149.57 port 43958
Jul  8 09:58:19 dhoomketu sshd[1362956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57 
Jul  8 09:58:19 dhoomketu sshd[1362956]: Invalid user tudor from 106.13.149.57 port 43958
Jul  8 09:58:22 dhoomketu sshd[1362956]: Failed password for invalid user tudor from 106.13.149.57 port 43958 ssh2
Jul  8 10:01:42 dhoomketu sshd[1362992]: Invalid user yfbastion from 106.13.149.57 port 32846
...
2020-07-08 13:45:32
106.13.149.57 attackbots
Jul  7 15:32:24 cp sshd[32005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.57
2020-07-08 01:02:35
106.13.149.227 attackbotsspam
Jul  5 17:02:58 dignus sshd[13103]: Invalid user postgres from 106.13.149.227 port 45614
Jul  5 17:02:58 dignus sshd[13103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.227
Jul  5 17:03:00 dignus sshd[13103]: Failed password for invalid user postgres from 106.13.149.227 port 45614 ssh2
Jul  5 17:08:41 dignus sshd[13589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.149.227  user=root
Jul  5 17:08:42 dignus sshd[13589]: Failed password for root from 106.13.149.227 port 38358 ssh2
...
2020-07-06 08:21:23
106.13.149.227 attackbotsspam
(sshd) Failed SSH login from 106.13.149.227 (CN/China/-): 5 in the last 3600 secs
2020-06-30 14:15:50
106.13.149.227 attack
sshd
2020-06-13 23:36:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.149.187
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.149.187.			IN	A

;; AUTHORITY SECTION:
.			395	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022800 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 19:10:45 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 187.149.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 187.149.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
198.235.24.90 attack
Malicious IP
2024-04-17 11:59:10
34.201.152.143 attack
Scan port
2024-04-16 11:47:40
185.224.128.254 attack
Malicious IP
2024-04-11 01:45:06
3.141.26.187 attack
Malicious IP / Malware
2024-04-12 12:33:11
118.123.105.85 attack
Vulnerability Scanner
2024-04-13 12:21:22
104.156.155.11 attack
Vulnerability Scanner
2024-04-15 12:23:18
185.63.253.00 spam
Vidio
2024-04-15 02:21:52
71.6.134.233 spamattack
Malicious IP / Malware
2024-04-17 00:59:17
162.216.149.192 attack
Malicious IP / Malware
2024-04-13 01:54:06
199.103.24.2 attack
199.103.24.2/199.103.24.8 Scan port
2024-04-10 01:02:22
198.235.24.94 attack
Malicious IP/FRaud connect
2024-04-11 12:21:44
192.241.206.34 spamattackproxy
Bot attacker IP
2024-04-16 12:28:56
213.186.79.74 attack
Vulnerability Scanner
2024-04-11 01:57:11
111.90.150.188 normal
Tolong buka blokir nya
2024-04-11 00:50:54
188.191.244.153 attack
Fraud connect
2024-04-13 01:45:25

Recently Reported IPs

117.3.80.4 122.155.27.1 110.138.211.102 116.111.185.78
103.216.218.52 202.179.188.66 180.145.24.44 125.167.114.219
178.219.123.76 66.249.65.110 173.208.184.28 106.51.64.90
87.197.137.176 180.140.126.212 103.212.211.140 36.92.10.97
91.220.81.146 180.110.40.186 77.232.100.192 110.77.238.48