Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: Beijing Baidu Netcom Science and Technology Co., Ltd.

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Dec 18 08:05:14 OPSO sshd\[30967\]: Invalid user borys from 106.13.48.157 port 38296
Dec 18 08:05:14 OPSO sshd\[30967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Dec 18 08:05:16 OPSO sshd\[30967\]: Failed password for invalid user borys from 106.13.48.157 port 38296 ssh2
Dec 18 08:12:08 OPSO sshd\[31864\]: Invalid user gpkaff from 106.13.48.157 port 35924
Dec 18 08:12:08 OPSO sshd\[31864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-12-18 17:54:01
attackbotsspam
Dec  9 07:25:04 eventyay sshd[21089]: Failed password for root from 106.13.48.157 port 37374 ssh2
Dec  9 07:31:54 eventyay sshd[21312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Dec  9 07:31:55 eventyay sshd[21312]: Failed password for invalid user hostname from 106.13.48.157 port 34940 ssh2
...
2019-12-09 15:29:26
attackbots
2019-12-08T09:02:45.056673abusebot.cloudsearch.cf sshd\[17845\]: Invalid user yatish from 106.13.48.157 port 55188
2019-12-08 17:18:10
attackbotsspam
Dec  4 22:10:14 server sshd\[17057\]: Invalid user piccarreta from 106.13.48.157
Dec  4 22:10:14 server sshd\[17057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Dec  4 22:10:17 server sshd\[17057\]: Failed password for invalid user piccarreta from 106.13.48.157 port 39774 ssh2
Dec  4 22:25:32 server sshd\[21352\]: Invalid user committe from 106.13.48.157
Dec  4 22:25:32 server sshd\[21352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
...
2019-12-05 06:10:33
attack
Oct 29 10:01:04 vps691689 sshd[18401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Oct 29 10:01:06 vps691689 sshd[18401]: Failed password for invalid user china from 106.13.48.157 port 49624 ssh2
...
2019-10-29 17:08:56
attack
Oct 28 22:05:01 MK-Soft-VM6 sshd[3583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Oct 28 22:05:03 MK-Soft-VM6 sshd[3583]: Failed password for invalid user cn from 106.13.48.157 port 52056 ssh2
...
2019-10-29 05:29:22
attackbotsspam
Invalid user wu from 106.13.48.157 port 53504
2019-10-27 03:18:47
attack
Invalid user wu from 106.13.48.157 port 53504
2019-10-24 21:28:48
attackbotsspam
Oct 21 15:36:43 sauna sshd[112130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Oct 21 15:36:45 sauna sshd[112130]: Failed password for invalid user BGT%VFR$ from 106.13.48.157 port 33558 ssh2
...
2019-10-21 21:16:36
attack
Oct 20 14:30:52 meumeu sshd[30010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Oct 20 14:30:54 meumeu sshd[30010]: Failed password for invalid user eoffice from 106.13.48.157 port 34200 ssh2
Oct 20 14:36:38 meumeu sshd[30752]: Failed password for root from 106.13.48.157 port 42850 ssh2
...
2019-10-20 22:15:46
attackbotsspam
Oct 13 00:23:05 debian64 sshd\[21301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157  user=root
Oct 13 00:23:08 debian64 sshd\[21301\]: Failed password for root from 106.13.48.157 port 48800 ssh2
Oct 13 00:29:22 debian64 sshd\[22530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157  user=root
...
2019-10-13 07:16:03
attack
2019-09-29T14:43:38.6818931495-001 sshd\[35312\]: Invalid user corky from 106.13.48.157 port 42094
2019-09-29T14:43:38.6853131495-001 sshd\[35312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29T14:43:40.7519851495-001 sshd\[35312\]: Failed password for invalid user corky from 106.13.48.157 port 42094 ssh2
2019-09-29T14:48:08.5873341495-001 sshd\[35661\]: Invalid user 123456 from 106.13.48.157 port 52150
2019-09-29T14:48:08.5949861495-001 sshd\[35661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29T14:48:10.7273751495-001 sshd\[35661\]: Failed password for invalid user 123456 from 106.13.48.157 port 52150 ssh2
...
2019-09-30 03:03:15
attack
Sep 28 23:11:13 hpm sshd\[23216\]: Invalid user 123 from 106.13.48.157
Sep 28 23:11:13 hpm sshd\[23216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 28 23:11:15 hpm sshd\[23216\]: Failed password for invalid user 123 from 106.13.48.157 port 50494 ssh2
Sep 28 23:16:45 hpm sshd\[23616\]: Invalid user Dmin from 106.13.48.157
Sep 28 23:16:45 hpm sshd\[23616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-29 17:24:28
attackspambots
Sep 26 08:41:26 ny01 sshd[15720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 26 08:41:28 ny01 sshd[15720]: Failed password for invalid user Ruut from 106.13.48.157 port 35948 ssh2
Sep 26 08:47:26 ny01 sshd[17038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-26 20:53:46
attackspam
Sep 23 20:24:43 v22019058497090703 sshd[19486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 23 20:24:45 v22019058497090703 sshd[19486]: Failed password for invalid user transfer from 106.13.48.157 port 54588 ssh2
Sep 23 20:29:55 v22019058497090703 sshd[19892]: Failed password for root from 106.13.48.157 port 38938 ssh2
...
2019-09-24 02:59:28
attackspambots
2019-09-22T08:10:42.233166  sshd[27254]: Invalid user cc@123 from 106.13.48.157 port 60846
2019-09-22T08:10:42.246827  sshd[27254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-22T08:10:42.233166  sshd[27254]: Invalid user cc@123 from 106.13.48.157 port 60846
2019-09-22T08:10:44.594509  sshd[27254]: Failed password for invalid user cc@123 from 106.13.48.157 port 60846 ssh2
2019-09-22T08:16:52.100638  sshd[27359]: Invalid user mickey1 from 106.13.48.157 port 44230
...
2019-09-22 15:22:24
attackspambots
SSH-BruteForce
2019-09-21 08:48:52
attack
Sep 14 08:37:23 meumeu sshd[8436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
Sep 14 08:37:26 meumeu sshd[8436]: Failed password for invalid user team1 from 106.13.48.157 port 34022 ssh2
Sep 14 08:43:51 meumeu sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157 
...
2019-09-15 00:49:40
attack
Sep 14 02:42:54 www sshd\[18187\]: Invalid user sysop from 106.13.48.157
Sep 14 02:42:54 www sshd\[18187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep 14 02:42:56 www sshd\[18187\]: Failed password for invalid user sysop from 106.13.48.157 port 35978 ssh2
...
2019-09-14 07:46:26
attackspambots
Sep  9 06:41:27 saschabauer sshd[2067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep  9 06:41:29 saschabauer sshd[2067]: Failed password for invalid user password from 106.13.48.157 port 35490 ssh2
2019-09-09 12:48:32
attackbotsspam
Sep  6 07:45:34 vps691689 sshd[8961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Sep  6 07:45:35 vps691689 sshd[8961]: Failed password for invalid user 123 from 106.13.48.157 port 51216 ssh2
...
2019-09-06 14:02:43
attackspambots
Sep  3 02:29:39 lnxmysql61 sshd[22374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-09-03 09:13:04
attackbots
2019-08-24T18:32:20.826342  sshd[2297]: Invalid user elisabetta from 106.13.48.157 port 48754
2019-08-24T18:32:20.840580  sshd[2297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
2019-08-24T18:32:20.826342  sshd[2297]: Invalid user elisabetta from 106.13.48.157 port 48754
2019-08-24T18:32:22.978895  sshd[2297]: Failed password for invalid user elisabetta from 106.13.48.157 port 48754 ssh2
2019-08-24T18:58:39.961232  sshd[2634]: Invalid user cathyreis from 106.13.48.157 port 37732
...
2019-08-25 01:48:23
attackbotsspam
Aug 21 15:45:40 v22019058497090703 sshd[17609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
Aug 21 15:45:42 v22019058497090703 sshd[17609]: Failed password for invalid user cod4server from 106.13.48.157 port 37634 ssh2
Aug 21 15:52:20 v22019058497090703 sshd[18018]: Failed password for root from 106.13.48.157 port 50186 ssh2
...
2019-08-22 04:16:36
attackspambots
$f2bV_matches
2019-08-14 04:19:45
attackspambots
Aug  3 20:25:20 localhost sshd\[40325\]: Invalid user copy from 106.13.48.157 port 59242
Aug  3 20:25:20 localhost sshd\[40325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.157
...
2019-08-04 03:33:06
Comments on same subnet:
IP Type Details Datetime
106.13.48.9 attackbotsspam
Oct 8 21:59:31 *hidden* sshd[4418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.9 Oct 8 21:59:33 *hidden* sshd[4418]: Failed password for invalid user kevin from 106.13.48.9 port 40514 ssh2 Oct 8 22:16:27 *hidden* sshd[11400]: Invalid user info from 106.13.48.9 port 38028
2020-10-10 04:46:19
106.13.48.9 attack
SSH bruteforce
2020-10-09 20:45:22
106.13.48.9 attackspam
2020-10-09T04:48:40+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)
2020-10-09 12:31:36
106.13.48.122 attack
firewall-block, port(s): 14602/tcp
2020-09-06 20:34:34
106.13.48.122 attackspam
 TCP (SYN) 106.13.48.122:47133 -> port 27055, len 44
2020-09-06 12:14:05
106.13.48.122 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-06 04:36:40
106.13.48.122 attack
Aug 11 22:32:14 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
Aug 11 22:32:16 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: Failed password for root from 106.13.48.122 port 42005 ssh2
Aug 11 22:35:19 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
Aug 11 22:35:21 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: Failed password for root from 106.13.48.122 port 61109 ssh2
Aug 11 22:36:39 Ubuntu-1404-trusty-64-minimal sshd\[14851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122  user=root
2020-08-12 05:44:27
106.13.48.122 attack
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 8812
2020-07-25 16:06:07
106.13.48.122 attack
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 768 [T]
2020-07-08 02:06:02
106.13.48.122 attackbots
Jul  6 16:56:18 ift sshd\[32718\]: Invalid user zxc from 106.13.48.122Jul  6 16:56:19 ift sshd\[32718\]: Failed password for invalid user zxc from 106.13.48.122 port 29093 ssh2Jul  6 16:59:16 ift sshd\[33111\]: Failed password for invalid user admin from 106.13.48.122 port 50249 ssh2Jul  6 17:02:02 ift sshd\[34103\]: Invalid user zhangfeng from 106.13.48.122Jul  6 17:02:04 ift sshd\[34103\]: Failed password for invalid user zhangfeng from 106.13.48.122 port 14912 ssh2
...
2020-07-07 01:17:17
106.13.48.122 attackspam
Jul  5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808
Jul  5 05:48:37 meumeu sshd[538171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 
Jul  5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808
Jul  5 05:48:39 meumeu sshd[538171]: Failed password for invalid user wor from 106.13.48.122 port 40808 ssh2
Jul  5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505
Jul  5 05:54:07 meumeu sshd[538299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 
Jul  5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505
Jul  5 05:54:09 meumeu sshd[538299]: Failed password for invalid user cloud from 106.13.48.122 port 25505 ssh2
Jul  5 05:55:56 meumeu sshd[538334]: Invalid user crb from 106.13.48.122 port 39249
...
2020-07-05 12:46:16
106.13.48.122 attack
Jul  4 03:27:17 PorscheCustomer sshd[13634]: Failed password for root from 106.13.48.122 port 10034 ssh2
Jul  4 03:28:58 PorscheCustomer sshd[13646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122
Jul  4 03:29:00 PorscheCustomer sshd[13646]: Failed password for invalid user vegeta from 106.13.48.122 port 24280 ssh2
...
2020-07-04 10:26:34
106.13.48.122 attackbots
(sshd) Failed SSH login from 106.13.48.122 (CN/China/-): 5 in the last 3600 secs
2020-06-30 14:19:30
106.13.48.122 attackbotsspam
Unauthorized connection attempt detected from IP address 106.13.48.122 to port 1741
2020-06-29 03:37:13
106.13.48.122 attackspambots
 TCP (SYN) 106.13.48.122:44166 -> port 9066, len 44
2020-06-25 19:55:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.48.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14721
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.48.157.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080100 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 00:29:33 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 157.48.13.106.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 157.48.13.106.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
118.249.42.19 attackspambots
UTC: 2019-11-30 port: 23/tcp
2019-12-01 20:52:50
110.49.71.248 attackspam
Dec  1 13:30:30 serwer sshd\[31398\]: Invalid user guest from 110.49.71.248 port 58136
Dec  1 13:30:30 serwer sshd\[31398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.248
Dec  1 13:30:32 serwer sshd\[31398\]: Failed password for invalid user guest from 110.49.71.248 port 58136 ssh2
...
2019-12-01 20:40:00
106.12.38.109 attackbotsspam
Dec  1 12:09:08 zulu412 sshd\[4441\]: Invalid user nose from 106.12.38.109 port 56518
Dec  1 12:09:08 zulu412 sshd\[4441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109
Dec  1 12:09:09 zulu412 sshd\[4441\]: Failed password for invalid user nose from 106.12.38.109 port 56518 ssh2
...
2019-12-01 20:44:08
93.158.161.200 attack
port scan and connect, tcp 443 (https)
2019-12-01 20:58:37
14.182.153.215 attack
Dec  1 09:48:44 v22018076622670303 sshd\[26345\]: Invalid user user from 14.182.153.215 port 63974
Dec  1 09:48:44 v22018076622670303 sshd\[26345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.182.153.215
Dec  1 09:48:47 v22018076622670303 sshd\[26345\]: Failed password for invalid user user from 14.182.153.215 port 63974 ssh2
...
2019-12-01 20:47:06
137.74.119.50 attackbotsspam
$f2bV_matches
2019-12-01 20:51:35
183.207.177.132 attackbotsspam
Dec  1 07:20:32 TORMINT sshd\[4805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.207.177.132  user=root
Dec  1 07:20:34 TORMINT sshd\[4805\]: Failed password for root from 183.207.177.132 port 13882 ssh2
Dec  1 07:20:48 TORMINT sshd\[4807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.207.177.132  user=root
...
2019-12-01 20:35:24
211.55.143.206 attackbots
Dec  1 08:44:19 venus sshd\[23823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.55.143.206  user=root
Dec  1 08:44:21 venus sshd\[23823\]: Failed password for root from 211.55.143.206 port 35583 ssh2
Dec  1 08:44:23 venus sshd\[23823\]: Failed password for root from 211.55.143.206 port 35583 ssh2
...
2019-12-01 21:00:56
1.34.174.102 attack
UTC: 2019-11-30 port: 23/tcp
2019-12-01 20:39:40
177.53.105.251 attack
UTC: 2019-11-30 port: 26/tcp
2019-12-01 20:29:40
222.235.223.135 attack
UTC: 2019-11-30 port: 26/tcp
2019-12-01 20:33:17
179.111.33.164 attackspam
UTC: 2019-11-30 port: 81/tcp
2019-12-01 20:24:34
200.44.50.155 attackbots
Invalid user russia from 200.44.50.155 port 57050
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.44.50.155
Failed password for invalid user russia from 200.44.50.155 port 57050 ssh2
Invalid user dalda from 200.44.50.155 port 35774
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.44.50.155
2019-12-01 20:24:03
122.152.250.89 attackbots
SSH Brute-Forcing (ownc)
2019-12-01 20:53:05
185.153.196.80 attackbots
1575181337 - 12/01/2019 07:22:17 Host: 185.153.196.80/185.153.196.80 Port: 6000 TCP Blocked
2019-12-01 20:53:24

Recently Reported IPs

110.139.179.244 64.16.141.145 16.58.139.115 216.213.137.183
78.31.71.113 62.234.97.45 162.247.104.22 52.53.112.166
213.74.49.241 96.60.209.243 84.21.20.158 106.52.142.17
183.247.132.225 86.36.73.190 201.187.42.169 15.153.255.244
170.78.98.8 109.81.156.70 114.96.62.253 120.161.214.60