106.13.45.243 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Aug 8 09:13:27 hosting sshd[26061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 user=root Aug 8 09:13:29 hosting sshd[26061]: Failed password for root from 106.13.45.243 port 44352 ssh2 ...	2020-08-08 15:25:39
attackbots	2020-07-17T09:14:20.439458v22018076590370373 sshd[11896]: Invalid user minecraft from 106.13.45.243 port 41530 2020-07-17T09:14:20.444593v22018076590370373 sshd[11896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 2020-07-17T09:14:20.439458v22018076590370373 sshd[11896]: Invalid user minecraft from 106.13.45.243 port 41530 2020-07-17T09:14:22.615918v22018076590370373 sshd[11896]: Failed password for invalid user minecraft from 106.13.45.243 port 41530 ssh2 2020-07-17T09:23:21.929121v22018076590370373 sshd[15296]: Invalid user ehkwon from 106.13.45.243 port 40952 ...	2020-07-17 18:13:52
attack	2020-07-16T23:46:32.191509shield sshd\[6395\]: Invalid user money from 106.13.45.243 port 49028 2020-07-16T23:46:32.207351shield sshd\[6395\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 2020-07-16T23:46:33.884599shield sshd\[6395\]: Failed password for invalid user money from 106.13.45.243 port 49028 ssh2 2020-07-16T23:52:22.711331shield sshd\[7866\]: Invalid user vss from 106.13.45.243 port 38428 2020-07-16T23:52:22.719860shield sshd\[7866\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243	2020-07-17 08:06:08
attackbotsspam	Failed password for invalid user zxincsap from 106.13.45.243 port 49754 ssh2	2020-07-01 00:00:24
attackspambots	Jun 18 13:31:21 vps647732 sshd[5918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 Jun 18 13:31:23 vps647732 sshd[5918]: Failed password for invalid user toto from 106.13.45.243 port 39772 ssh2 ...	2020-06-18 19:32:55
attackbotsspam	2020-04-10T10:29:15.921256linuxbox-skyline sshd[27092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 user=root 2020-04-10T10:29:18.493795linuxbox-skyline sshd[27092]: Failed password for root from 106.13.45.243 port 36576 ssh2 ...	2020-04-11 04:14:30
attackspambots	Mar 6 16:19:21 vps647732 sshd[2372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 Mar 6 16:19:23 vps647732 sshd[2372]: Failed password for invalid user nas from 106.13.45.243 port 59218 ssh2 ...	2020-03-06 23:35:26
attackspambots	Jan 15 10:18:46 MK-Soft-VM4 sshd[25076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 Jan 15 10:18:49 MK-Soft-VM4 sshd[25076]: Failed password for invalid user IEUser from 106.13.45.243 port 50066 ssh2 ...	2020-01-15 18:01:30
attack	Dec 9 13:50:54 ncomp sshd[30785]: Invalid user clau from 106.13.45.243 Dec 9 13:50:54 ncomp sshd[30785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 Dec 9 13:50:54 ncomp sshd[30785]: Invalid user clau from 106.13.45.243 Dec 9 13:50:55 ncomp sshd[30785]: Failed password for invalid user clau from 106.13.45.243 port 60524 ssh2	2019-12-09 22:05:31
attack	Dec 7 05:39:47 Ubuntu-1404-trusty-64-minimal sshd\[27135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 user=root Dec 7 05:39:49 Ubuntu-1404-trusty-64-minimal sshd\[27135\]: Failed password for root from 106.13.45.243 port 52796 ssh2 Dec 7 05:54:47 Ubuntu-1404-trusty-64-minimal sshd\[2353\]: Invalid user server from 106.13.45.243 Dec 7 05:54:47 Ubuntu-1404-trusty-64-minimal sshd\[2353\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.243 Dec 7 05:54:49 Ubuntu-1404-trusty-64-minimal sshd\[2353\]: Failed password for invalid user server from 106.13.45.243 port 53442 ssh2	2019-12-07 13:29:23

Comments on same subnet:

IP	Type	Details	Datetime
106.13.45.212	attack	Invalid user tester from 106.13.45.212 port 53136	2020-10-02 05:19:42
106.13.45.212	attack	Invalid user tester from 106.13.45.212 port 53136	2020-10-01 21:38:20
106.13.45.212	attack	Oct 1 05:43:13 *** sshd[22577]: Invalid user phoenix from 106.13.45.212	2020-10-01 13:54:46
106.13.45.212	attack	$f2bV_matches	2020-08-19 15:37:45
106.13.45.212	attackspambots	Aug 10 06:51:55 pve1 sshd[24414]: Failed password for root from 106.13.45.212 port 51342 ssh2 ...	2020-08-10 17:44:52
106.13.45.212	attack	Aug 3 12:07:44 scw-tender-jepsen sshd[1506]: Failed password for root from 106.13.45.212 port 53718 ssh2	2020-08-04 00:58:43
106.13.45.203	attack	Port Scan ...	2020-08-01 22:32:22
106.13.45.212	attackspambots	Jul 25 08:09:33 prod4 sshd\[30121\]: Invalid user qtx from 106.13.45.212 Jul 25 08:09:34 prod4 sshd\[30121\]: Failed password for invalid user qtx from 106.13.45.212 port 57038 ssh2 Jul 25 08:13:01 prod4 sshd\[31342\]: Invalid user st2 from 106.13.45.212 ...	2020-07-25 15:30:13
106.13.45.212	attack	Jul 23 22:20:33 mellenthin sshd[23653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 Jul 23 22:20:34 mellenthin sshd[23653]: Failed password for invalid user wave from 106.13.45.212 port 40230 ssh2	2020-07-24 04:38:32
106.13.45.203	attack	Unauthorized connection attempt detected from IP address 106.13.45.203 to port 4555	2020-07-13 01:51:22
106.13.45.203	attackspambots	[Thu Jul 02 01:00:32 2020] - DDoS Attack From IP: 106.13.45.203 Port: 51736	2020-07-06 03:03:46
106.13.45.203	attackspam	TCP (SYN) 106.13.45.203:59846 -> port 2905, len 44	2020-07-01 15:05:27
106.13.45.212	attackspam	Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-06-14 13:31:37
106.13.45.212	attack	Jun 2 06:39:20 PorscheCustomer sshd[12108]: Failed password for root from 106.13.45.212 port 38166 ssh2 Jun 2 06:40:25 PorscheCustomer sshd[12151]: Failed password for root from 106.13.45.212 port 49630 ssh2 ...	2020-06-02 16:40:04
106.13.45.212	attack	Jun 1 05:50:32 vps647732 sshd[8632]: Failed password for root from 106.13.45.212 port 58614 ssh2 ...	2020-06-01 12:12:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.45.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19252
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.45.243.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 13:29:17 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 243.45.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 243.45.13.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
111.163.120.211	attackbots	Brute force blocker - service: proftpd1, proftpd2 - aantal: 34 - Wed May 30 17:40:17 2018	2020-04-30 19:55:39
62.234.192.89	attackspam	2020-04-30T06:37:30.901524ionos.janbro.de sshd[93065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.192.89 2020-04-30T06:37:30.823981ionos.janbro.de sshd[93065]: Invalid user sims from 62.234.192.89 port 39094 2020-04-30T06:37:32.892086ionos.janbro.de sshd[93065]: Failed password for invalid user sims from 62.234.192.89 port 39094 ssh2 2020-04-30T06:42:03.305193ionos.janbro.de sshd[93073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.192.89 user=root 2020-04-30T06:42:04.773406ionos.janbro.de sshd[93073]: Failed password for root from 62.234.192.89 port 34996 ssh2 2020-04-30T06:46:31.090226ionos.janbro.de sshd[93080]: Invalid user maxine from 62.234.192.89 port 59126 2020-04-30T06:46:31.109218ionos.janbro.de sshd[93080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.192.89 2020-04-30T06:46:31.090226ionos.janbro.de sshd[93080]: Invalid user ...	2020-04-30 19:31:50
37.228.116.129	spam	Spammail mit unerwünschtem Sexangeboten. Passt auch überhaupt nicht zu meinem Profil. Da ich über Freenet schon gehackt wurde über russische Server, könnte meine E-Mailadresse aus diesen alten Vorfällen stammen. Ich habe vor kurzem eine Warnung von Apple über unerwünschte Aktionen auf meinen Internetaktionen bekommen, die ich zu entfernen versucht habe. Das ist mir wohl auch auf dem E-Mail Postfach von Apple gelungen. Aber auf dem Original Freenet Kanal ist mir das wohl nicht gelungen.	2020-04-30 19:53:54
190.66.54.78	attackspam	Apr 30 06:05:21 ns382633 sshd\[19918\]: Invalid user myftp from 190.66.54.78 port 5601 Apr 30 06:05:21 ns382633 sshd\[19918\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.66.54.78 Apr 30 06:05:22 ns382633 sshd\[19918\]: Failed password for invalid user myftp from 190.66.54.78 port 5601 ssh2 Apr 30 06:22:24 ns382633 sshd\[22624\]: Invalid user grupo2 from 190.66.54.78 port 61121 Apr 30 06:22:24 ns382633 sshd\[22624\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.66.54.78	2020-04-30 20:08:48
92.118.234.242	attackbotsspam	[2020-04-30 07:38:33] NOTICE[1170] chan_sip.c: Registration from '"1007" ' failed for '92.118.234.242:5362' - Wrong password [2020-04-30 07:38:33] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-30T07:38:33.942-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f6c08358818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.118.234.242/5362",Challenge="554b7373",ReceivedChallenge="554b7373",ReceivedHash="0f6a786e054a624d972b01c1c6d9fa20" [2020-04-30 07:38:34] NOTICE[1170] chan_sip.c: Registration from '"1007" ' failed for '92.118.234.242:5362' - Wrong password [2020-04-30 07:38:34] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-30T07:38:34.025-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f6c08545828",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-04-30 19:43:55
159.89.115.126	attackbots	Apr 30 13:44:35 dev0-dcde-rnet sshd[3164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.115.126 Apr 30 13:44:37 dev0-dcde-rnet sshd[3164]: Failed password for invalid user admin from 159.89.115.126 port 34110 ssh2 Apr 30 13:47:12 dev0-dcde-rnet sshd[3305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.115.126	2020-04-30 20:02:33
89.40.123.62	attack	lfd: (smtpauth) Failed SMTP AUTH login from 89.40.123.62 (GB/United Kingdom/host62-123-40-89.serverdedicati.aruba.it): 5 in the last 3600 secs - Sat Jun 2 07:47:07 2018	2020-04-30 19:31:16
106.75.4.215	attack	prod6 ...	2020-04-30 19:48:15
191.96.249.196	attackbots	Brute force blocker - service: exim2 - aantal: 25 - Fri Jun 1 19:35:14 2018	2020-04-30 19:40:55
58.35.73.42	attackspam	Brute force blocker - service: proftpd1, proftpd2 - aantal: 54 - Tue May 29 16:25:17 2018	2020-04-30 19:59:56
37.59.107.164	attackspambots	Apr 30 12:03:16 sso sshd[15219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.107.164 Apr 30 12:03:18 sso sshd[15219]: Failed password for invalid user git from 37.59.107.164 port 43030 ssh2 ...	2020-04-30 19:42:23
221.195.162.75	attack	Brute force blocker - service: proftpd1, proftpd2 - aantal: 109 - Fri Jun 1 14:45:18 2018	2020-04-30 19:35:55
123.206.217.32	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-30 19:39:03
60.169.114.166	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 60.169.114.166 (CN/China/-): 5 in the last 3600 secs - Sat Jun 2 01:44:29 2018	2020-04-30 19:39:35
58.54.223.236	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 58.54.223.236 (-): 5 in the last 3600 secs - Tue May 29 15:22:39 2018	2020-04-30 20:05:19

Recently Reported IPs

168.121.11.53	233.88.62.235	110.164.76.61	248.216.85.96
88.187.195.90	158.85.145.187	238.75.157.45	91.242.161.167
106.53.19.224	51.75.206.42	13.24.126.147	119.250.12.181
35.241.192.23	60.184.112.142	200.236.122.38	200.52.29.146
193.204.29.252	193.33.233.254	177.184.188.224	172.68.65.25