Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: Beijing Baidu Netcom Science and Technology Co., Ltd.

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspam
Dec 21 19:52:08 mail sshd\[31539\]: Invalid user breadfruit from 106.13.34.212
Dec 21 19:52:08 mail sshd\[31539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Dec 21 19:52:09 mail sshd\[31539\]: Failed password for invalid user breadfruit from 106.13.34.212 port 52404 ssh2
...
2019-12-22 03:04:57
attackspambots
Oct 27 06:04:51 microserver sshd[65454]: Invalid user  from 106.13.34.212 port 41144
Oct 27 06:04:51 microserver sshd[65454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Oct 27 06:04:53 microserver sshd[65454]: Failed password for invalid user  from 106.13.34.212 port 41144 ssh2
Oct 27 06:10:07 microserver sshd[1091]: Invalid user cisco from 106.13.34.212 port 49412
Oct 27 06:10:07 microserver sshd[1091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Dec 18 16:24:44 microserver sshd[32760]: Invalid user khyra from 106.13.34.212 port 51578
Dec 18 16:24:44 microserver sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Dec 18 16:24:46 microserver sshd[32760]: Failed password for invalid user khyra from 106.13.34.212 port 51578 ssh2
Dec 18 16:30:22 microserver sshd[34024]: Invalid user host from 106.13.34.212 port 43216
Dec 18 16:30:22 mi
2019-12-19 00:10:30
attackspam
Dec 12 18:01:03 linuxvps sshd\[60905\]: Invalid user craycraft from 106.13.34.212
Dec 12 18:01:03 linuxvps sshd\[60905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Dec 12 18:01:04 linuxvps sshd\[60905\]: Failed password for invalid user craycraft from 106.13.34.212 port 60272 ssh2
Dec 12 18:07:15 linuxvps sshd\[64501\]: Invalid user toplis from 106.13.34.212
Dec 12 18:07:15 linuxvps sshd\[64501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
2019-12-13 07:08:16
attackbotsspam
Dec  1 23:44:41 tux-35-217 sshd\[23252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212  user=root
Dec  1 23:44:43 tux-35-217 sshd\[23252\]: Failed password for root from 106.13.34.212 port 43990 ssh2
Dec  1 23:50:31 tux-35-217 sshd\[23299\]: Invalid user praful from 106.13.34.212 port 44578
Dec  1 23:50:31 tux-35-217 sshd\[23299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
...
2019-12-02 07:08:12
attackspambots
Nov 15 08:31:15 h2177944 sshd\[13672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212  user=root
Nov 15 08:31:17 h2177944 sshd\[13672\]: Failed password for root from 106.13.34.212 port 36656 ssh2
Nov 15 08:36:25 h2177944 sshd\[13788\]: Invalid user bija from 106.13.34.212 port 45170
Nov 15 08:36:25 h2177944 sshd\[13788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
...
2019-11-15 16:22:31
attackspam
2019-11-14T15:16:21.895316abusebot-4.cloudsearch.cf sshd\[3425\]: Invalid user tomcat1 from 106.13.34.212 port 49916
2019-11-14 23:50:33
attackspambots
Automatic report - Banned IP Access
2019-10-27 06:26:49
attack
Oct  5 13:36:59 legacy sshd[8029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Oct  5 13:37:01 legacy sshd[8029]: Failed password for invalid user Admin111 from 106.13.34.212 port 42682 ssh2
Oct  5 13:41:40 legacy sshd[8094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
...
2019-10-05 19:54:17
attackbots
Oct  4 06:02:59 plusreed sshd[4249]: Invalid user 123Grande from 106.13.34.212
...
2019-10-04 18:04:06
attackbotsspam
F2B jail: sshd. Time: 2019-09-12 06:09:49, Reported by: VKReport
2019-09-12 18:18:16
attack
Sep  9 09:36:06 localhost sshd\[118637\]: Invalid user www from 106.13.34.212 port 60932
Sep  9 09:36:06 localhost sshd\[118637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Sep  9 09:36:08 localhost sshd\[118637\]: Failed password for invalid user www from 106.13.34.212 port 60932 ssh2
Sep  9 09:43:37 localhost sshd\[118941\]: Invalid user zabbix from 106.13.34.212 port 34582
Sep  9 09:43:37 localhost sshd\[118941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
...
2019-09-09 18:05:07
attackbotsspam
Automated report - ssh fail2ban:
Aug 27 01:31:11 authentication failure 
Aug 27 01:31:13 wrong password, user=mr, port=45158, ssh2
Aug 27 01:33:23 authentication failure
2019-08-27 15:17:05
attackspam
Aug 23 16:46:04 dedicated sshd[31125]: Invalid user info from 106.13.34.212 port 46752
2019-08-24 00:12:19
attackspam
Aug 18 13:03:25 MK-Soft-VM6 sshd\[29701\]: Invalid user vicente from 106.13.34.212 port 37400
Aug 18 13:03:25 MK-Soft-VM6 sshd\[29701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Aug 18 13:03:27 MK-Soft-VM6 sshd\[29701\]: Failed password for invalid user vicente from 106.13.34.212 port 37400 ssh2
...
2019-08-18 22:18:02
attackspam
Triggered by Fail2Ban
2019-07-03 19:35:34
Comments on same subnet:
IP Type Details Datetime
106.13.34.131 attackbots
Oct 12 20:57:55 rotator sshd\[28581\]: Invalid user vandusen from 106.13.34.131Oct 12 20:57:58 rotator sshd\[28581\]: Failed password for invalid user vandusen from 106.13.34.131 port 48250 ssh2Oct 12 21:01:17 rotator sshd\[29358\]: Failed password for root from 106.13.34.131 port 46053 ssh2Oct 12 21:04:26 rotator sshd\[29392\]: Invalid user ruben from 106.13.34.131Oct 12 21:04:28 rotator sshd\[29392\]: Failed password for invalid user ruben from 106.13.34.131 port 43838 ssh2Oct 12 21:07:38 rotator sshd\[30154\]: Invalid user leonel from 106.13.34.131
...
2020-10-13 04:24:39
106.13.34.131 attack
2020-10-11T17:52:37.6312981495-001 sshd[27285]: Failed password for invalid user asterisk from 106.13.34.131 port 48463 ssh2
2020-10-11T17:56:00.4540001495-001 sshd[27439]: Invalid user rivera from 106.13.34.131 port 48468
2020-10-11T17:56:00.4601891495-001 sshd[27439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131
2020-10-11T17:56:00.4540001495-001 sshd[27439]: Invalid user rivera from 106.13.34.131 port 48468
2020-10-11T17:56:02.0510661495-001 sshd[27439]: Failed password for invalid user rivera from 106.13.34.131 port 48468 ssh2
2020-10-11T17:59:21.3332791495-001 sshd[27650]: Invalid user baerbel from 106.13.34.131 port 48481
...
2020-10-12 20:03:30
106.13.34.131 attack
Oct 10 20:15:12 ns382633 sshd\[4581\]: Invalid user web74 from 106.13.34.131 port 17944
Oct 10 20:15:12 ns382633 sshd\[4581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131
Oct 10 20:15:14 ns382633 sshd\[4581\]: Failed password for invalid user web74 from 106.13.34.131 port 17944 ssh2
Oct 10 20:30:44 ns382633 sshd\[8618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
Oct 10 20:30:47 ns382633 sshd\[8618\]: Failed password for root from 106.13.34.131 port 55812 ssh2
2020-10-11 03:50:44
106.13.34.131 attackbots
3x Failed Password
2020-10-10 19:44:57
106.13.34.173 attackspambots
SSH login attempts.
2020-10-10 14:34:16
106.13.34.173 attackbots
Oct  9 04:56:40 Tower sshd[15139]: Connection from 106.13.34.173 port 45186 on 192.168.10.220 port 22 rdomain ""
Oct  9 04:56:43 Tower sshd[15139]: Invalid user cron from 106.13.34.173 port 45186
Oct  9 04:56:43 Tower sshd[15139]: error: Could not get shadow information for NOUSER
Oct  9 04:56:43 Tower sshd[15139]: Failed password for invalid user cron from 106.13.34.173 port 45186 ssh2
Oct  9 04:56:43 Tower sshd[15139]: Received disconnect from 106.13.34.173 port 45186:11: Bye Bye [preauth]
Oct  9 04:56:43 Tower sshd[15139]: Disconnected from invalid user cron 106.13.34.173 port 45186 [preauth]
2020-10-10 02:04:48
106.13.34.173 attack
Oct  9 04:56:40 Tower sshd[15139]: Connection from 106.13.34.173 port 45186 on 192.168.10.220 port 22 rdomain ""
Oct  9 04:56:43 Tower sshd[15139]: Invalid user cron from 106.13.34.173 port 45186
Oct  9 04:56:43 Tower sshd[15139]: error: Could not get shadow information for NOUSER
Oct  9 04:56:43 Tower sshd[15139]: Failed password for invalid user cron from 106.13.34.173 port 45186 ssh2
Oct  9 04:56:43 Tower sshd[15139]: Received disconnect from 106.13.34.173 port 45186:11: Bye Bye [preauth]
Oct  9 04:56:43 Tower sshd[15139]: Disconnected from invalid user cron 106.13.34.173 port 45186 [preauth]
2020-10-09 17:49:29
106.13.34.131 attack
2020-10-07T20:23:58.357847abusebot-4.cloudsearch.cf sshd[30782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
2020-10-07T20:24:00.347950abusebot-4.cloudsearch.cf sshd[30782]: Failed password for root from 106.13.34.131 port 62319 ssh2
2020-10-07T20:27:00.332360abusebot-4.cloudsearch.cf sshd[30809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
2020-10-07T20:27:01.971592abusebot-4.cloudsearch.cf sshd[30809]: Failed password for root from 106.13.34.131 port 54788 ssh2
2020-10-07T20:29:48.407884abusebot-4.cloudsearch.cf sshd[30835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
2020-10-07T20:29:50.112170abusebot-4.cloudsearch.cf sshd[30835]: Failed password for root from 106.13.34.131 port 47229 ssh2
2020-10-07T20:32:43.941852abusebot-4.cloudsearch.cf sshd[30900]: pam_unix(sshd:auth): authe
...
2020-10-08 04:59:59
106.13.34.131 attackbots
repeated SSH login attempts
2020-10-07 21:22:50
106.13.34.131 attackbots
Oct  7 02:43:43 santamaria sshd\[24826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
Oct  7 02:43:45 santamaria sshd\[24826\]: Failed password for root from 106.13.34.131 port 36518 ssh2
Oct  7 02:47:37 santamaria sshd\[24874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
...
2020-10-07 13:09:54
106.13.34.131 attack
(sshd) Failed SSH login from 106.13.34.131 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 02:33:49 optimus sshd[17333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
Oct  1 02:33:51 optimus sshd[17333]: Failed password for root from 106.13.34.131 port 65357 ssh2
Oct  1 02:40:06 optimus sshd[19422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
Oct  1 02:40:08 optimus sshd[19422]: Failed password for root from 106.13.34.131 port 13541 ssh2
Oct  1 02:43:28 optimus sshd[20656]: Invalid user 1 from 106.13.34.131
2020-10-01 18:14:40
106.13.34.131 attackbotsspam
$f2bV_matches
2020-09-26 06:46:54
106.13.34.131 attackspambots
2020-09-25T14:46:11.684573server.espacesoutien.com sshd[9097]: Invalid user liuhao from 106.13.34.131 port 51051
2020-09-25T14:46:11.697808server.espacesoutien.com sshd[9097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131
2020-09-25T14:46:11.684573server.espacesoutien.com sshd[9097]: Invalid user liuhao from 106.13.34.131 port 51051
2020-09-25T14:46:13.466145server.espacesoutien.com sshd[9097]: Failed password for invalid user liuhao from 106.13.34.131 port 51051 ssh2
...
2020-09-25 23:51:43
106.13.34.131 attackspam
Sep 25 09:02:15 rancher-0 sshd[282693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.131  user=root
Sep 25 09:02:17 rancher-0 sshd[282693]: Failed password for root from 106.13.34.131 port 55863 ssh2
...
2020-09-25 15:28:09
106.13.34.173 attackspambots
Too many connections or unauthorized access detected from Arctic banned ip
2020-09-07 15:02:26
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.34.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58395
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.34.212.			IN	A

;; AUTHORITY SECTION:
.			1830	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032800 1800 900 604800 86400

;; Query time: 169 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 29 01:34:39 CST 2019
;; MSG SIZE  rcvd: 117

Host info
Host 212.34.13.106.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 212.34.13.106.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
78.97.179.51 attack
Unauthorized connection attempt detected from IP address 78.97.179.51 to port 23 [J]
2020-01-20 03:01:12
201.150.28.210 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-20 02:48:05
109.232.106.82 attack
1579450787 - 01/19/2020 17:19:47 Host: 109.232.106.82/109.232.106.82 Port: 445 TCP Blocked
2020-01-20 02:45:36
185.221.216.3 attack
Web Server Attack
2020-01-20 03:16:13
189.169.12.67 attackspam
Honeypot attack, port: 81, PTR: dsl-189-169-12-67-dyn.prod-infinitum.com.mx.
2020-01-20 03:11:35
104.236.78.228 attack
Unauthorized connection attempt detected from IP address 104.236.78.228 to port 2220 [J]
2020-01-20 03:05:06
144.130.164.122 attackbots
Jan 19 15:15:43 vps691689 sshd[18262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.130.164.122
Jan 19 15:15:45 vps691689 sshd[18262]: Failed password for invalid user public from 144.130.164.122 port 21425 ssh2
...
2020-01-20 03:13:12
105.9.153.220 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-20 03:18:53
66.161.164.125 attackspambots
Honeypot attack, port: 445, PTR: 125.164.161.66.ded-dsl.fuse.net.
2020-01-20 03:20:11
79.137.87.44 attackspambots
Unauthorized connection attempt detected from IP address 79.137.87.44 to port 2220 [J]
2020-01-20 03:02:55
157.55.39.156 attackspam
Automatic report - Banned IP Access
2020-01-20 03:14:40
148.70.136.94 attackspambots
Jan 19 15:50:02 server sshd\[5443\]: Invalid user agung from 148.70.136.94
Jan 19 15:50:02 server sshd\[5443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.136.94 
Jan 19 15:50:03 server sshd\[5443\]: Failed password for invalid user agung from 148.70.136.94 port 37601 ssh2
Jan 19 15:53:57 server sshd\[6540\]: Invalid user sarah from 148.70.136.94
Jan 19 15:53:57 server sshd\[6540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.136.94 
...
2020-01-20 02:46:24
194.26.69.102 attackspambots
01/19/2020-08:21:47.826765 194.26.69.102 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-01-20 02:50:52
117.252.83.208 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-20 03:06:43
45.168.35.207 attackspam
(sshd) Failed SSH login from 45.168.35.207 (BR/Brazil/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 19 13:53:24 ubnt-55d23 sshd[15587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.168.35.207  user=root
Jan 19 13:53:26 ubnt-55d23 sshd[15587]: Failed password for root from 45.168.35.207 port 50886 ssh2
2020-01-20 03:09:12

Recently Reported IPs

107.170.200.60 104.236.215.68 97.99.224.70 95.189.108.7
92.59.21.55 80.89.137.214 79.172.193.32 70.178.97.250
67.207.91.133 51.75.125.124 27.106.45.6 5.105.196.36
185.211.245.167 88.99.145.83 205.196.208.34 217.150.72.13
123.125.50.111 91.121.222.157 108.183.170.108 159.65.183.47