Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Dec 20 21:27:44 sd-53420 sshd\[30703\]: Invalid user dorrell from 106.13.53.16
Dec 20 21:27:44 sd-53420 sshd\[30703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.16
Dec 20 21:27:46 sd-53420 sshd\[30703\]: Failed password for invalid user dorrell from 106.13.53.16 port 37372 ssh2
Dec 20 21:32:38 sd-53420 sshd\[32532\]: User root from 106.13.53.16 not allowed because none of user's groups are listed in AllowGroups
Dec 20 21:32:38 sd-53420 sshd\[32532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.16  user=root
...
2019-12-21 04:40:07
attack
leo_www
2019-12-13 08:38:51
attackspambots
detected by Fail2Ban
2019-12-02 17:45:19
attackspambots
2019-12-02T00:00:11.101188abusebot-4.cloudsearch.cf sshd\[9771\]: Invalid user bruce from 106.13.53.16 port 58606
2019-12-02 08:02:16
Comments on same subnet:
IP Type Details Datetime
106.13.53.173 attackbotsspam
Apr 11 05:55:50 h2829583 sshd[29689]: Failed password for root from 106.13.53.173 port 47630 ssh2
2020-04-11 12:40:24
106.13.53.70 attackbotsspam
Apr 10 15:44:43 prod4 sshd\[12523\]: Invalid user dreambox from 106.13.53.70
Apr 10 15:44:45 prod4 sshd\[12523\]: Failed password for invalid user dreambox from 106.13.53.70 port 40562 ssh2
Apr 10 15:48:05 prod4 sshd\[13842\]: Invalid user jaimito from 106.13.53.70
...
2020-04-10 23:48:51
106.13.53.70 attackspam
5x Failed Password
2020-04-10 14:57:59
106.13.53.173 attackbots
$f2bV_matches
2020-04-08 09:16:09
106.13.53.70 attack
Tried sshing with brute force.
2020-04-06 17:51:25
106.13.53.161 attack
Mar  8 11:35:09 lukav-desktop sshd\[13622\]: Invalid user cpanelphppgadmin from 106.13.53.161
Mar  8 11:35:09 lukav-desktop sshd\[13622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.161
Mar  8 11:35:11 lukav-desktop sshd\[13622\]: Failed password for invalid user cpanelphppgadmin from 106.13.53.161 port 49858 ssh2
Mar  8 11:38:40 lukav-desktop sshd\[13682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.161  user=root
Mar  8 11:38:42 lukav-desktop sshd\[13682\]: Failed password for root from 106.13.53.161 port 37556 ssh2
2020-03-08 17:46:49
106.13.53.70 attackspambots
Feb 22 14:27:18 gw1 sshd[26645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.70
Feb 22 14:27:19 gw1 sshd[26645]: Failed password for invalid user kevin from 106.13.53.70 port 57122 ssh2
...
2020-02-22 20:46:00
106.13.53.173 attackspambots
Brute-force attempt banned
2020-02-09 09:50:06
106.13.53.173 attack
Aug 26 13:16:18 ms-srv sshd[24684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.173
Aug 26 13:16:20 ms-srv sshd[24684]: Failed password for invalid user r from 106.13.53.173 port 55872 ssh2
2020-02-02 20:48:10
106.13.53.70 attackspambots
Unauthorized connection attempt detected from IP address 106.13.53.70 to port 2220 [J]
2020-01-24 04:51:17
106.13.53.161 attackspam
Unauthorized connection attempt detected from IP address 106.13.53.161 to port 2220 [J]
2020-01-08 03:02:16
106.13.53.161 attack
Invalid user sueling from 106.13.53.161 port 36348
2020-01-03 19:23:57
106.13.53.173 attackbots
Jan  2 07:32:41  sshd[18484]: Failed password for invalid user ashlyn from 106.13.53.173 port 56756 ssh2
2020-01-02 15:11:56
106.13.53.173 attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-01-02 07:49:52
106.13.53.161 attack
Dec 31 10:57:34 mailrelay sshd[24901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.161  user=r.r
Dec 31 10:57:36 mailrelay sshd[24901]: Failed password for r.r from 106.13.53.161 port 42456 ssh2
Dec 31 10:57:37 mailrelay sshd[24901]: Received disconnect from 106.13.53.161 port 42456:11: Bye Bye [preauth]
Dec 31 10:57:37 mailrelay sshd[24901]: Disconnected from 106.13.53.161 port 42456 [preauth]
Dec 31 11:06:23 mailrelay sshd[25004]: Invalid user greuel from 106.13.53.161 port 55246
Dec 31 11:06:23 mailrelay sshd[25004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.161
Dec 31 11:06:25 mailrelay sshd[25004]: Failed password for invalid user greuel from 106.13.53.161 port 55246 ssh2
Dec 31 11:06:25 mailrelay sshd[25004]: Received disconnect from 106.13.53.161 port 55246:11: Bye Bye [preauth]
Dec 31 11:06:25 mailrelay sshd[25004]: Disconnected from 106.13.53.161 port 5........
-------------------------------
2020-01-02 04:48:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.53.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50561
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.53.16.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120101 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 02 08:02:13 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 16.53.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.53.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
83.246.167.62 attackspambots
Unauthorized connection attempt detected from IP address 83.246.167.62 to port 1433 [J]
2020-02-02 09:13:45
177.84.40.122 attackbotsspam
Unauthorized connection attempt detected from IP address 177.84.40.122 to port 80 [J]
2020-02-02 09:41:16
182.61.2.249 attack
Unauthorized connection attempt detected from IP address 182.61.2.249 to port 2220 [J]
2020-02-02 09:38:34
79.166.108.122 attack
Unauthorized connection attempt detected from IP address 79.166.108.122 to port 81 [J]
2020-02-02 09:10:09
113.186.65.21 attackbots
Unauthorized connection attempt detected from IP address 113.186.65.21 to port 80 [J]
2020-02-02 09:08:50
222.84.254.139 attack
Unauthorized connection attempt detected from IP address 222.84.254.139 to port 2220 [J]
2020-02-02 09:46:32
123.207.142.31 attackbots
2019-12-01T18:58:47.870457suse-nuc sshd[12259]: Invalid user backup from 123.207.142.31 port 56629
...
2020-02-02 09:44:47
159.89.166.67 attack
Unauthorized connection attempt detected from IP address 159.89.166.67 to port 2220 [J]
2020-02-02 09:28:52
218.92.26.86 attackbotsspam
Unauthorized connection attempt detected from IP address 218.92.26.86 to port 1433 [J]
2020-02-02 09:27:27
45.71.229.90 attackspambots
Unauthorized connection attempt detected from IP address 45.71.229.90 to port 8080 [J]
2020-02-02 09:34:56
59.42.255.159 attackbotsspam
Unauthorized connection attempt detected from IP address 59.42.255.159 to port 1433 [J]
2020-02-02 09:14:24
189.130.138.15 attackbotsspam
Unauthorized connection attempt detected from IP address 189.130.138.15 to port 23 [J]
2020-02-02 09:37:41
185.79.156.167 attackspam
Unauthorized connection attempt detected from IP address 185.79.156.167 to port 1433 [J]
2020-02-02 09:16:33
220.119.52.87 attackspambots
Unauthorized connection attempt detected from IP address 220.119.52.87 to port 4567 [J]
2020-02-02 09:25:07
167.172.124.157 attackbots
Unauthorized connection attempt detected from IP address 167.172.124.157 to port 2220 [J]
2020-02-02 09:28:18

Recently Reported IPs

153.1.59.147 182.103.61.160 1.10.232.246 15.227.109.53
119.212.50.113 199.236.137.0 185.239.239.214 106.12.36.122
82.177.111.26 112.187.174.237 1.0.131.58 92.253.239.147
32.116.2.110 71.225.191.99 205.51.151.122 12.128.73.157
198.221.126.78 187.26.2.129 80.164.5.44 177.144.154.67