City: unknown
Region: unknown
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: unknown
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attack | Invalid user wps from 106.13.55.50 port 39974 |
2020-05-15 15:26:29 |
| attackspambots | Apr 18 13:59:00 meumeu sshd[17527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 Apr 18 13:59:02 meumeu sshd[17527]: Failed password for invalid user tc from 106.13.55.50 port 44918 ssh2 Apr 18 14:03:04 meumeu sshd[18435]: Failed password for root from 106.13.55.50 port 34274 ssh2 ... |
2020-04-18 20:14:58 |
| attackbotsspam | Invalid user history from 106.13.55.50 port 35670 |
2020-04-03 16:27:32 |
| attackbots | k+ssh-bruteforce |
2020-04-03 09:46:55 |
| attackbots | (sshd) Failed SSH login from 106.13.55.50 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 20 00:08:59 amsweb01 sshd[6462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 20 00:09:00 amsweb01 sshd[6462]: Failed password for root from 106.13.55.50 port 33622 ssh2 Mar 20 00:13:08 amsweb01 sshd[9919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 20 00:13:10 amsweb01 sshd[9919]: Failed password for root from 106.13.55.50 port 33966 ssh2 Mar 20 00:15:01 amsweb01 sshd[10173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root |
2020-03-20 07:36:19 |
| attackbotsspam | Mar 12 09:19:03 server sshd\[32466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 12 09:19:06 server sshd\[32466\]: Failed password for root from 106.13.55.50 port 42288 ssh2 Mar 12 09:29:59 server sshd\[2062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root Mar 12 09:30:01 server sshd\[2062\]: Failed password for root from 106.13.55.50 port 59570 ssh2 Mar 12 09:34:23 server sshd\[2925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=root ... |
2020-03-12 14:35:21 |
| attackbots | Lines containing failures of 106.13.55.50 (max 1000) Mar 9 11:51:59 localhost sshd[16763]: User r.r from 106.13.55.50 not allowed because listed in DenyUsers Mar 9 11:51:59 localhost sshd[16763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 user=r.r Mar 9 11:52:00 localhost sshd[16763]: Failed password for invalid user r.r from 106.13.55.50 port 57864 ssh2 Mar 9 11:52:01 localhost sshd[16763]: Received disconnect from 106.13.55.50 port 57864:11: Bye Bye [preauth] Mar 9 11:52:01 localhost sshd[16763]: Disconnected from invalid user r.r 106.13.55.50 port 57864 [preauth] Mar 9 12:16:32 localhost sshd[21274]: Invalid user wangdc from 106.13.55.50 port 58388 Mar 9 12:16:32 localhost sshd[21274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 Mar 9 12:16:34 localhost sshd[21274]: Failed password for invalid user wangdc from 106.13.55.50 port 58388 ssh2 Mar 9........ ------------------------------ |
2020-03-10 03:34:57 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.55.178 | attackspam | May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412 May 24 12:08:25 onepixel sshd[1255772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.178 May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412 May 24 12:08:27 onepixel sshd[1255772]: Failed password for invalid user wad from 106.13.55.178 port 48412 ssh2 May 24 12:12:39 onepixel sshd[1256423]: Invalid user rus from 106.13.55.178 port 43450 |
2020-05-24 23:32:12 |
| 106.13.55.178 | attackbots | Invalid user deploy from 106.13.55.178 port 52696 |
2020-05-16 08:11:18 |
| 106.13.55.178 | attack | fail2ban -- 106.13.55.178 ... |
2020-05-14 12:55:37 |
| 106.13.55.178 | attackbotsspam | 5x Failed Password |
2020-04-27 03:16:21 |
| 106.13.55.24 | attackspambots | Feb 20 06:30:04 gw1 sshd[11938]: Failed password for lp from 106.13.55.24 port 41860 ssh2 ... |
2020-02-20 09:49:08 |
| 106.13.55.24 | attackbotsspam | Feb 10 15:46:04 MK-Soft-Root2 sshd[23726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.24 Feb 10 15:46:06 MK-Soft-Root2 sshd[23726]: Failed password for invalid user ydr from 106.13.55.24 port 47238 ssh2 ... |
2020-02-10 23:06:48 |
| 106.13.55.5 | attackspam | Jan 31 12:23:53 sd-53420 sshd\[22969\]: Invalid user sajay from 106.13.55.5 Jan 31 12:23:53 sd-53420 sshd\[22969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5 Jan 31 12:23:55 sd-53420 sshd\[22969\]: Failed password for invalid user sajay from 106.13.55.5 port 36832 ssh2 Jan 31 12:26:59 sd-53420 sshd\[23283\]: Invalid user project from 106.13.55.5 Jan 31 12:26:59 sd-53420 sshd\[23283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5 ... |
2020-01-31 19:37:28 |
| 106.13.55.5 | attackspambots | Unauthorized connection attempt detected from IP address 106.13.55.5 to port 2220 [J] |
2020-01-27 08:59:32 |
| 106.13.55.24 | attack | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-22 01:42:52 |
| 106.13.55.24 | attack | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-20 17:40:50 |
| 106.13.55.24 | attackspam | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-19 21:37:54 |
| 106.13.55.24 | attackspam | Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J] |
2020-01-04 21:06:08 |
| 106.13.55.24 | attackbots | Jan 3 01:23:34 ws22vmsma01 sshd[190945]: Failed password for root from 106.13.55.24 port 51000 ssh2 ... |
2020-01-03 19:59:38 |
| 106.13.55.24 | attackbots | Invalid user lilian from 106.13.55.24 port 60164 |
2019-12-28 22:15:15 |
| 106.13.55.170 | attackspam | Invalid user delchini from 106.13.55.170 port 42876 |
2019-12-27 20:28:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.55.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23337
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.55.50. IN A
;; AUTHORITY SECTION:
. 417 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030902 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 03:34:53 CST 2020
;; MSG SIZE rcvd: 116Host 50.55.13.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 50.55.13.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 76.30.48.210 | attackspambots | 2020-08-17T15:13:33.951313srv.ecualinux.com sshd[19093]: Invalid user netscreen from 76.30.48.210 port 48794 2020-08-17T15:13:34.010692srv.ecualinux.com sshd[19093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-30-48-210.hsd1.tx.comcast.net 2020-08-17T15:13:33.951313srv.ecualinux.com sshd[19093]: Invalid user netscreen from 76.30.48.210 port 48794 2020-08-17T15:13:36.360447srv.ecualinux.com sshd[19093]: Failed password for invalid user netscreen from 76.30.48.210 port 48794 ssh2 2020-08-17T15:13:36.763336srv.ecualinux.com sshd[19097]: Invalid user nexthink from 76.30.48.210 port 50096 2020-08-17T15:13:36.823860srv.ecualinux.com sshd[19097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-30-48-210.hsd1.tx.comcast.net 2020-08-17T15:13:36.763336srv.ecualinux.com sshd[19097]: Invalid user nexthink from 76.30.48.210 port 50096 2020-08-17T15:13:38.448104srv.ecualinux.com sshd[19097]: ........ ------------------------------ |
2020-08-18 06:14:50 |
| 122.51.254.9 | attackbots | Automatic Fail2ban report - Trying login SSH |
2020-08-18 06:22:27 |
| 222.186.15.158 | attackspam | 2020-08-17T21:52:02.614020abusebot-6.cloudsearch.cf sshd[32583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root 2020-08-17T21:52:05.364288abusebot-6.cloudsearch.cf sshd[32583]: Failed password for root from 222.186.15.158 port 33058 ssh2 2020-08-17T21:52:07.405959abusebot-6.cloudsearch.cf sshd[32583]: Failed password for root from 222.186.15.158 port 33058 ssh2 2020-08-17T21:52:02.614020abusebot-6.cloudsearch.cf sshd[32583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root 2020-08-17T21:52:05.364288abusebot-6.cloudsearch.cf sshd[32583]: Failed password for root from 222.186.15.158 port 33058 ssh2 2020-08-17T21:52:07.405959abusebot-6.cloudsearch.cf sshd[32583]: Failed password for root from 222.186.15.158 port 33058 ssh2 2020-08-17T21:52:02.614020abusebot-6.cloudsearch.cf sshd[32583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss ... |
2020-08-18 05:58:34 |
| 179.49.20.50 | attack | Aug 17 08:34:44 uapps sshd[24866]: Invalid user candice from 179.49.20.50 port 50470 Aug 17 08:34:46 uapps sshd[24866]: Failed password for invalid user candice from 179.49.20.50 port 50470 ssh2 Aug 17 08:34:48 uapps sshd[24866]: Received disconnect from 179.49.20.50 port 50470:11: Bye Bye [preauth] Aug 17 08:34:48 uapps sshd[24866]: Disconnected from invalid user candice 179.49.20.50 port 50470 [preauth] Aug 17 09:02:53 uapps sshd[25374]: Invalid user ky from 179.49.20.50 port 35296 Aug 17 09:02:55 uapps sshd[25374]: Failed password for invalid user ky from 179.49.20.50 port 35296 ssh2 Aug 17 09:02:55 uapps sshd[25374]: Received disconnect from 179.49.20.50 port 35296:11: Bye Bye [preauth] Aug 17 09:02:55 uapps sshd[25374]: Disconnected from invalid user ky 179.49.20.50 port 35296 [preauth] Aug 17 09:08:52 uapps sshd[25393]: Invalid user lsx from 179.49.20.50 port 55890 Aug 17 09:08:54 uapps sshd[25393]: Failed password for invalid user lsx from 179.49.20.50 port 55890........ ------------------------------- |
2020-08-18 06:06:04 |
| 193.228.91.123 | attackbots | Aug 18 00:43:54 server2 sshd\[3538\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers Aug 18 00:44:16 server2 sshd\[3576\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers Aug 18 00:44:38 server2 sshd\[3578\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers Aug 18 00:45:00 server2 sshd\[3583\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers Aug 18 00:45:23 server2 sshd\[3793\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers Aug 18 00:45:46 server2 sshd\[3806\]: User root from 193.228.91.123 not allowed because not listed in AllowUsers |
2020-08-18 05:49:38 |
| 112.85.42.195 | attackspambots | Aug 17 21:37:04 game-panel sshd[17737]: Failed password for root from 112.85.42.195 port 21454 ssh2 Aug 17 21:37:07 game-panel sshd[17737]: Failed password for root from 112.85.42.195 port 21454 ssh2 Aug 17 21:37:09 game-panel sshd[17737]: Failed password for root from 112.85.42.195 port 21454 ssh2 |
2020-08-18 05:53:07 |
| 125.161.83.7 | attack | Unauthorised access (Aug 18) SRC=125.161.83.7 LEN=52 TOS=0x10 PREC=0x40 TTL=116 ID=15666 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-18 06:09:33 |
| 45.120.5.202 | attack | Wordpress login attempts |
2020-08-18 06:06:55 |
| 152.136.114.118 | attack | Aug 17 22:26:43 haigwepa sshd[21507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.114.118 Aug 17 22:26:45 haigwepa sshd[21507]: Failed password for invalid user etserver from 152.136.114.118 port 47058 ssh2 ... |
2020-08-18 05:50:36 |
| 218.149.128.186 | attackspam | Aug 17 22:58:25 meumeu sshd[863979]: Invalid user basesystem from 218.149.128.186 port 35530 Aug 17 22:58:25 meumeu sshd[863979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.149.128.186 Aug 17 22:58:25 meumeu sshd[863979]: Invalid user basesystem from 218.149.128.186 port 35530 Aug 17 22:58:27 meumeu sshd[863979]: Failed password for invalid user basesystem from 218.149.128.186 port 35530 ssh2 Aug 17 23:03:30 meumeu sshd[864157]: Invalid user zs from 218.149.128.186 port 40684 Aug 17 23:03:30 meumeu sshd[864157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.149.128.186 Aug 17 23:03:30 meumeu sshd[864157]: Invalid user zs from 218.149.128.186 port 40684 Aug 17 23:03:32 meumeu sshd[864157]: Failed password for invalid user zs from 218.149.128.186 port 40684 ssh2 Aug 17 23:06:06 meumeu sshd[864366]: Invalid user eric from 218.149.128.186 port 33112 ... |
2020-08-18 05:52:16 |
| 146.0.36.19 | attack | C***K.COM Registration Termination Reminder |
2020-08-18 05:51:24 |
| 138.97.23.190 | attackspam | 2020-08-18T05:01:30.511619billing sshd[24790]: Invalid user ywq from 138.97.23.190 port 56240 2020-08-18T05:01:32.925134billing sshd[24790]: Failed password for invalid user ywq from 138.97.23.190 port 56240 ssh2 2020-08-18T05:08:55.039070billing sshd[8683]: Invalid user steam from 138.97.23.190 port 36908 ... |
2020-08-18 06:09:14 |
| 106.15.197.185 | attackspam | Aug 17 21:40:28 debian-4gb-nbg1-mysql sshd[25642]: Invalid user admin from 106.15.197.185 port 38842 Aug 17 21:40:29 debian-4gb-nbg1-mysql sshd[25642]: Failed password for invalid user admin from 106.15.197.185 port 38842 ssh2 Aug 17 21:45:27 debian-4gb-nbg1-mysql sshd[26041]: Invalid user venom from 106.15.197.185 port 48930 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.15.197.185 |
2020-08-18 06:25:05 |
| 203.172.66.227 | attackbots | Bruteforce detected by fail2ban |
2020-08-18 05:50:49 |
| 144.34.248.219 | attackbotsspam | Aug 17 22:19:02 ns382633 sshd\[22923\]: Invalid user aakash from 144.34.248.219 port 57142 Aug 17 22:19:02 ns382633 sshd\[22923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.248.219 Aug 17 22:19:04 ns382633 sshd\[22923\]: Failed password for invalid user aakash from 144.34.248.219 port 57142 ssh2 Aug 17 22:43:55 ns382633 sshd\[27044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.248.219 user=root Aug 17 22:43:57 ns382633 sshd\[27044\]: Failed password for root from 144.34.248.219 port 37598 ssh2 |
2020-08-18 05:58:47 |