Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 106.13.57.239 to port 2220 [J]
2020-01-07 16:07:43
attackspambots
2019-12-20T01:21:56.731078ns547587 sshd\[7233\]: Invalid user versace from 106.13.57.239 port 38360
2019-12-20T01:21:56.736615ns547587 sshd\[7233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
2019-12-20T01:21:58.762027ns547587 sshd\[7233\]: Failed password for invalid user versace from 106.13.57.239 port 38360 ssh2
2019-12-20T01:29:31.305687ns547587 sshd\[18810\]: Invalid user helen from 106.13.57.239 port 58390
...
2019-12-20 15:44:15
attackspambots
Dec  4 18:00:21 mail sshd\[8224\]: Invalid user lk from 106.13.57.239
Dec  4 18:00:21 mail sshd\[8224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Dec  4 18:00:23 mail sshd\[8224\]: Failed password for invalid user lk from 106.13.57.239 port 54988 ssh2
...
2019-12-05 01:50:39
attackspambots
Nov 29 17:49:13 server sshd\[25958\]: Invalid user hihath from 106.13.57.239 port 44980
Nov 29 17:49:13 server sshd\[25958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Nov 29 17:49:15 server sshd\[25958\]: Failed password for invalid user hihath from 106.13.57.239 port 44980 ssh2
Nov 29 17:52:59 server sshd\[27158\]: Invalid user mesavage from 106.13.57.239 port 43146
Nov 29 17:52:59 server sshd\[27158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
2019-11-29 23:59:44
attackbots
Nov 29 09:22:13 server sshd\[27021\]: Invalid user f090 from 106.13.57.239
Nov 29 09:22:13 server sshd\[27021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239 
Nov 29 09:22:15 server sshd\[27021\]: Failed password for invalid user f090 from 106.13.57.239 port 52722 ssh2
Nov 29 09:29:20 server sshd\[28616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239  user=root
Nov 29 09:29:22 server sshd\[28616\]: Failed password for root from 106.13.57.239 port 58108 ssh2
...
2019-11-29 15:28:33
attackspam
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: Invalid user !@#$%^abcdefg from 106.13.57.239
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Nov  9 11:51:32 srv-ubuntu-dev3 sshd[11625]: Invalid user !@#$%^abcdefg from 106.13.57.239
Nov  9 11:51:34 srv-ubuntu-dev3 sshd[11625]: Failed password for invalid user !@#$%^abcdefg from 106.13.57.239 port 36646 ssh2
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: Invalid user tomcat2 from 106.13.57.239
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.239
Nov  9 11:56:28 srv-ubuntu-dev3 sshd[11983]: Invalid user tomcat2 from 106.13.57.239
Nov  9 11:56:30 srv-ubuntu-dev3 sshd[11983]: Failed password for invalid user tomcat2 from 106.13.57.239 port 43832 ssh2
Nov  9 12:01:24 srv-ubuntu-dev3 sshd[12320]: Invalid user Qadmin*963 from 106.13.57.239
...
2019-11-09 19:54:30
Comments on same subnet:
IP Type Details Datetime
106.13.57.178 attackspam
1596976400 - 08/09/2020 14:33:20 Host: 106.13.57.178/106.13.57.178 Port: 493 TCP Blocked
...
2020-08-09 21:01:07
106.13.57.178 attackspam
Jun 11 14:48:57 lnxmysql61 sshd[31356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
Jun 11 14:48:57 lnxmysql61 sshd[31356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
2020-06-12 01:35:28
106.13.57.178 attackspambots
Brute-Force,SSH
2020-06-03 02:20:15
106.13.57.178 attackbotsspam
2020-05-26T17:41:59.854818  sshd[24582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
2020-05-26T17:41:59.839931  sshd[24582]: Invalid user test4 from 106.13.57.178 port 38454
2020-05-26T17:42:01.991608  sshd[24582]: Failed password for invalid user test4 from 106.13.57.178 port 38454 ssh2
2020-05-26T19:43:38.438074  sshd[27588]: Invalid user guimond from 106.13.57.178 port 33032
...
2020-05-27 03:01:57
106.13.57.117 attackbotsspam
2020-05-26T07:26:20.053841abusebot.cloudsearch.cf sshd[15692]: Invalid user guest from 106.13.57.117 port 41798
2020-05-26T07:26:20.058064abusebot.cloudsearch.cf sshd[15692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.117
2020-05-26T07:26:20.053841abusebot.cloudsearch.cf sshd[15692]: Invalid user guest from 106.13.57.117 port 41798
2020-05-26T07:26:22.213200abusebot.cloudsearch.cf sshd[15692]: Failed password for invalid user guest from 106.13.57.117 port 41798 ssh2
2020-05-26T07:28:33.230466abusebot.cloudsearch.cf sshd[15810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.117  user=root
2020-05-26T07:28:35.977864abusebot.cloudsearch.cf sshd[15810]: Failed password for root from 106.13.57.117 port 42450 ssh2
2020-05-26T07:30:50.080164abusebot.cloudsearch.cf sshd[15936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.117  user=root
...
2020-05-26 19:12:46
106.13.57.117 attack
$f2bV_matches
2020-05-14 16:56:23
106.13.57.178 attackbots
odoo8
...
2020-05-11 06:35:02
106.13.57.117 attack
2020-04-16T07:03:08.161647-07:00 suse-nuc sshd[24772]: Invalid user postgres from 106.13.57.117 port 52102
...
2020-04-17 02:01:07
106.13.57.117 attackbotsspam
Apr  8 22:34:29 pixelmemory sshd[31345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.117
Apr  8 22:34:30 pixelmemory sshd[31345]: Failed password for invalid user postgres from 106.13.57.117 port 49406 ssh2
Apr  8 22:41:40 pixelmemory sshd[435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.117
...
2020-04-09 15:17:38
106.13.57.55 attackbotsspam
Feb 17 19:05:46 odroid64 sshd\[18640\]: Invalid user test3 from 106.13.57.55
Feb 17 19:05:46 odroid64 sshd\[18640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.55
...
2020-02-18 04:16:33
106.13.57.55 attackspambots
5x Failed Password
2020-02-15 20:32:08
106.13.57.55 attack
Lines containing failures of 106.13.57.55
Feb  5 06:28:36 shared01 sshd[7604]: Invalid user ericmar from 106.13.57.55 port 41862
Feb  5 06:28:36 shared01 sshd[7604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.55
Feb  5 06:28:38 shared01 sshd[7604]: Failed password for invalid user ericmar from 106.13.57.55 port 41862 ssh2
Feb  5 06:28:38 shared01 sshd[7604]: Received disconnect from 106.13.57.55 port 41862:11: Bye Bye [preauth]
Feb  5 06:28:38 shared01 sshd[7604]: Disconnected from invalid user ericmar 106.13.57.55 port 41862 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.57.55
2020-02-07 09:54:47
106.13.57.216 attack
2019-12-11T08:30:07.126703abusebot-2.cloudsearch.cf sshd\[18727\]: Invalid user ignagni from 106.13.57.216 port 45680
2019-12-11 20:10:51
106.13.57.178 attackbots
Dec  4 23:26:33 tdfoods sshd\[21489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178  user=root
Dec  4 23:26:34 tdfoods sshd\[21489\]: Failed password for root from 106.13.57.178 port 38500 ssh2
Dec  4 23:34:16 tdfoods sshd\[22215\]: Invalid user clegg from 106.13.57.178
Dec  4 23:34:16 tdfoods sshd\[22215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
Dec  4 23:34:19 tdfoods sshd\[22215\]: Failed password for invalid user clegg from 106.13.57.178 port 39848 ssh2
2019-12-05 17:38:48
106.13.57.178 attackspam
2019-11-26T17:52:06.225855shield sshd\[3465\]: Invalid user szilard from 106.13.57.178 port 38040
2019-11-26T17:52:06.228942shield sshd\[3465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
2019-11-26T17:52:08.298994shield sshd\[3465\]: Failed password for invalid user szilard from 106.13.57.178 port 38040 ssh2
2019-11-26T17:58:47.854091shield sshd\[5161\]: Invalid user database from 106.13.57.178 port 41674
2019-11-26T17:58:47.858598shield sshd\[5161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178
2019-11-27 02:11:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.57.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58472
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.57.239.			IN	A

;; AUTHORITY SECTION:
.			556	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110900 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 19:54:25 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 239.57.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
** server can't find 239.57.13.106.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
183.203.96.105 attackspam
Dec 18 20:51:42 MK-Soft-VM7 sshd[2532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.203.96.105 
Dec 18 20:51:44 MK-Soft-VM7 sshd[2532]: Failed password for invalid user dubish from 183.203.96.105 port 40738 ssh2
...
2019-12-19 03:53:01
147.135.168.173 attackbotsspam
2019-12-17 23:35:48 server sshd[50075]: Failed password for invalid user root from 147.135.168.173 port 56750 ssh2
2019-12-19 04:22:07
185.142.68.181 attackbotsspam
Unauthorised access (Dec 18) SRC=185.142.68.181 LEN=44 TTL=242 ID=52792 TCP DPT=139 WINDOW=1024 SYN 
Unauthorised access (Dec 17) SRC=185.142.68.181 LEN=44 TTL=242 ID=2302 TCP DPT=139 WINDOW=1024 SYN
2019-12-19 04:02:41
164.132.100.28 attackbots
Dec 19 00:44:56 gw1 sshd[8366]: Failed password for root from 164.132.100.28 port 42892 ssh2
...
2019-12-19 04:03:02
36.90.255.31 attack
Unauthorized connection attempt from IP address 36.90.255.31 on Port 445(SMB)
2019-12-19 03:48:32
192.42.116.22 attackspambots
Dec 18 19:19:07 vpn01 sshd[4459]: Failed password for root from 192.42.116.22 port 44814 ssh2
Dec 18 19:19:10 vpn01 sshd[4459]: Failed password for root from 192.42.116.22 port 44814 ssh2
...
2019-12-19 03:50:03
167.71.214.37 attack
SSH Bruteforce attempt
2019-12-19 03:58:08
79.186.111.71 attackbotsspam
Automatic report - Port Scan Attack
2019-12-19 04:10:34
174.92.198.174 attack
Dec 18 16:14:52 vpn01 sshd[29568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.92.198.174
Dec 18 16:14:54 vpn01 sshd[29568]: Failed password for invalid user admin from 174.92.198.174 port 36290 ssh2
...
2019-12-19 04:01:02
51.75.67.69 attackspambots
Dec 18 20:10:42 v22018076622670303 sshd\[8294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.67.69  user=backup
Dec 18 20:10:45 v22018076622670303 sshd\[8294\]: Failed password for backup from 51.75.67.69 port 47444 ssh2
Dec 18 20:16:10 v22018076622670303 sshd\[8342\]: Invalid user http from 51.75.67.69 port 59142
Dec 18 20:16:10 v22018076622670303 sshd\[8342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.67.69
...
2019-12-19 04:14:00
211.181.237.30 attack
Unauthorized connection attempt from IP address 211.181.237.30 on Port 445(SMB)
2019-12-19 04:15:20
218.92.0.172 attackspam
Dec 18 20:50:08 ArkNodeAT sshd\[18168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root
Dec 18 20:50:10 ArkNodeAT sshd\[18168\]: Failed password for root from 218.92.0.172 port 29721 ssh2
Dec 18 20:50:14 ArkNodeAT sshd\[18168\]: Failed password for root from 218.92.0.172 port 29721 ssh2
2019-12-19 03:57:38
93.174.89.55 attackspam
Dec 18 17:44:37 localhost postfix/smtpd\[3166\]: warning: unknown\[93.174.89.55\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 18 17:44:43 localhost postfix/smtpd\[3166\]: warning: unknown\[93.174.89.55\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 18 17:44:53 localhost postfix/smtpd\[3166\]: warning: unknown\[93.174.89.55\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 18 17:45:15 localhost postfix/smtpd\[3135\]: warning: unknown\[93.174.89.55\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 18 17:45:21 localhost postfix/smtpd\[3164\]: warning: unknown\[93.174.89.55\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-12-19 03:49:23
37.187.78.170 attackbots
Dec 18 20:36:56 srv01 sshd[22290]: Invalid user flens from 37.187.78.170 port 32024
Dec 18 20:36:56 srv01 sshd[22290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.78.170
Dec 18 20:36:56 srv01 sshd[22290]: Invalid user flens from 37.187.78.170 port 32024
Dec 18 20:36:58 srv01 sshd[22290]: Failed password for invalid user flens from 37.187.78.170 port 32024 ssh2
Dec 18 20:41:40 srv01 sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.78.170  user=root
Dec 18 20:41:43 srv01 sshd[22800]: Failed password for root from 37.187.78.170 port 10573 ssh2
...
2019-12-19 04:19:08
60.48.65.143 attackbots
Dec 18 20:40:58 mail sshd[28476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.65.143 
Dec 18 20:41:00 mail sshd[28476]: Failed password for invalid user teaching from 60.48.65.143 port 21579 ssh2
Dec 18 20:47:14 mail sshd[29490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.65.143
2019-12-19 03:55:55

Recently Reported IPs

5.249.159.139 95.71.144.178 23.236.148.80 175.111.91.36
184.168.27.20 148.72.200.231 73.82.40.231 103.207.11.82
83.142.52.138 1.172.242.173 52.35.136.194 37.44.252.151
77.105.36.251 93.196.250.254 121.16.146.222 23.108.50.143
124.114.128.90 103.211.42.135 198.46.150.2 188.93.231.151