Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Brute-Force,SSH
2020-06-03 02:39:31
attackbotsspam
Invalid user master from 106.13.168.150 port 51208
2020-04-27 20:20:38
attackspam
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-04-27 07:44:45
attack
ssh brute force
2020-04-19 15:52:00
attack
Apr 18 14:57:45 lukav-desktop sshd\[2566\]: Invalid user dv from 106.13.168.150
Apr 18 14:57:45 lukav-desktop sshd\[2566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Apr 18 14:57:46 lukav-desktop sshd\[2566\]: Failed password for invalid user dv from 106.13.168.150 port 47092 ssh2
Apr 18 15:01:53 lukav-desktop sshd\[2739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
Apr 18 15:01:55 lukav-desktop sshd\[2739\]: Failed password for root from 106.13.168.150 port 36414 ssh2
2020-04-18 21:29:23
attackspambots
SSH/22 MH Probe, BF, Hack -
2020-04-18 12:47:24
attack
Apr  9 06:15:11 webhost01 sshd[7786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Apr  9 06:15:13 webhost01 sshd[7786]: Failed password for invalid user rstudio from 106.13.168.150 port 50796 ssh2
...
2020-04-09 09:17:53
attackspam
Mar 29 09:41:22 v22019038103785759 sshd\[18109\]: Invalid user rgc from 106.13.168.150 port 37144
Mar 29 09:41:22 v22019038103785759 sshd\[18109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Mar 29 09:41:23 v22019038103785759 sshd\[18109\]: Failed password for invalid user rgc from 106.13.168.150 port 37144 ssh2
Mar 29 09:48:09 v22019038103785759 sshd\[18560\]: Invalid user gfv from 106.13.168.150 port 46884
Mar 29 09:48:09 v22019038103785759 sshd\[18560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
...
2020-03-29 16:04:56
attack
Mar 16 14:46:39 localhost sshd[126099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
Mar 16 14:46:42 localhost sshd[126099]: Failed password for root from 106.13.168.150 port 44978 ssh2
Mar 16 14:50:23 localhost sshd[126471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
Mar 16 14:50:26 localhost sshd[126471]: Failed password for root from 106.13.168.150 port 58198 ssh2
Mar 16 14:54:07 localhost sshd[126810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
Mar 16 14:54:09 localhost sshd[126810]: Failed password for root from 106.13.168.150 port 43214 ssh2
...
2020-03-17 04:08:42
attack
2020-03-13T08:23:55.235267shield sshd\[18470\]: Invalid user user4 from 106.13.168.150 port 47658
2020-03-13T08:23:55.244531shield sshd\[18470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
2020-03-13T08:23:57.455233shield sshd\[18470\]: Failed password for invalid user user4 from 106.13.168.150 port 47658 ssh2
2020-03-13T08:27:12.895353shield sshd\[19209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
2020-03-13T08:27:15.150977shield sshd\[19209\]: Failed password for root from 106.13.168.150 port 58180 ssh2
2020-03-13 19:41:25
attackspam
...
2020-02-03 21:02:04
attackbotsspam
Jan 25 07:13:13 sd-53420 sshd\[4992\]: Invalid user fish from 106.13.168.150
Jan 25 07:13:13 sd-53420 sshd\[4992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Jan 25 07:13:15 sd-53420 sshd\[4992\]: Failed password for invalid user fish from 106.13.168.150 port 41124 ssh2
Jan 25 07:15:11 sd-53420 sshd\[5290\]: Invalid user debian from 106.13.168.150
Jan 25 07:15:11 sd-53420 sshd\[5290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
...
2020-01-25 14:18:33
attackbotsspam
Jan 13 05:53:23 lnxded63 sshd[30444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
2020-01-13 13:45:10
attackspam
Dec 28 09:09:55 server sshd\[7020\]: Invalid user admin from 106.13.168.150
Dec 28 09:09:55 server sshd\[7020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150 
Dec 28 09:09:57 server sshd\[7020\]: Failed password for invalid user admin from 106.13.168.150 port 49302 ssh2
Dec 28 09:26:41 server sshd\[10611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
Dec 28 09:26:43 server sshd\[10611\]: Failed password for root from 106.13.168.150 port 56000 ssh2
...
2019-12-28 17:06:58
attackbots
$f2bV_matches
2019-12-26 04:19:04
attackbotsspam
$f2bV_matches
2019-12-17 02:31:40
attackbots
Dec 15 08:44:32 vps647732 sshd[14207]: Failed password for root from 106.13.168.150 port 58866 ssh2
...
2019-12-15 16:07:16
attack
Nov 21 05:45:45 sachi sshd\[32677\]: Invalid user qiao from 106.13.168.150
Nov 21 05:45:45 sachi sshd\[32677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Nov 21 05:45:47 sachi sshd\[32677\]: Failed password for invalid user qiao from 106.13.168.150 port 56542 ssh2
Nov 21 05:50:45 sachi sshd\[660\]: Invalid user ristl from 106.13.168.150
Nov 21 05:50:45 sachi sshd\[660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
2019-11-22 02:33:20
attackspambots
Brute-force attempt banned
2019-11-20 00:53:25
attackbots
Nov 17 11:22:31 cavern sshd[1025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
2019-11-17 20:49:39
attackspam
Nov  7 23:42:24 bouncer sshd\[32371\]: Invalid user 123 from 106.13.168.150 port 48212
Nov  7 23:42:24 bouncer sshd\[32371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150 
Nov  7 23:42:27 bouncer sshd\[32371\]: Failed password for invalid user 123 from 106.13.168.150 port 48212 ssh2
...
2019-11-08 08:14:40
attackbots
2019-10-20T21:29:04.202264abusebot-2.cloudsearch.cf sshd\[31135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150  user=root
2019-10-21 05:42:14
attack
Oct 20 04:11:36 www_kotimaassa_fi sshd[13384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.150
Oct 20 04:11:38 www_kotimaassa_fi sshd[13384]: Failed password for invalid user shazam from 106.13.168.150 port 56048 ssh2
...
2019-10-20 15:44:39
Comments on same subnet:
IP Type Details Datetime
106.13.168.107 attackbots
21 attempts against mh-ssh on echoip
2020-09-19 03:27:26
106.13.168.107 attackspambots
$f2bV_matches
2020-09-18 19:30:02
106.13.168.43 attackbotsspam
Invalid user devuser from 106.13.168.43 port 43214
2020-08-30 14:53:30
106.13.168.43 attack
Aug 25 17:27:11 lukav-desktop sshd\[2500\]: Invalid user teste from 106.13.168.43
Aug 25 17:27:11 lukav-desktop sshd\[2500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.43
Aug 25 17:27:13 lukav-desktop sshd\[2500\]: Failed password for invalid user teste from 106.13.168.43 port 47750 ssh2
Aug 25 17:31:44 lukav-desktop sshd\[2546\]: Invalid user niv from 106.13.168.43
Aug 25 17:31:44 lukav-desktop sshd\[2546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.43
2020-08-25 22:44:17
106.13.168.107 attackbots
Aug 25 00:19:51 vps sshd[30866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.107 
Aug 25 00:19:53 vps sshd[30866]: Failed password for invalid user bots from 106.13.168.107 port 44816 ssh2
Aug 25 00:32:19 vps sshd[31519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.107 
...
2020-08-25 08:00:43
106.13.168.43 attackbots
Aug 16 19:58:47 mailserver sshd\[10834\]: Invalid user testing from 106.13.168.43
...
2020-08-17 02:59:28
106.13.168.43 attack
Aug 14 06:08:57 ip106 sshd[2662]: Failed password for root from 106.13.168.43 port 36808 ssh2
...
2020-08-14 15:17:25
106.13.168.43 attackspam
$f2bV_matches
2020-08-10 12:43:47
106.13.168.43 attackbots
Failed password for root from 106.13.168.43 port 51774 ssh2
2020-08-10 04:10:27
106.13.168.107 attackspambots
Aug  5 03:20:14 web9 sshd\[31600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.107  user=root
Aug  5 03:20:15 web9 sshd\[31600\]: Failed password for root from 106.13.168.107 port 33588 ssh2
Aug  5 03:23:56 web9 sshd\[32132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.107  user=root
Aug  5 03:23:58 web9 sshd\[32132\]: Failed password for root from 106.13.168.107 port 41058 ssh2
Aug  5 03:27:39 web9 sshd\[32761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.107  user=root
2020-08-06 02:54:43
106.13.168.43 attackspambots
Invalid user sinusbot from 106.13.168.43 port 46862
2020-07-30 13:11:35
106.13.168.43 attack
$f2bV_matches
2020-07-25 16:31:34
106.13.168.43 attack
Jul 22 16:55:07 ws22vmsma01 sshd[121379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.43
Jul 22 16:55:09 ws22vmsma01 sshd[121379]: Failed password for invalid user hm from 106.13.168.43 port 55968 ssh2
...
2020-07-23 04:41:11
106.13.168.43 attackbots
sshd: Failed password for invalid user .... from 106.13.168.43 port 48290 ssh2 (6 attempts)
2020-07-17 18:18:59
106.13.168.31 attack
Jun 24 05:50:55 ns37 sshd[13170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.168.31
2020-06-24 18:08:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.168.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.168.150.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101701 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 09:49:32 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 150.168.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 150.168.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
77.205.228.111 attackbots
SSH Brute-Force. Ports scanning.
2020-08-24 07:37:40
212.129.16.53 attack
Aug 23 19:32:36 Host-KEWR-E sshd[32429]: User www-data from 212.129.16.53 not allowed because not listed in AllowUsers
...
2020-08-24 07:57:21
106.12.116.75 attackbotsspam
Aug 24 00:00:07 plex-server sshd[2398342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.75 
Aug 24 00:00:07 plex-server sshd[2398342]: Invalid user jdc from 106.12.116.75 port 47352
Aug 24 00:00:09 plex-server sshd[2398342]: Failed password for invalid user jdc from 106.12.116.75 port 47352 ssh2
Aug 24 00:05:09 plex-server sshd[2400373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.75  user=root
Aug 24 00:05:10 plex-server sshd[2400373]: Failed password for root from 106.12.116.75 port 54128 ssh2
...
2020-08-24 08:06:08
34.75.125.212 attackbotsspam
Aug 23 22:02:49 ip-172-31-16-56 sshd\[20392\]: Invalid user photo from 34.75.125.212\
Aug 23 22:02:51 ip-172-31-16-56 sshd\[20392\]: Failed password for invalid user photo from 34.75.125.212 port 53048 ssh2\
Aug 23 22:06:43 ip-172-31-16-56 sshd\[20416\]: Invalid user openerp from 34.75.125.212\
Aug 23 22:06:45 ip-172-31-16-56 sshd\[20416\]: Failed password for invalid user openerp from 34.75.125.212 port 34352 ssh2\
Aug 23 22:10:23 ip-172-31-16-56 sshd\[20537\]: Invalid user qma from 34.75.125.212\
2020-08-24 07:28:44
14.32.187.194 attackspambots
81/tcp
[2020-08-23]1pkt
2020-08-24 08:03:12
218.92.0.173 attack
Scanned 28 times in the last 24 hours on port 22
2020-08-24 08:08:59
170.0.45.85 attackspambots
Automatic report - Port Scan Attack
2020-08-24 08:05:44
222.186.180.130 attackbotsspam
Aug 24 01:36:20 piServer sshd[21676]: Failed password for root from 222.186.180.130 port 13549 ssh2
Aug 24 01:36:24 piServer sshd[21676]: Failed password for root from 222.186.180.130 port 13549 ssh2
Aug 24 01:36:26 piServer sshd[21676]: Failed password for root from 222.186.180.130 port 13549 ssh2
...
2020-08-24 07:39:02
93.178.48.52 attack
445/tcp
[2020-08-23]1pkt
2020-08-24 07:38:14
110.78.171.64 attackspambots
445/tcp
[2020-08-23]1pkt
2020-08-24 07:58:47
201.110.227.145 attack
445/tcp
[2020-08-23]1pkt
2020-08-24 07:27:40
51.91.255.147 attackbots
Aug 24 01:35:06 [host] sshd[20685]: Invalid user e
Aug 24 01:35:07 [host] sshd[20685]: pam_unix(sshd:
Aug 24 01:35:09 [host] sshd[20685]: Failed passwor
2020-08-24 07:45:19
103.51.103.3 attackspam
103.51.103.3 - - [24/Aug/2020:00:17:37 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.51.103.3 - - [24/Aug/2020:00:17:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1815 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.51.103.3 - - [24/Aug/2020:00:17:39 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-24 07:41:39
109.125.166.154 attack
8080/tcp
[2020-08-23]1pkt
2020-08-24 07:29:04
190.36.100.4 attackspambots
445/tcp
[2020-08-23]1pkt
2020-08-24 07:51:50

Recently Reported IPs

144.214.25.150 170.80.224.98 148.64.56.125 185.156.73.45
135.23.228.145 112.115.52.6 198.49.88.135 37.45.225.56
117.23.5.151 2a06:dd00:1:4::1c 157.245.39.55 54.213.200.56
34.219.5.48 176.170.43.17 8.206.188.241 27.9.4.241
115.159.203.199 1.195.30.250 52.64.209.168 198.54.119.81