City: unknown
Region: unknown
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: unknown
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attackspam | Jan 31 12:23:53 sd-53420 sshd\[22969\]: Invalid user sajay from 106.13.55.5 Jan 31 12:23:53 sd-53420 sshd\[22969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5 Jan 31 12:23:55 sd-53420 sshd\[22969\]: Failed password for invalid user sajay from 106.13.55.5 port 36832 ssh2 Jan 31 12:26:59 sd-53420 sshd\[23283\]: Invalid user project from 106.13.55.5 Jan 31 12:26:59 sd-53420 sshd\[23283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5 ... |
2020-01-31 19:37:28 |
| attackspambots | Unauthorized connection attempt detected from IP address 106.13.55.5 to port 2220 [J] |
2020-01-27 08:59:32 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.55.178 | attackspam | May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412 May 24 12:08:25 onepixel sshd[1255772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.178 May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412 May 24 12:08:27 onepixel sshd[1255772]: Failed password for invalid user wad from 106.13.55.178 port 48412 ssh2 May 24 12:12:39 onepixel sshd[1256423]: Invalid user rus from 106.13.55.178 port 43450 |
2020-05-24 23:32:12 |
| 106.13.55.178 | attackbots | Invalid user deploy from 106.13.55.178 port 52696 |
2020-05-16 08:11:18 |
| 106.13.55.50 | attack | Invalid user wps from 106.13.55.50 port 39974 |
2020-05-15 15:26:29 |
| 106.13.55.178 | attack | fail2ban -- 106.13.55.178 ... |
2020-05-14 12:55:37 |
| 106.13.55.178 | attackbotsspam | 5x Failed Password |
2020-04-27 03:16:21 |
| 106.13.55.50 | attackspambots | Apr 18 13:59:00 meumeu sshd[17527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 Apr 18 13:59:02 meumeu sshd[17527]: Failed password for invalid user tc from 106.13.55.50 port 44918 ssh2 Apr 18 14:03:04 meumeu sshd[18435]: Failed password for root from 106.13.55.50 port 34274 ssh2 ... |
2020-04-18 20:14:58 |
| 106.13.55.50 | attackbotsspam | Invalid user history from 106.13.55.50 port 35670 |
2020-04-03 16:27:32 |
| 106.13.55.50 | attackbots | k+ssh-bruteforce |
2020-04-03 09:46:55 |
| 106.13.55.50 | attackbots | (sshd) Failed SSH login from 106.13.55.50 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 20 00:08:59 amsweb01 sshd[6462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 20 00:09:00 amsweb01 sshd[6462]: Failed password for root from 106.13.55.50 port 33622 ssh2 Mar 20 00:13:08 amsweb01 sshd[9919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 20 00:13:10 amsweb01 sshd[9919]: Failed password for root from 106.13.55.50 port 33966 ssh2 Mar 20 00:15:01 amsweb01 sshd[10173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root |
2020-03-20 07:36:19 |
| 106.13.55.50 | attackbotsspam | Mar 12 09:19:03 server sshd\[32466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 12 09:19:06 server sshd\[32466\]: Failed password for root from 106.13.55.50 port 42288 ssh2 Mar 12 09:29:59 server sshd\[2062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 12 09:30:01 server sshd\[2062\]: Failed password for root from 106.13.55.50 port 59570 ssh2 Mar 12 09:34:23 server sshd\[2925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root ... |
2020-03-12 14:35:21 |
| 106.13.55.50 | attackbots | Lines containing failures of 106.13.55.50 (max 1000) Mar 9 11:51:59 localhost sshd[16763]: User r.r from 106.13.55.50 not allowed because listed in DenyUsers Mar 9 11:51:59 localhost sshd[16763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=r.r Mar 9 11:52:00 localhost sshd[16763]: Failed password for invalid user r.r from 106.13.55.50 port 57864 ssh2 Mar 9 11:52:01 localhost sshd[16763]: Received disconnect from 106.13.55.50 port 57864:11: Bye Bye [preauth] Mar 9 11:52:01 localhost sshd[16763]: Disconnected from invalid user r.r 106.13.55.50 port 57864 [preauth] Mar 9 12:16:32 localhost sshd[21274]: Invalid user wangdc from 106.13.55.50 port 58388 Mar 9 12:16:32 localhost sshd[21274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 Mar 9 12:16:34 localhost sshd[21274]: Failed password for invalid user wangdc from 106.13.55.50 port 58388 ssh2 Mar 9........ ------------------------------ |
2020-03-10 03:34:57 |
| 106.13.55.24 | attackspambots | Feb 20 06:30:04 gw1 sshd[11938]: Failed password for lp from 106.13.55.24 port 41860 ssh2 ... |
2020-02-20 09:49:08 |
| 106.13.55.24 | attackbotsspam | Feb 10 15:46:04 MK-Soft-Root2 sshd[23726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.24 Feb 10 15:46:06 MK-Soft-Root2 sshd[23726]: Failed password for invalid user ydr from 106.13.55.24 port 47238 ssh2 ... |
2020-02-10 23:06:48 |
| 106.13.55.24 | attack | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-22 01:42:52 |
| 106.13.55.24 | attack | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-20 17:40:50 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.55.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12605
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.55.5. IN A
;; AUTHORITY SECTION:
. 309 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012601 1800 900 604800 86400
;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 08:59:27 CST 2020
;; MSG SIZE rcvd: 115Host 5.55.13.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.55.13.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.63.151.111 | attackbotsspam | 3000/tcp 18080/tcp 3689/tcp... [2019-07-25/09-23]9pkt,9pt.(tcp) |
2019-09-24 05:19:41 |
| 104.239.149.95 | attackbotsspam | 22 |
2019-09-24 05:25:22 |
| 92.118.37.74 | attackspam | Sep 23 23:17:03 mc1 kernel: \[559871.394724\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=47912 PROTO=TCP SPT=46525 DPT=11941 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 23 23:17:47 mc1 kernel: \[559915.126547\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=5664 PROTO=TCP SPT=46525 DPT=29264 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 23 23:19:05 mc1 kernel: \[559992.998388\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=28576 PROTO=TCP SPT=46525 DPT=10181 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-24 05:25:57 |
| 49.88.112.63 | attack | 2019-09-23T21:17:15.531606abusebot-8.cloudsearch.cf sshd\[17368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.63 user=root |
2019-09-24 05:19:21 |
| 111.19.162.80 | attack | Sep 23 23:11:33 lnxmysql61 sshd[4239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.19.162.80 Sep 23 23:11:33 lnxmysql61 sshd[4239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.19.162.80 |
2019-09-24 05:39:34 |
| 222.172.251.117 | attack | 5500/tcp 52869/tcp [2019-09-21]2pkt |
2019-09-24 05:40:58 |
| 200.116.6.45 | attackbotsspam | Spam Timestamp : 23-Sep-19 21:11 BlockList Provider combined abuse (863) |
2019-09-24 05:46:41 |
| 192.3.209.173 | attack | 2019-09-23T17:15:58.1562181495-001 sshd\[19324\]: Invalid user akersveen from 192.3.209.173 port 56328 2019-09-23T17:15:58.1648841495-001 sshd\[19324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.209.173 2019-09-23T17:16:00.0337861495-001 sshd\[19324\]: Failed password for invalid user akersveen from 192.3.209.173 port 56328 ssh2 2019-09-23T17:20:27.2668721495-001 sshd\[19610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.209.173 user=root 2019-09-23T17:20:29.7328321495-001 sshd\[19610\]: Failed password for root from 192.3.209.173 port 41770 ssh2 2019-09-23T17:24:52.0352041495-001 sshd\[19895\]: Invalid user vcloud from 192.3.209.173 port 55440 2019-09-23T17:24:52.0422921495-001 sshd\[19895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.209.173 ... |
2019-09-24 05:38:34 |
| 13.58.186.252 | attack | WordpressAttack |
2019-09-24 05:13:58 |
| 186.18.248.7 | attackbotsspam | Spam Timestamp : 23-Sep-19 21:25 BlockList Provider combined abuse (865) |
2019-09-24 05:44:01 |
| 46.38.144.17 | attackbotsspam | Sep 23 23:22:07 webserver postfix/smtpd\[30093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:23:24 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:24:41 webserver postfix/smtpd\[30093\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:25:58 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 23 23:27:15 webserver postfix/smtpd\[29299\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-24 05:31:42 |
| 213.194.169.249 | attackspambots | Sep 23 23:11:22 vmanager6029 sshd\[12930\]: Invalid user mailman from 213.194.169.249 port 41024 Sep 23 23:11:22 vmanager6029 sshd\[12930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.194.169.249 Sep 23 23:11:24 vmanager6029 sshd\[12930\]: Failed password for invalid user mailman from 213.194.169.249 port 41024 ssh2 |
2019-09-24 05:48:20 |
| 27.44.205.217 | attackspam | 22/tcp 22/tcp 2222/tcp [2019-09-21/22]3pkt |
2019-09-24 05:40:35 |
| 81.34.230.71 | attack | Spam Timestamp : 23-Sep-19 21:48 BlockList Provider combined abuse (869) |
2019-09-24 05:42:16 |
| 183.134.199.68 | attack | Sep 24 00:03:23 www2 sshd\[34401\]: Invalid user lclin from 183.134.199.68Sep 24 00:03:25 www2 sshd\[34401\]: Failed password for invalid user lclin from 183.134.199.68 port 42920 ssh2Sep 24 00:11:59 www2 sshd\[35488\]: Invalid user osmc from 183.134.199.68 ... |
2019-09-24 05:22:29 |