Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
106.13.39.56 attack
Sep 30 02:10:25 ajax sshd[978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56 
Sep 30 02:10:26 ajax sshd[978]: Failed password for invalid user job from 106.13.39.56 port 43144 ssh2
2020-09-30 09:56:41
106.13.39.56 attackbots
Invalid user test from 106.13.39.56 port 43108
2020-09-30 02:49:40
106.13.39.56 attackbots
Sep 29 10:31:13 ip-172-31-42-142 sshd\[1572\]: Invalid user magic from 106.13.39.56\
Sep 29 10:31:15 ip-172-31-42-142 sshd\[1572\]: Failed password for invalid user magic from 106.13.39.56 port 51132 ssh2\
Sep 29 10:34:21 ip-172-31-42-142 sshd\[1591\]: Invalid user demo2 from 106.13.39.56\
Sep 29 10:34:24 ip-172-31-42-142 sshd\[1591\]: Failed password for invalid user demo2 from 106.13.39.56 port 35768 ssh2\
Sep 29 10:37:41 ip-172-31-42-142 sshd\[1615\]: Failed password for root from 106.13.39.56 port 48630 ssh2\
2020-09-29 18:52:17
106.13.39.56 attack
Sep 26 15:07:45 firewall sshd[32580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56
Sep 26 15:07:45 firewall sshd[32580]: Invalid user sami from 106.13.39.56
Sep 26 15:07:46 firewall sshd[32580]: Failed password for invalid user sami from 106.13.39.56 port 52074 ssh2
...
2020-09-27 03:59:00
106.13.39.56 attack
Invalid user leandro from 106.13.39.56 port 44138
2020-09-26 20:02:35
106.13.39.56 attack
2020-09-24T21:15:01.0452211495-001 sshd[57159]: Invalid user gogs from 106.13.39.56 port 39018
2020-09-24T21:15:01.0483161495-001 sshd[57159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56
2020-09-24T21:15:01.0452211495-001 sshd[57159]: Invalid user gogs from 106.13.39.56 port 39018
2020-09-24T21:15:03.2740591495-001 sshd[57159]: Failed password for invalid user gogs from 106.13.39.56 port 39018 ssh2
2020-09-24T21:17:55.6998301495-001 sshd[57354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
2020-09-24T21:17:57.4790901495-001 sshd[57354]: Failed password for root from 106.13.39.56 port 57938 ssh2
...
2020-09-25 10:37:59
106.13.39.56 attackspambots
(sshd) Failed SSH login from 106.13.39.56 (CN/China/-): 5 in the last 3600 secs
2020-08-25 22:44:30
106.13.39.56 attackspambots
2020-08-19T23:51:57.815052linuxbox-skyline sshd[6746]: Invalid user le from 106.13.39.56 port 49744
...
2020-08-20 15:35:20
106.13.39.56 attackspam
Aug  6 07:11:34 sshgateway sshd\[23780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
Aug  6 07:11:36 sshgateway sshd\[23780\]: Failed password for root from 106.13.39.56 port 44874 ssh2
Aug  6 07:18:02 sshgateway sshd\[23835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
2020-08-06 20:15:18
106.13.39.56 attackbotsspam
Aug  5 01:38:16 srv-ubuntu-dev3 sshd[67629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
Aug  5 01:38:18 srv-ubuntu-dev3 sshd[67629]: Failed password for root from 106.13.39.56 port 38424 ssh2
Aug  5 01:40:21 srv-ubuntu-dev3 sshd[67870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
Aug  5 01:40:23 srv-ubuntu-dev3 sshd[67870]: Failed password for root from 106.13.39.56 port 43894 ssh2
Aug  5 01:42:28 srv-ubuntu-dev3 sshd[68086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
Aug  5 01:42:31 srv-ubuntu-dev3 sshd[68086]: Failed password for root from 106.13.39.56 port 49360 ssh2
Aug  5 01:44:37 srv-ubuntu-dev3 sshd[68334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56  user=root
Aug  5 01:44:40 srv-ubuntu-dev3 sshd[68334]: Failed password
...
2020-08-05 07:48:19
106.13.39.56 attackspambots
Aug  3 19:26:31 eventyay sshd[20481]: Failed password for root from 106.13.39.56 port 39160 ssh2
Aug  3 19:31:23 eventyay sshd[20620]: Failed password for root from 106.13.39.56 port 43382 ssh2
...
2020-08-04 03:23:18
106.13.39.56 attackspambots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-31T07:31:18Z and 2020-07-31T07:38:18Z
2020-07-31 16:40:39
106.13.39.56 attack
Invalid user iot from 106.13.39.56 port 38210
2020-07-28 18:16:46
106.13.39.56 attackspambots
Jul 21 14:32:44 mockhub sshd[26456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56
Jul 21 14:32:45 mockhub sshd[26456]: Failed password for invalid user celeste from 106.13.39.56 port 45714 ssh2
...
2020-07-22 07:22:54
106.13.39.56 attack
Jul  5 20:33:24 sshgateway sshd\[13256\]: Invalid user erika from 106.13.39.56
Jul  5 20:33:24 sshgateway sshd\[13256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.56
Jul  5 20:33:27 sshgateway sshd\[13256\]: Failed password for invalid user erika from 106.13.39.56 port 50826 ssh2
2020-07-06 06:31:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.39.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64999
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.13.39.58.			IN	A

;; AUTHORITY SECTION:
.			240	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031100 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 11 20:06:30 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 58.39.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 58.39.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.187.181.182 attackspam
Jul 14 08:36:11 vibhu-HP-Z238-Microtower-Workstation sshd\[20901\]: Invalid user miner from 37.187.181.182
Jul 14 08:36:11 vibhu-HP-Z238-Microtower-Workstation sshd\[20901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.181.182
Jul 14 08:36:14 vibhu-HP-Z238-Microtower-Workstation sshd\[20901\]: Failed password for invalid user miner from 37.187.181.182 port 37582 ssh2
Jul 14 08:41:02 vibhu-HP-Z238-Microtower-Workstation sshd\[21100\]: Invalid user ftp from 37.187.181.182
Jul 14 08:41:02 vibhu-HP-Z238-Microtower-Workstation sshd\[21100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.181.182
...
2019-07-14 11:12:53
149.56.20.183 attack
Jul 14 05:00:18 localhost sshd\[5610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.20.183  user=root
Jul 14 05:00:20 localhost sshd\[5610\]: Failed password for root from 149.56.20.183 port 54892 ssh2
Jul 14 05:04:57 localhost sshd\[6119\]: Invalid user ren from 149.56.20.183 port 55684
2019-07-14 11:13:42
185.183.120.29 attack
$f2bV_matches
2019-07-14 11:39:46
206.189.136.160 attackspambots
2019-07-14T04:52:56.966618stark.klein-stark.info sshd\[1798\]: Invalid user cacti from 206.189.136.160 port 44056
2019-07-14T04:52:56.971852stark.klein-stark.info sshd\[1798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.136.160
2019-07-14T04:52:59.259165stark.klein-stark.info sshd\[1798\]: Failed password for invalid user cacti from 206.189.136.160 port 44056 ssh2
...
2019-07-14 11:24:47
139.59.10.115 attackbots
Jul 14 05:12:44 icinga sshd[31682]: Failed password for root from 139.59.10.115 port 60832 ssh2
Jul 14 05:18:09 icinga sshd[32240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.10.115
...
2019-07-14 11:22:13
213.136.88.141 attackspam
SSH Bruteforce attack
2019-07-14 11:36:34
185.222.211.4 attackspam
Jul 14 04:11:36 relay postfix/smtpd\[2448\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.4\]: 554 5.7.1 \: Relay access denied\; from=\<3vvo5le8t98ibt@finestra.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 14 04:11:36 relay postfix/smtpd\[2448\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.4\]: 554 5.7.1 \: Relay access denied\; from=\<3vvo5le8t98ibt@finestra.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 14 04:11:36 relay postfix/smtpd\[2448\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.4\]: 554 5.7.1 \: Relay access denied\; from=\<3vvo5le8t98ibt@finestra.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>
Jul 14 04:11:36 relay postfix/smtpd\[2448\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.4\]: 554 5.7.1 \: Relay access denied\; f
...
2019-07-14 11:10:43
51.68.44.13 attackbotsspam
Jul 14 04:30:53 vps647732 sshd[19967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.44.13
Jul 14 04:30:55 vps647732 sshd[19967]: Failed password for invalid user oracle from 51.68.44.13 port 40084 ssh2
...
2019-07-14 11:40:02
122.195.200.36 attackspambots
Jul 14 05:09:22 legacy sshd[13072]: Failed password for root from 122.195.200.36 port 20879 ssh2
Jul 14 05:09:34 legacy sshd[13077]: Failed password for root from 122.195.200.36 port 52918 ssh2
...
2019-07-14 11:34:07
121.201.123.252 attack
Jul 14 05:46:31 srv-4 sshd\[27022\]: Invalid user ki from 121.201.123.252
Jul 14 05:46:31 srv-4 sshd\[27022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.201.123.252
Jul 14 05:46:33 srv-4 sshd\[27022\]: Failed password for invalid user ki from 121.201.123.252 port 51060 ssh2
...
2019-07-14 11:28:02
58.74.111.106 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-13 14:41:26,265 INFO [shellcode_manager] (58.74.111.106) no match, writing hexdump (ba12bbbc173520768f04b787fe0ed0cf :2385832) - MS17010 (EternalBlue)
2019-07-14 11:25:36
89.248.169.12 attack
14.07.2019 00:38:49 Connection to port 8010 blocked by firewall
2019-07-14 11:17:21
175.201.62.242 attackspambots
Unauthorised access (Jul 14) SRC=175.201.62.242 LEN=40 TTL=51 ID=22692 TCP DPT=8080 WINDOW=65105 SYN
2019-07-14 11:12:33
104.244.74.97 attackbotsspam
SSH bruteforce
2019-07-14 11:35:25
201.21.221.80 attackspam
Automatic report - Port Scan Attack
2019-07-14 11:22:33

Recently Reported IPs

106.13.29.219 106.13.47.223 106.13.5.158 106.13.54.23
106.13.68.194 106.13.93.207 106.138.49.212 106.14.1.51
106.14.1.96 106.14.121.124 106.14.13.218 106.14.138.88
220.244.61.53 219.152.130.146 106.225.219.120 106.225.223.209
106.225.223.64 106.225.223.65 106.225.229.43 198.183.187.129