Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Jun 10 13:54:32 firewall sshd[5404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145
Jun 10 13:54:32 firewall sshd[5404]: Invalid user andoria from 106.13.19.145
Jun 10 13:54:34 firewall sshd[5404]: Failed password for invalid user andoria from 106.13.19.145 port 44494 ssh2
...
2020-06-11 00:56:35
attack
Jun  5 20:20:15 eddieflores sshd\[20915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145  user=root
Jun  5 20:20:17 eddieflores sshd\[20915\]: Failed password for root from 106.13.19.145 port 55818 ssh2
Jun  5 20:22:49 eddieflores sshd\[21063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145  user=root
Jun  5 20:22:51 eddieflores sshd\[21063\]: Failed password for root from 106.13.19.145 port 58970 ssh2
Jun  5 20:25:28 eddieflores sshd\[21239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145  user=root
2020-06-06 18:43:22
attackbots
Jun  5 21:29:23 piServer sshd[5294]: Failed password for root from 106.13.19.145 port 37414 ssh2
Jun  5 21:33:02 piServer sshd[5534]: Failed password for root from 106.13.19.145 port 60720 ssh2
...
2020-06-06 03:53:03
attackbots
Invalid user http from 106.13.19.145 port 38214
2020-05-30 07:54:56
attack
May 10 15:10:10 jane sshd[21677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145 
May 10 15:10:12 jane sshd[21677]: Failed password for invalid user pv from 106.13.19.145 port 59428 ssh2
...
2020-05-11 02:45:41
attackbots
[ssh] SSH attack
2020-04-27 20:58:52
attackspambots
SSH bruteforce
2020-04-27 17:09:27
attackspam
SSH bruteforce
2020-04-26 12:25:24
attackbotsspam
2020-04-18T12:14:45.329720linuxbox-skyline sshd[232900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145  user=root
2020-04-18T12:14:46.954017linuxbox-skyline sshd[232900]: Failed password for root from 106.13.19.145 port 52496 ssh2
...
2020-04-19 02:44:13
attackspambots
Apr 17 06:26:42 pixelmemory sshd[28470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145
Apr 17 06:26:44 pixelmemory sshd[28470]: Failed password for invalid user ubuntu from 106.13.19.145 port 36008 ssh2
Apr 17 06:35:00 pixelmemory sshd[30891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.145
...
2020-04-18 01:38:02
attackspambots
SSH login attempts.
2020-03-22 20:17:12
Comments on same subnet:
IP Type Details Datetime
106.13.199.185 attackspam
Oct 14 00:55:57 Ubuntu-1404-trusty-64-minimal sshd\[22541\]: Invalid user kirk from 106.13.199.185
Oct 14 00:55:57 Ubuntu-1404-trusty-64-minimal sshd\[22541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185
Oct 14 00:55:59 Ubuntu-1404-trusty-64-minimal sshd\[22541\]: Failed password for invalid user kirk from 106.13.199.185 port 40344 ssh2
Oct 14 01:04:02 Ubuntu-1404-trusty-64-minimal sshd\[31459\]: Invalid user claudia from 106.13.199.185
Oct 14 01:04:02 Ubuntu-1404-trusty-64-minimal sshd\[31459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185
2020-10-14 08:36:13
106.13.199.185 attackbotsspam
Oct 13 12:45:55 cho sshd[570596]: Failed password for root from 106.13.199.185 port 47964 ssh2
Oct 13 12:50:26 cho sshd[570880]: Invalid user robertl from 106.13.199.185 port 46944
Oct 13 12:50:26 cho sshd[570880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185 
Oct 13 12:50:26 cho sshd[570880]: Invalid user robertl from 106.13.199.185 port 46944
Oct 13 12:50:28 cho sshd[570880]: Failed password for invalid user robertl from 106.13.199.185 port 46944 ssh2
...
2020-10-13 21:26:41
106.13.196.51 attackspambots
Oct 13 06:59:41 host2 sshd[95972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51  user=root
Oct 13 06:59:42 host2 sshd[95972]: Failed password for root from 106.13.196.51 port 45412 ssh2
Oct 13 07:03:10 host2 sshd[96589]: Invalid user sorin from 106.13.196.51 port 58764
Oct 13 07:03:10 host2 sshd[96589]: Invalid user sorin from 106.13.196.51 port 58764
...
2020-10-13 13:28:56
106.13.199.185 attack
Lines containing failures of 106.13.199.185
Oct 13 01:27:52 kmh-vmh-003-fsn07 sshd[25840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185  user=r.r
Oct 13 01:27:53 kmh-vmh-003-fsn07 sshd[25840]: Failed password for r.r from 106.13.199.185 port 35652 ssh2
Oct 13 01:27:55 kmh-vmh-003-fsn07 sshd[25840]: Received disconnect from 106.13.199.185 port 35652:11: Bye Bye [preauth]
Oct 13 01:27:55 kmh-vmh-003-fsn07 sshd[25840]: Disconnected from authenticating user r.r 106.13.199.185 port 35652 [preauth]
Oct 13 01:45:36 kmh-vmh-003-fsn07 sshd[28116]: Invalid user evelyn from 106.13.199.185 port 39580
Oct 13 01:45:36 kmh-vmh-003-fsn07 sshd[28116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185 
Oct 13 01:45:38 kmh-vmh-003-fsn07 sshd[28116]: Failed password for invalid user evelyn from 106.13.199.185 port 39580 ssh2
Oct 13 01:45:40 kmh-vmh-003-fsn07 sshd[28116]: Received d........
------------------------------
2020-10-13 12:53:50
106.13.196.51 attackbots
Oct 13 02:53:59 gw1 sshd[5855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51
Oct 13 02:54:01 gw1 sshd[5855]: Failed password for invalid user johanna from 106.13.196.51 port 53818 ssh2
...
2020-10-13 06:13:38
106.13.199.185 attackbotsspam
[ssh] SSH attack
2020-10-13 05:41:10
106.13.195.32 attack
2020-10-09T09:13:10.965976kitsunetech sshd[23928]: Invalid user sync from 106.13.195.32 port 43334
2020-10-13 04:35:09
106.13.195.32 attack
SSH login attempts.
2020-10-12 20:15:18
106.13.19.147 attackspam
Oct 11 20:34:10 onepixel sshd[2282594]: Failed password for root from 106.13.19.147 port 58498 ssh2
Oct 11 20:38:22 onepixel sshd[2283321]: Invalid user webster from 106.13.19.147 port 60066
Oct 11 20:38:22 onepixel sshd[2283321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.147 
Oct 11 20:38:22 onepixel sshd[2283321]: Invalid user webster from 106.13.19.147 port 60066
Oct 11 20:38:24 onepixel sshd[2283321]: Failed password for invalid user webster from 106.13.19.147 port 60066 ssh2
2020-10-12 04:48:47
106.13.19.147 attackbotsspam
$f2bV_matches
2020-10-11 20:52:54
106.13.19.147 attackspam
Oct 11 07:03:01 dignus sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.147  user=root
Oct 11 07:03:03 dignus sshd[1598]: Failed password for root from 106.13.19.147 port 39334 ssh2
Oct 11 07:06:02 dignus sshd[1672]: Invalid user asterisk from 106.13.19.147 port 50368
Oct 11 07:06:02 dignus sshd[1672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.147
Oct 11 07:06:03 dignus sshd[1672]: Failed password for invalid user asterisk from 106.13.19.147 port 50368 ssh2
...
2020-10-11 12:49:13
106.13.19.147 attackbots
Oct 10 23:56:16 vps639187 sshd\[17636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.147  user=root
Oct 10 23:56:18 vps639187 sshd\[17636\]: Failed password for root from 106.13.19.147 port 33022 ssh2
Oct 11 00:00:12 vps639187 sshd\[17764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.19.147  user=root
...
2020-10-11 06:11:58
106.13.195.156 attackspam
" "
2020-09-28 06:40:01
106.13.195.156 attack
$f2bV_matches
2020-09-27 23:05:55
106.13.195.156 attackspam
Invalid user postgres from 106.13.195.156 port 52590
2020-09-27 15:03:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.19.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36953
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.19.145.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032200 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 22 20:17:06 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 145.19.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 145.19.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
191.7.152.13 attack
Nov  2 14:29:34 server sshd\[5569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.152.13  user=root
Nov  2 14:29:35 server sshd\[5569\]: Failed password for root from 191.7.152.13 port 50890 ssh2
Nov  2 14:47:16 server sshd\[10178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.152.13  user=root
Nov  2 14:47:18 server sshd\[10178\]: Failed password for root from 191.7.152.13 port 46946 ssh2
Nov  2 14:51:23 server sshd\[11414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.7.152.13  user=root
...
2019-11-03 02:00:46
197.44.151.19 attackspambots
Honeypot attack, port: 23, PTR: host-197.44.151.19-static.tedata.net.
2019-11-03 01:40:17
203.150.171.161 attackspam
Autoban   203.150.171.161 AUTH/CONNECT
2019-11-03 01:33:48
222.186.173.201 attackspam
DATE:2019-11-02 18:04:47, IP:222.186.173.201, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis)
2019-11-03 01:19:36
203.147.80.40 attack
(imapd) Failed IMAP login from 203.147.80.40 (NC/New Caledonia/host-203-147-80-40.h33.canl.nc): 1 in the last 3600 secs
2019-11-03 01:23:03
89.214.212.39 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/89.214.212.39/ 
 
 PT - 1H : (10)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PT 
 NAME ASN : ASN42863 
 
 IP : 89.214.212.39 
 
 CIDR : 89.214.0.0/16 
 
 PREFIX COUNT : 9 
 
 UNIQUE IP COUNT : 254976 
 
 
 ATTACKS DETECTED ASN42863 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-11-02 12:52:28 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 01:17:28
220.130.222.156 attack
Automatic report - Banned IP Access
2019-11-03 01:25:26
190.64.68.178 attackspam
2019-11-02T11:11:02.369328WS-Zach sshd[829596]: User root from 190.64.68.178 not allowed because none of user's groups are listed in AllowGroups
2019-11-02T11:11:02.379034WS-Zach sshd[829596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178  user=root
2019-11-02T11:11:02.369328WS-Zach sshd[829596]: User root from 190.64.68.178 not allowed because none of user's groups are listed in AllowGroups
2019-11-02T11:11:03.916768WS-Zach sshd[829596]: Failed password for invalid user root from 190.64.68.178 port 49217 ssh2
2019-11-02T11:21:41.451524WS-Zach sshd[831032]: User root from 190.64.68.178 not allowed because none of user's groups are listed in AllowGroups
...
2019-11-03 01:43:58
109.74.144.130 attack
Chat Spam
2019-11-03 01:40:35
172.105.80.151 attackspambots
DNS Enumeration
2019-11-03 01:52:44
121.134.159.21 attack
Automatic report - Banned IP Access
2019-11-03 01:36:16
80.211.172.45 attackspam
Nov  2 15:35:30 hcbbdb sshd\[12992\]: Invalid user wildfly from 80.211.172.45
Nov  2 15:35:30 hcbbdb sshd\[12992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.172.45
Nov  2 15:35:32 hcbbdb sshd\[12992\]: Failed password for invalid user wildfly from 80.211.172.45 port 48946 ssh2
Nov  2 15:39:13 hcbbdb sshd\[13343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.172.45  user=root
Nov  2 15:39:15 hcbbdb sshd\[13343\]: Failed password for root from 80.211.172.45 port 58610 ssh2
2019-11-03 02:03:09
209.80.12.167 attack
Nov  2 19:21:59 server sshd\[18874\]: Invalid user sim123 from 209.80.12.167 port 60610
Nov  2 19:21:59 server sshd\[18874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.80.12.167
Nov  2 19:22:01 server sshd\[18874\]: Failed password for invalid user sim123 from 209.80.12.167 port 60610 ssh2
Nov  2 19:25:54 server sshd\[18526\]: Invalid user liu from 209.80.12.167 port 48128
Nov  2 19:25:54 server sshd\[18526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.80.12.167
2019-11-03 01:35:57
139.217.110.34 attackspam
3389BruteforceFW21
2019-11-03 01:19:57
185.36.218.72 attackspambots
slow and persistent scanner
2019-11-03 01:47:50

Recently Reported IPs

127.174.15.233 218.155.92.81 200.218.57.146 252.56.233.10
193.39.157.138 125.83.161.56 104.196.127.133 40.253.37.26
254.58.146.83 198.7.214.19 147.211.93.72 230.140.169.151
189.15.134.119 185.207.153.138 219.79.78.12 189.15.71.57
113.172.13.74 5.32.176.112 187.190.45.120 14.186.182.29