Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 106.13.66.134 to port 2004
2019-12-31 02:37:19
Comments on same subnet:
IP Type Details Datetime
106.13.66.103 attack
Aug 21 08:19:36 pixelmemory sshd[2516658]: Invalid user rosa from 106.13.66.103 port 57960
Aug 21 08:19:36 pixelmemory sshd[2516658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 
Aug 21 08:19:36 pixelmemory sshd[2516658]: Invalid user rosa from 106.13.66.103 port 57960
Aug 21 08:19:38 pixelmemory sshd[2516658]: Failed password for invalid user rosa from 106.13.66.103 port 57960 ssh2
Aug 21 08:23:17 pixelmemory sshd[2523039]: Invalid user user2 from 106.13.66.103 port 36144
...
2020-08-21 23:31:38
106.13.66.103 attackbotsspam
Aug 15 20:15:46 firewall sshd[23813]: Failed password for root from 106.13.66.103 port 34498 ssh2
Aug 15 20:19:58 firewall sshd[24035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
Aug 15 20:19:59 firewall sshd[24035]: Failed password for root from 106.13.66.103 port 42484 ssh2
...
2020-08-16 07:37:20
106.13.66.103 attackbots
Aug 13 02:14:30 journals sshd\[21031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
Aug 13 02:14:33 journals sshd\[21031\]: Failed password for root from 106.13.66.103 port 53440 ssh2
Aug 13 02:18:49 journals sshd\[21409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
Aug 13 02:18:51 journals sshd\[21409\]: Failed password for root from 106.13.66.103 port 59618 ssh2
Aug 13 02:23:18 journals sshd\[21840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
...
2020-08-13 07:44:12
106.13.66.103 attack
Aug  9 10:00:52 ns381471 sshd[32353]: Failed password for root from 106.13.66.103 port 36034 ssh2
2020-08-09 17:14:09
106.13.66.103 attack
SSH bruteforce
2020-08-06 16:26:54
106.13.66.103 attackbots
Aug  4 07:51:16 ny01 sshd[14010]: Failed password for root from 106.13.66.103 port 47510 ssh2
Aug  4 07:54:01 ny01 sshd[14339]: Failed password for root from 106.13.66.103 port 50162 ssh2
2020-08-04 20:19:50
106.13.66.103 attackbotsspam
5x Failed Password
2020-07-12 23:56:54
106.13.66.103 attack
Jun 28 11:48:43 ws26vmsma01 sshd[32293]: Failed password for root from 106.13.66.103 port 53740 ssh2
Jun 28 12:10:45 ws26vmsma01 sshd[72434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
...
2020-06-29 00:46:47
106.13.66.103 attackbotsspam
Jun 21 07:56:26 jane sshd[24774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 
Jun 21 07:56:28 jane sshd[24774]: Failed password for invalid user j from 106.13.66.103 port 38220 ssh2
...
2020-06-21 15:09:07
106.13.66.103 attack
Jun 17 08:27:10 server sshd[7781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
Jun 17 08:27:12 server sshd[7781]: Failed password for invalid user arun from 106.13.66.103 port 51574 ssh2
Jun 17 08:31:05 server sshd[8079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
...
2020-06-17 16:36:13
106.13.66.103 attackbots
Jun 12 01:20:19 php1 sshd\[10798\]: Invalid user idcisp from 106.13.66.103
Jun 12 01:20:19 php1 sshd\[10798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
Jun 12 01:20:21 php1 sshd\[10798\]: Failed password for invalid user idcisp from 106.13.66.103 port 41836 ssh2
Jun 12 01:24:31 php1 sshd\[11133\]: Invalid user admin from 106.13.66.103
Jun 12 01:24:31 php1 sshd\[11133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
2020-06-12 19:26:41
106.13.66.103 attackbots
Jun 11 19:32:40 ArkNodeAT sshd\[25423\]: Invalid user margarito from 106.13.66.103
Jun 11 19:32:40 ArkNodeAT sshd\[25423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
Jun 11 19:32:43 ArkNodeAT sshd\[25423\]: Failed password for invalid user margarito from 106.13.66.103 port 45780 ssh2
2020-06-12 03:53:16
106.13.66.103 attackbots
Jun  6 23:54:35 home sshd[4318]: Failed password for root from 106.13.66.103 port 51654 ssh2
Jun  6 23:58:03 home sshd[4731]: Failed password for root from 106.13.66.103 port 50930 ssh2
...
2020-06-07 07:16:45
106.13.66.103 attackspam
Jun  4 01:53:18 mout sshd[21623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
Jun  4 01:53:20 mout sshd[21623]: Failed password for root from 106.13.66.103 port 48216 ssh2
2020-06-04 07:55:27
106.13.66.103 attack
May 30 14:20:28 ns392434 sshd[26504]: Invalid user ftpd from 106.13.66.103 port 40912
May 30 14:20:28 ns392434 sshd[26504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103
May 30 14:20:28 ns392434 sshd[26504]: Invalid user ftpd from 106.13.66.103 port 40912
May 30 14:20:30 ns392434 sshd[26504]: Failed password for invalid user ftpd from 106.13.66.103 port 40912 ssh2
May 30 14:28:44 ns392434 sshd[26673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
May 30 14:28:46 ns392434 sshd[26673]: Failed password for root from 106.13.66.103 port 44352 ssh2
May 30 14:33:01 ns392434 sshd[26734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103  user=root
May 30 14:33:03 ns392434 sshd[26734]: Failed password for root from 106.13.66.103 port 42708 ssh2
May 30 14:37:23 ns392434 sshd[26817]: Invalid user jean from 106.13.66.103 port 41058
2020-05-31 00:04:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.66.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.66.134.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 02:37:16 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 134.66.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.66.13.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.195.0.190 attackbotsspam
postfix (unknown user, SPF fail or relay access denied)
2020-09-15 01:37:17
112.133.246.84 attackbotsspam
Fail2Ban Ban Triggered
2020-09-15 01:01:58
62.215.6.11 attack
Sep 14 15:38:23  sshd\[16140\]: User root from out02-tec.fasttelco.net not allowed because not listed in AllowUsersSep 14 15:38:25  sshd\[16140\]: Failed password for invalid user root from 62.215.6.11 port 47777 ssh2
...
2020-09-15 01:36:55
140.143.134.171 attackspam
Sep 14 18:58:02 santamaria sshd\[23037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.134.171  user=root
Sep 14 18:58:04 santamaria sshd\[23037\]: Failed password for root from 140.143.134.171 port 34152 ssh2
Sep 14 19:04:48 santamaria sshd\[23096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.134.171  user=root
...
2020-09-15 01:12:54
179.210.134.44 attackspambots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-14T12:20:02Z and 2020-09-14T12:41:19Z
2020-09-15 01:10:42
216.218.206.69 attackspambots
Fail2Ban Ban Triggered
2020-09-15 01:10:57
80.110.104.195 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-15 01:02:24
64.225.1.4 attackbotsspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-15 01:03:04
115.152.253.35 attackspambots
 TCP (SYN) 115.152.253.35:13936 -> port 1433, len 48
2020-09-15 01:21:08
64.225.25.59 attackspambots
$f2bV_matches
2020-09-15 01:30:13
218.75.110.51 attackbotsspam
Sep 14 16:21:54 db sshd[22561]: User root from 218.75.110.51 not allowed because none of user's groups are listed in AllowGroups
...
2020-09-15 01:34:53
94.183.31.11 attackspambots
Sep 15 02:53:30 localhost sshd[141873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.183.31.11  user=root
Sep 15 02:53:32 localhost sshd[141873]: Failed password for root from 94.183.31.11 port 42078 ssh2
...
2020-09-15 01:29:50
207.177.109.182 attackspam
Sep 13 12:53:41 aragorn sshd[12266]: Invalid user admin from 207.177.109.182
Sep 13 12:53:42 aragorn sshd[12268]: Invalid user admin from 207.177.109.182
Sep 13 12:53:42 aragorn sshd[12270]: Invalid user admin from 207.177.109.182
Sep 13 12:53:43 aragorn sshd[12272]: Invalid user admin from 207.177.109.182
...
2020-09-15 01:17:14
72.186.160.136 attackspam
20/9/13@12:53:48: FAIL: Alarm-Intrusion address from=72.186.160.136
...
2020-09-15 01:13:46
167.248.133.35 attackbotsspam
2020-09-14T11:31:18.675751morrigan.ad5gb.com dovecot[1235740]: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=167.248.133.35, lip=51.81.135.67, TLS: Connection closed, session=
2020-09-15 01:25:42

Recently Reported IPs

244.45.63.207 42.119.196.100 106.135.53.122 9.144.187.162
204.191.79.201 246.78.252.236 42.114.209.134 227.116.40.29
108.64.136.128 32.21.87.183 150.19.53.211 69.255.99.98
36.153.182.162 27.147.40.217 27.2.70.69 14.204.104.31
14.4.157.153 1.53.224.77 1.53.68.149 223.97.183.8