Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
106.13.185.47 attack
Aug 27 21:39:48 saturn sshd[1274002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.47 
Aug 27 21:39:48 saturn sshd[1274002]: Invalid user eve from 106.13.185.47 port 33788
Aug 27 21:39:50 saturn sshd[1274002]: Failed password for invalid user eve from 106.13.185.47 port 33788 ssh2
...
2020-08-28 04:25:28
106.13.185.97 attack
SP-Scan 57319:6117 detected 2020.08.26 19:57:08
blocked until 2020.10.15 12:59:55
2020-08-27 09:17:39
106.13.185.97 attackbotsspam
Aug 25 11:08:09 haigwepa sshd[15562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97 
Aug 25 11:08:11 haigwepa sshd[15562]: Failed password for invalid user aditya from 106.13.185.97 port 58632 ssh2
...
2020-08-25 17:17:16
106.13.185.47 attack
Aug 25 05:54:11 ns382633 sshd\[18377\]: Invalid user mauricio from 106.13.185.47 port 37780
Aug 25 05:54:11 ns382633 sshd\[18377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.47
Aug 25 05:54:12 ns382633 sshd\[18377\]: Failed password for invalid user mauricio from 106.13.185.47 port 37780 ssh2
Aug 25 05:57:38 ns382633 sshd\[19134\]: Invalid user medical from 106.13.185.47 port 43504
Aug 25 05:57:38 ns382633 sshd\[19134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.47
2020-08-25 13:57:08
106.13.185.47 attackspam
Aug 23 06:22:42 vps647732 sshd[3333]: Failed password for root from 106.13.185.47 port 38572 ssh2
...
2020-08-23 12:42:22
106.13.185.97 attackbots
" "
2020-08-19 04:35:47
106.13.185.97 attackbotsspam
Aug  6 19:15:04 mout sshd[26519]: Disconnected from authenticating user root 106.13.185.97 port 57318 [preauth]
Aug  6 19:27:15 mout sshd[27427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97  user=root
Aug  6 19:27:17 mout sshd[27427]: Failed password for root from 106.13.185.97 port 38894 ssh2
2020-08-07 01:29:51
106.13.185.97 attackbots
fail2ban -- 106.13.185.97
...
2020-06-12 01:13:56
106.13.185.97 attack
SSH Brute-Force. Ports scanning.
2020-06-09 12:52:17
106.13.185.97 attackbots
Jun  2 14:07:28 mout sshd[18751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97  user=root
Jun  2 14:07:29 mout sshd[18751]: Failed password for root from 106.13.185.97 port 35306 ssh2
2020-06-02 21:49:25
106.13.185.97 attackbots
May 25 20:29:48 scw-6657dc sshd[1717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97
May 25 20:29:48 scw-6657dc sshd[1717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97
May 25 20:29:50 scw-6657dc sshd[1717]: Failed password for invalid user ftptest from 106.13.185.97 port 58302 ssh2
...
2020-05-26 04:44:46
106.13.185.97 attackspambots
May 23 08:24:44 server1 sshd\[22072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97 
May 23 08:24:46 server1 sshd\[22072\]: Failed password for invalid user hrs from 106.13.185.97 port 50892 ssh2
May 23 08:28:31 server1 sshd\[23084\]: Invalid user aha from 106.13.185.97
May 23 08:28:31 server1 sshd\[23084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.185.97 
May 23 08:28:33 server1 sshd\[23084\]: Failed password for invalid user aha from 106.13.185.97 port 33040 ssh2
...
2020-05-23 23:09:29
106.13.185.97 attackbotsspam
May 11 08:49:19 xeon sshd[48348]: Failed password for invalid user su from 106.13.185.97 port 52026 ssh2
2020-05-11 17:51:55
106.13.185.52 attackspam
detected by Fail2Ban
2020-03-26 12:06:50
106.13.185.98 attack
Triggered by Fail2Ban at Ares web server
2020-03-23 17:36:10
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '106.12.0.0 - 106.13.255.255'

% Abuse contact for '106.12.0.0 - 106.13.255.255' is 'huxin05@baidu.com'

inetnum:        106.12.0.0 - 106.13.255.255
netname:        Baidu
descr:          Beijing Baidu Netcom Science and Technology Co., Ltd.
descr:          Baidu Plaza, No.10, Shangdi 10th street,
descr:          Haidian District Beijing,100080
country:        CN
admin-c:        BN261-AP
tech-c:         BN261-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-BAIDU-CN
mnt-lower:      MAINT-CNNIC-AP
mnt-routes:     MAINT-CNNIC-AP
last-modified:  2024-03-11T23:30:43Z
source:         APNIC

irt:            IRT-BAIDU-CN
address:        12f,lixiang building ,zhongguancun,beijing
e-mail:         huxin05@baidu.com
abuse-mailbox:  huxin05@baidu.com
admin-c:        ZKY3-AP
tech-c:         ZKY3-AP
auth:           # Filtered
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-18T00:35:07Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Baidu Noc
address:        Baidu Campus,NO.10 Shangdi 10th Street,Haidian District,Beijing The People's Republic of China 100085
country:        CN
phone:          +86-18110062082
e-mail:         noc@baidu.com
nic-hdl:        BN261-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2024-03-11T23:28:23Z
source:         APNIC

% Information related to '106.13.128.0/18AS38365'

route:          106.13.128.0/18
descr:          Baidu
country:        CN
origin:         AS38365
notify:         zhangyukun@baidu.com
mnt-by:         MAINT-CNNIC-AP
last-modified:  2018-11-14T23:46:02Z
source:         APNIC

% Information related to '106.13.128.0/18AS55967'

route:          106.13.128.0/18
descr:          Baidu
country:        CN
origin:         AS55967
notify:         zhangyukun@baidu.com
mnt-by:         MAINT-CNNIC-AP
last-modified:  2018-11-14T23:46:02Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.185.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.13.185.159.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026072900 1800 900 604800 86400

;; Query time: 506 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 29 19:41:08 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 159.185.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.185.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
183.82.165.185 attack
20/9/26@16:35:33: FAIL: Alarm-Network address from=183.82.165.185
20/9/26@16:35:33: FAIL: Alarm-Network address from=183.82.165.185
...
2020-09-28 01:55:33
157.25.173.82 attack
failed_logins
2020-09-28 02:07:48
177.135.101.5 attackbotsspam
Brute force attempt
2020-09-28 01:44:55
123.252.174.205 attackbots
1601152517 - 09/26/2020 22:35:17 Host: 123.252.174.205/123.252.174.205 Port: 445 TCP Blocked
2020-09-28 02:09:05
203.106.81.246 attackbotsspam
Automatic report - Port Scan Attack
2020-09-28 02:01:47
129.28.12.228 attackspam
Sep 27 18:21:28 ip106 sshd[26301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.12.228 
Sep 27 18:21:30 ip106 sshd[26301]: Failed password for invalid user teamspeak from 129.28.12.228 port 60602 ssh2
...
2020-09-28 02:07:08
218.92.0.223 attack
Sep 27 19:54:06 OPSO sshd\[14437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.223  user=root
Sep 27 19:54:08 OPSO sshd\[14437\]: Failed password for root from 218.92.0.223 port 26535 ssh2
Sep 27 19:54:12 OPSO sshd\[14437\]: Failed password for root from 218.92.0.223 port 26535 ssh2
Sep 27 19:54:14 OPSO sshd\[14437\]: Failed password for root from 218.92.0.223 port 26535 ssh2
Sep 27 19:54:18 OPSO sshd\[14437\]: Failed password for root from 218.92.0.223 port 26535 ssh2
2020-09-28 01:59:01
46.101.14.203 attack
Sep 27 00:38:12 www sshd\[139249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.14.203  user=root
Sep 27 00:38:13 www sshd\[139249\]: Failed password for root from 46.101.14.203 port 58342 ssh2
Sep 27 00:42:17 www sshd\[139349\]: Invalid user external from 46.101.14.203
Sep 27 00:42:17 www sshd\[139349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.14.203
...
2020-09-28 02:04:55
114.113.126.181 attack
Sep 27 18:21:44 hell sshd[11956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.181
Sep 27 18:21:47 hell sshd[11956]: Failed password for invalid user toor from 114.113.126.181 port 34504 ssh2
...
2020-09-28 01:46:25
103.130.212.109 attackbotsspam
Invalid user george from 103.130.212.109 port 52344
2020-09-28 02:00:15
27.217.21.22 attack
Listed on    abuseat.org plus zen-spamhaus   / proto=17  .  srcport=8000  .  dstport=5353  .     (2645)
2020-09-28 01:53:37
45.55.182.232 attack
Sep 27 20:11:17 vpn01 sshd[20499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.182.232
Sep 27 20:11:19 vpn01 sshd[20499]: Failed password for invalid user ftpuser from 45.55.182.232 port 33658 ssh2
...
2020-09-28 02:15:41
139.162.122.110 attack
Sep 27 19:47:14 mout sshd[22308]: Invalid user  from 139.162.122.110 port 41276
Sep 27 19:47:14 mout sshd[22308]: Invalid user  from 139.162.122.110 port 41276
Sep 27 19:47:15 mout sshd[22308]: Failed none for invalid user  from 139.162.122.110 port 41276 ssh2
2020-09-28 02:06:42
54.37.82.150 attackspam
Automatic report - XMLRPC Attack
2020-09-28 01:53:16
36.112.104.194 attackbotsspam
[ssh] SSH attack
2020-09-28 01:39:59

Recently Reported IPs

198.65.3.243 18.232.121.80 112.28.111.214 123.7.17.151
39.97.61.13 85.217.149.31 202.189.15.226 52.194.189.25
123.234.236.156 139.59.134.210 46.101.114.183 209.38.237.32
206.81.18.71 207.154.239.237 207.154.222.104 174.138.27.103
167.71.61.157 68.183.19.150 161.35.198.220 32.197.166.72