Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Aug 18 06:55:35 main sshd[10787]: Failed password for invalid user sk from 106.13.160.55 port 33390 ssh2
Aug 18 08:37:50 main sshd[12135]: Failed password for invalid user dai from 106.13.160.55 port 55038 ssh2
Aug 18 08:49:50 main sshd[12409]: Failed password for invalid user admin from 106.13.160.55 port 35590 ssh2
Aug 18 09:13:18 main sshd[12899]: Failed password for invalid user bram from 106.13.160.55 port 53150 ssh2
Aug 18 09:36:06 main sshd[13343]: Failed password for invalid user zhangfei from 106.13.160.55 port 42474 ssh2
2020-08-19 04:21:39
attackbots
Aug 10 13:07:00 vm0 sshd[352]: Failed password for root from 106.13.160.55 port 54960 ssh2
...
2020-08-10 21:01:29
attack
Invalid user park from 106.13.160.55 port 52126
2020-07-12 03:53:12
attackbotsspam
IP blocked
2020-06-29 19:31:55
attackspambots
Jun 22 14:48:23 server sshd[12584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55
Jun 22 14:48:25 server sshd[12584]: Failed password for invalid user na from 106.13.160.55 port 57608 ssh2
Jun 22 14:51:13 server sshd[12799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55
Jun 22 14:51:15 server sshd[12799]: Failed password for invalid user sysadmin from 106.13.160.55 port 46732 ssh2
...
2020-06-22 21:20:21
attack
Jun  8 08:59:59 vps639187 sshd\[1437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55  user=root
Jun  8 09:00:02 vps639187 sshd\[1437\]: Failed password for root from 106.13.160.55 port 33390 ssh2
Jun  8 09:05:31 vps639187 sshd\[1518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55  user=root
...
2020-06-08 17:53:27
attack
2020-06-01T05:51:07.450028vps773228.ovh.net sshd[14093]: Failed password for root from 106.13.160.55 port 57262 ssh2
2020-06-01T05:52:49.880669vps773228.ovh.net sshd[14103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55  user=root
2020-06-01T05:52:52.601216vps773228.ovh.net sshd[14103]: Failed password for root from 106.13.160.55 port 42212 ssh2
2020-06-01T05:54:34.528958vps773228.ovh.net sshd[14125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55  user=root
2020-06-01T05:54:36.662576vps773228.ovh.net sshd[14125]: Failed password for root from 106.13.160.55 port 55402 ssh2
...
2020-06-01 12:39:00
attackspambots
May 26 17:38:30 server sshd[5959]: Failed password for root from 106.13.160.55 port 45942 ssh2
May 26 17:48:06 server sshd[15736]: Failed password for root from 106.13.160.55 port 39712 ssh2
May 26 17:52:58 server sshd[20694]: Failed password for root from 106.13.160.55 port 50700 ssh2
2020-05-27 03:32:01
attackbots
Invalid user dan from 106.13.160.55 port 60546
2020-05-17 07:10:18
attack
May  5 19:52:08 server sshd[684]: Failed password for root from 106.13.160.55 port 36896 ssh2
May  5 19:54:58 server sshd[969]: Failed password for invalid user mana from 106.13.160.55 port 59244 ssh2
May  5 19:57:49 server sshd[1149]: Failed password for root from 106.13.160.55 port 53358 ssh2
2020-05-06 02:12:07
attackbots
$f2bV_matches
2020-04-27 19:32:11
attackspam
$f2bV_matches
2020-04-15 07:41:21
attackbotsspam
Apr 10 07:25:39 [host] sshd[17966]: Invalid user u
Apr 10 07:25:39 [host] sshd[17966]: pam_unix(sshd:
Apr 10 07:25:41 [host] sshd[17966]: Failed passwor
2020-04-10 17:39:38
attackbots
2020-03-18T14:09:18.326571jannga.de sshd[13083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55  user=root
2020-03-18T14:09:20.303511jannga.de sshd[13083]: Failed password for root from 106.13.160.55 port 35714 ssh2
...
2020-03-19 01:23:48
attackspam
Mar 11 20:19:45 santamaria sshd\[3413\]: Invalid user julia from 106.13.160.55
Mar 11 20:19:45 santamaria sshd\[3413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.55
Mar 11 20:19:47 santamaria sshd\[3413\]: Failed password for invalid user julia from 106.13.160.55 port 33596 ssh2
...
2020-03-12 03:21:16
Comments on same subnet:
IP Type Details Datetime
106.13.160.127 attackspam
" "
2020-08-20 23:00:33
106.13.160.127 attackbots
SSH Invalid Login
2020-08-17 05:57:27
106.13.160.127 attack
IP blocked
2020-08-15 07:06:24
106.13.160.249 attack
[ssh] SSH attack
2020-08-10 04:53:37
106.13.160.127 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-08T15:16:09Z and 2020-08-08T15:23:25Z
2020-08-09 02:21:04
106.13.160.249 attack
Jul 31 03:51:22 ws26vmsma01 sshd[154666]: Failed password for root from 106.13.160.249 port 55736 ssh2
...
2020-07-31 12:52:11
106.13.160.127 attackbots
Jul 30 05:57:46 *hidden* sshd[49338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.127 Jul 30 05:57:47 *hidden* sshd[49338]: Failed password for invalid user srs from 106.13.160.127 port 43786 ssh2 Jul 30 06:06:16 *hidden* sshd[49526]: Invalid user capture from 106.13.160.127 port 42794
2020-07-30 12:53:36
106.13.160.127 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-24 03:52:59
106.13.160.127 attackbotsspam
Jul 17 14:34:26 master sshd[13619]: Failed password for invalid user henk from 106.13.160.127 port 59044 ssh2
Jul 17 14:37:27 master sshd[13627]: Failed password for invalid user apt-mirror from 106.13.160.127 port 33706 ssh2
Jul 17 14:39:32 master sshd[13672]: Failed password for invalid user stephen from 106.13.160.127 port 56784 ssh2
Jul 17 14:41:26 master sshd[13716]: Failed password for invalid user wc from 106.13.160.127 port 51632 ssh2
Jul 17 14:43:29 master sshd[13726]: Failed password for invalid user kai from 106.13.160.127 port 46480 ssh2
Jul 17 14:45:22 master sshd[13773]: Failed password for invalid user ftpuser from 106.13.160.127 port 41328 ssh2
Jul 17 14:47:16 master sshd[13781]: Failed password for invalid user fuser1 from 106.13.160.127 port 36174 ssh2
Jul 17 14:49:11 master sshd[13793]: Failed password for invalid user filo from 106.13.160.127 port 59250 ssh2
Jul 17 14:51:10 master sshd[13843]: Failed password for invalid user laura from 106.13.160.127 port 54096 ssh2
2020-07-17 23:10:43
106.13.160.249 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 100 - port: 17899 proto: TCP cat: Misc Attack
2020-07-11 05:09:47
106.13.160.14 attackbots
Jun 30 22:02:19 ns382633 sshd\[4291\]: Invalid user caj from 106.13.160.14 port 41528
Jun 30 22:02:19 ns382633 sshd\[4291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.14
Jun 30 22:02:21 ns382633 sshd\[4291\]: Failed password for invalid user caj from 106.13.160.14 port 41528 ssh2
Jun 30 22:08:49 ns382633 sshd\[5251\]: Invalid user robert from 106.13.160.14 port 60564
Jun 30 22:08:49 ns382633 sshd\[5251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.14
2020-07-02 03:27:00
106.13.160.127 attackbots
Multiple SSH authentication failures from 106.13.160.127
2020-07-01 22:20:29
106.13.160.14 attackbotsspam
Jun 30 09:30:13 raspberrypi sshd[26068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.14 
Jun 30 09:30:15 raspberrypi sshd[26068]: Failed password for invalid user fxl from 106.13.160.14 port 33998 ssh2
Jun 30 09:34:55 raspberrypi sshd[26127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.14  user=root
...
2020-07-01 15:12:32
106.13.160.127 attackspambots
$f2bV_matches
2020-06-23 22:50:10
106.13.160.127 attack
$f2bV_matches
2020-06-22 13:22:40
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.160.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14731
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.160.55.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031101 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 03:21:13 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 55.160.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.160.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.105.130.134 attack
Jun 11 11:17:33 mockhub sshd[1696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.105.130.134
Jun 11 11:17:35 mockhub sshd[1696]: Failed password for invalid user nur from 103.105.130.134 port 56582 ssh2
...
2020-06-12 02:23:16
220.120.82.204 attackbots
Honeypot attack, port: 81, PTR: PTR record not found
2020-06-12 02:19:38
222.72.137.109 attackspam
20 attempts against mh-ssh on echoip
2020-06-12 02:38:05
45.55.49.201 attack
HTTP_USER_AGENT Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)
2020-06-12 02:35:14
192.144.188.169 attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-06-12 02:32:21
198.55.103.70 attackbots
Jun 11 14:11:03 vps647732 sshd[10843]: Failed password for root from 198.55.103.70 port 33930 ssh2
Jun 11 14:11:03 vps647732 sshd[10843]: error: Received disconnect from 198.55.103.70 port 33930:3: com.jcraft.jsch.JSchException: Auth fail [preauth]
...
2020-06-12 02:14:43
139.59.35.35 attackbotsspam
2020-06-11T16:18:26.633406rocketchat.forhosting.nl sshd[10670]: Invalid user neww from 139.59.35.35 port 50150
2020-06-11T16:18:29.019546rocketchat.forhosting.nl sshd[10670]: Failed password for invalid user neww from 139.59.35.35 port 50150 ssh2
2020-06-11T16:22:19.777923rocketchat.forhosting.nl sshd[10741]: Invalid user khan01 from 139.59.35.35 port 51886
...
2020-06-12 02:35:58
111.229.78.199 attack
Jun 11 16:12:48 pornomens sshd\[25655\]: Invalid user lpadm from 111.229.78.199 port 35376
Jun 11 16:12:48 pornomens sshd\[25655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.78.199
Jun 11 16:12:51 pornomens sshd\[25655\]: Failed password for invalid user lpadm from 111.229.78.199 port 35376 ssh2
...
2020-06-12 02:26:05
167.172.30.251 attackspam
HTTP_USER_AGENT Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)
2020-06-12 02:43:48
46.23.143.106 attackbots
failed_logins
2020-06-12 02:34:06
157.230.234.117 attackbots
IP	Attempted Username	Last Failed Attempt (DD/MM/YYYY)	Failed Attempts Count	Lockouts Count	URL Attacked
	157.230.234.117	admin	11/06/2020 05:03:24	1	0	https://morisc.org//wp-login.php
2020-06-12 02:48:15
144.172.79.7 attackspambots
(sshd) Failed SSH login from 144.172.79.7 (US/United States/-): 5 in the last 3600 secs
2020-06-12 02:37:06
200.89.174.253 attackbotsspam
Jun 11 20:13:44 legacy sshd[30271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.174.253
Jun 11 20:13:46 legacy sshd[30271]: Failed password for invalid user zhangyansen from 200.89.174.253 port 49954 ssh2
Jun 11 20:16:14 legacy sshd[30307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.174.253
...
2020-06-12 02:21:53
103.107.17.134 attack
Jun 11 18:36:13 ns382633 sshd\[27673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.17.134  user=root
Jun 11 18:36:15 ns382633 sshd\[27673\]: Failed password for root from 103.107.17.134 port 42562 ssh2
Jun 11 18:40:55 ns382633 sshd\[28634\]: Invalid user tempuser from 103.107.17.134 port 35636
Jun 11 18:40:55 ns382633 sshd\[28634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.17.134
Jun 11 18:40:57 ns382633 sshd\[28634\]: Failed password for invalid user tempuser from 103.107.17.134 port 35636 ssh2
2020-06-12 02:27:26
93.29.187.145 attackspam
Jun 11 08:06:49 ny01 sshd[17751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.29.187.145
Jun 11 08:06:51 ny01 sshd[17751]: Failed password for invalid user openbraov from 93.29.187.145 port 33182 ssh2
Jun 11 08:11:00 ny01 sshd[18342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.29.187.145
2020-06-12 02:18:23

Recently Reported IPs

2.56.18.215 78.85.17.176 46.7.127.141 96.9.245.161
175.44.252.215 202.77.40.212 38.120.98.143 159.87.59.64
251.238.107.211 202.42.77.123 183.121.150.80 83.56.192.213
1.108.101.242 181.199.49.53 203.128.126.212 53.245.150.148
177.177.111.233 65.7.113.87 217.133.38.227 255.52.255.106