106.13.78.120 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Apr 16 20:34:01 *** sshd[6808]: Invalid user jl from 106.13.78.120	2020-04-17 07:20:54
attack	2020-04-11T06:42:28.587533ionos.janbro.de sshd[98506]: Invalid user htanabe from 106.13.78.120 port 44208 2020-04-11T06:42:29.653158ionos.janbro.de sshd[98506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 2020-04-11T06:42:28.587533ionos.janbro.de sshd[98506]: Invalid user htanabe from 106.13.78.120 port 44208 2020-04-11T06:42:31.646861ionos.janbro.de sshd[98506]: Failed password for invalid user htanabe from 106.13.78.120 port 44208 ssh2 2020-04-11T06:46:25.710077ionos.janbro.de sshd[98547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 user=root 2020-04-11T06:46:27.057571ionos.janbro.de sshd[98547]: Failed password for root from 106.13.78.120 port 40590 ssh2 2020-04-11T06:50:27.742606ionos.janbro.de sshd[98552]: Invalid user luca from 106.13.78.120 port 36968 2020-04-11T06:50:27.903183ionos.janbro.de sshd[98552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...	2020-04-11 15:33:04
attackbotsspam	Apr 3 17:07:02 hell sshd[21731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 Apr 3 17:07:04 hell sshd[21731]: Failed password for invalid user t7adm from 106.13.78.120 port 34686 ssh2 ...	2020-04-04 01:33:02
attackspambots	(sshd) Failed SSH login from 106.13.78.120 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 18 23:09:07 amsweb01 sshd[14655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 user=root Mar 18 23:09:09 amsweb01 sshd[14655]: Failed password for root from 106.13.78.120 port 56796 ssh2 Mar 18 23:13:32 amsweb01 sshd[15077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 user=root Mar 18 23:13:34 amsweb01 sshd[15077]: Failed password for root from 106.13.78.120 port 52422 ssh2 Mar 18 23:15:46 amsweb01 sshd[15455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.120 user=root	2020-03-19 06:35:01

Comments on same subnet:

IP	Type	Details	Datetime
106.13.78.210	attackspam	Invalid user pozvizd from 106.13.78.210 port 39564	2020-10-13 13:59:43
106.13.78.210	attackbots	Oct 13 00:27:21 eventyay sshd[1551]: Failed password for root from 106.13.78.210 port 36368 ssh2 Oct 13 00:30:37 eventyay sshd[1680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 Oct 13 00:30:39 eventyay sshd[1680]: Failed password for invalid user zy from 106.13.78.210 port 33060 ssh2 ...	2020-10-13 06:44:08
106.13.78.210	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-12 01:27:38
106.13.78.210	attackbotsspam	Oct 7 22:52:29 buvik sshd[984]: Failed password for root from 106.13.78.210 port 46792 ssh2 Oct 7 22:54:52 buvik sshd[1344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 user=root Oct 7 22:54:55 buvik sshd[1344]: Failed password for root from 106.13.78.210 port 56786 ssh2 ...	2020-10-08 06:11:04
106.13.78.210	attackbotsspam	Oct 7 13:41:58 Server sshd[688713]: Failed password for root from 106.13.78.210 port 37416 ssh2 Oct 7 13:44:01 Server sshd[689683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 user=root Oct 7 13:44:03 Server sshd[689683]: Failed password for root from 106.13.78.210 port 35462 ssh2 Oct 7 13:46:09 Server sshd[690587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 user=root Oct 7 13:46:11 Server sshd[690587]: Failed password for root from 106.13.78.210 port 33514 ssh2 ...	2020-10-07 22:30:41
106.13.78.210	attack	prod8 ...	2020-10-07 14:31:43
106.13.78.210	attack	$f2bV_matches	2020-10-07 04:14:29
106.13.78.210	attackspambots	Invalid user user from 106.13.78.210 port 41994	2020-10-06 20:18:01
106.13.78.210	attack	Invalid user tortoisesvn from 106.13.78.210 port 45430	2020-09-15 19:59:28
106.13.78.210	attack	Sep 15 03:51:44 roki-contabo sshd\[13296\]: Invalid user ts from 106.13.78.210 Sep 15 03:51:44 roki-contabo sshd\[13296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 Sep 15 03:51:46 roki-contabo sshd\[13296\]: Failed password for invalid user ts from 106.13.78.210 port 58110 ssh2 Sep 15 03:56:56 roki-contabo sshd\[13325\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.210 user=root Sep 15 03:56:57 roki-contabo sshd\[13325\]: Failed password for root from 106.13.78.210 port 53784 ssh2 ...	2020-09-15 12:03:57
106.13.78.210	attack	$f2bV_matches	2020-09-15 04:10:20
106.13.78.198	attack	Bruteforce detected by fail2ban	2020-08-23 02:05:22
106.13.78.198	attack	Aug 20 08:33:26 h2646465 sshd[20166]: Invalid user oracle from 106.13.78.198 Aug 20 08:33:26 h2646465 sshd[20166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 Aug 20 08:33:26 h2646465 sshd[20166]: Invalid user oracle from 106.13.78.198 Aug 20 08:33:28 h2646465 sshd[20166]: Failed password for invalid user oracle from 106.13.78.198 port 48150 ssh2 Aug 20 08:45:20 h2646465 sshd[21979]: Invalid user admin from 106.13.78.198 Aug 20 08:45:20 h2646465 sshd[21979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 Aug 20 08:45:20 h2646465 sshd[21979]: Invalid user admin from 106.13.78.198 Aug 20 08:45:22 h2646465 sshd[21979]: Failed password for invalid user admin from 106.13.78.198 port 56706 ssh2 Aug 20 08:47:40 h2646465 sshd[22054]: Invalid user cwt from 106.13.78.198 ...	2020-08-20 15:14:59
106.13.78.198	attackbots	2020-08-02T22:12:59.071977shield sshd\[1723\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root 2020-08-02T22:13:00.490726shield sshd\[1723\]: Failed password for root from 106.13.78.198 port 40342 ssh2 2020-08-02T22:17:01.766000shield sshd\[2367\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root 2020-08-02T22:17:03.741725shield sshd\[2367\]: Failed password for root from 106.13.78.198 port 48466 ssh2 2020-08-02T22:21:08.216266shield sshd\[2757\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.198 user=root	2020-08-03 08:30:17
106.13.78.143	attack	Aug 2 02:39:36 php1 sshd\[23713\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.143 user=root Aug 2 02:39:38 php1 sshd\[23713\]: Failed password for root from 106.13.78.143 port 52326 ssh2 Aug 2 02:42:09 php1 sshd\[23882\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.143 user=root Aug 2 02:42:11 php1 sshd\[23882\]: Failed password for root from 106.13.78.143 port 55040 ssh2 Aug 2 02:44:50 php1 sshd\[24072\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.78.143 user=root	2020-08-02 20:57:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.78.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35675
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.78.120.			IN	A

;; AUTHORITY SECTION:
.			284	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031801 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 06:34:58 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 120.78.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 120.78.13.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
134.209.90.139	attack	Sep 5 21:20:44 php2 sshd\[8665\]: Invalid user qwerty from 134.209.90.139 Sep 5 21:20:44 php2 sshd\[8665\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.139 Sep 5 21:20:46 php2 sshd\[8665\]: Failed password for invalid user qwerty from 134.209.90.139 port 48200 ssh2 Sep 5 21:25:08 php2 sshd\[8984\]: Invalid user pass from 134.209.90.139 Sep 5 21:25:08 php2 sshd\[8984\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.139	2019-09-06 16:37:12
51.91.212.79	attackspam	Port scan: Attack repeated for 24 hours	2019-09-06 16:44:18
138.68.165.102	attackbots	Sep 5 21:53:20 web9 sshd\[12035\]: Invalid user steam from 138.68.165.102 Sep 5 21:53:20 web9 sshd\[12035\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.165.102 Sep 5 21:53:22 web9 sshd\[12035\]: Failed password for invalid user steam from 138.68.165.102 port 58690 ssh2 Sep 5 21:57:37 web9 sshd\[12765\]: Invalid user postgres from 138.68.165.102 Sep 5 21:57:37 web9 sshd\[12765\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.165.102	2019-09-06 16:29:21
5.196.29.194	attack	Sep 6 06:53:16 www5 sshd\[57794\]: Invalid user mcadmin from 5.196.29.194 Sep 6 06:53:16 www5 sshd\[57794\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.29.194 Sep 6 06:53:18 www5 sshd\[57794\]: Failed password for invalid user mcadmin from 5.196.29.194 port 60316 ssh2 ...	2019-09-06 16:50:15
92.177.197.60	attackbotsspam	Aug 12 14:00:06 Server10 sshd[7196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.177.197.60 user=root Aug 12 14:00:09 Server10 sshd[7196]: Failed password for invalid user root from 92.177.197.60 port 40340 ssh2	2019-09-06 16:40:54
202.51.110.214	attackspam	2019-09-06T14:57:45.766001enmeeting.mahidol.ac.th sshd\[5826\]: Invalid user dbadmin from 202.51.110.214 port 45158 2019-09-06T14:57:45.780517enmeeting.mahidol.ac.th sshd\[5826\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.110.214 2019-09-06T14:57:48.452326enmeeting.mahidol.ac.th sshd\[5826\]: Failed password for invalid user dbadmin from 202.51.110.214 port 45158 ssh2 ...	2019-09-06 16:51:17
23.25.96.205	attackbotsspam	Automatic report - Banned IP Access	2019-09-06 16:45:25
68.183.48.172	attackspam	Jul 18 12:45:48 microserver sshd[49253]: Invalid user prueba1 from 68.183.48.172 port 46659 Jul 18 12:45:48 microserver sshd[49253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 Jul 18 12:45:50 microserver sshd[49253]: Failed password for invalid user prueba1 from 68.183.48.172 port 46659 ssh2 Jul 18 12:52:32 microserver sshd[50016]: Invalid user operador from 68.183.48.172 port 45475 Jul 18 12:52:32 microserver sshd[50016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 Jul 18 13:05:40 microserver sshd[52099]: Invalid user dylan from 68.183.48.172 port 43108 Jul 18 13:05:40 microserver sshd[52099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 Jul 18 13:05:42 microserver sshd[52099]: Failed password for invalid user dylan from 68.183.48.172 port 43108 ssh2 Jul 18 13:12:26 microserver sshd[52984]: Invalid user cc from 68.183.48.172 port 41927 J	2019-09-06 16:46:26
165.227.84.27	attack	SASL Brute Force	2019-09-06 16:22:53
75.143.100.75	attack	2019-09-06T04:53:24.024964beta postfix/smtpd[12327]: NOQUEUE: reject: RCPT from 75-143-100-75.dhcp.aubn.al.charter.com[75.143.100.75]: 554 5.7.1 Service unavailable; Client host [75.143.100.75] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/75.143.100.75; from= to= proto=ESMTP helo=<75-143-100-75.dhcp.aubn.al.charter.com> ...	2019-09-06 16:47:58
189.254.140.210	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-06 03:38:33,533 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.254.140.210)	2019-09-06 16:11:30
36.71.232.227	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-06 03:36:02,198 INFO [amun_request_handler] PortScan Detected on Port: 445 (36.71.232.227)	2019-09-06 16:19:27
193.201.224.199	attackspam	Sep 6 04:04:16 XXX sshd[53345]: Invalid user admin from 193.201.224.199 port 53959	2019-09-06 16:58:13
165.22.156.5	attack	Sep 6 04:40:25 xtremcommunity sshd\[3369\]: Invalid user webuser from 165.22.156.5 port 40076 Sep 6 04:40:25 xtremcommunity sshd\[3369\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.156.5 Sep 6 04:40:27 xtremcommunity sshd\[3369\]: Failed password for invalid user webuser from 165.22.156.5 port 40076 ssh2 Sep 6 04:45:03 xtremcommunity sshd\[3539\]: Invalid user user from 165.22.156.5 port 55668 Sep 6 04:45:03 xtremcommunity sshd\[3539\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.156.5 ...	2019-09-06 16:52:11
79.137.35.70	attackbotsspam	$f2bV_matches	2019-09-06 16:30:52

Recently Reported IPs

14.177.161.37	24.179.233.228	125.194.13.178	103.88.127.197
12.252.136.29	2.91.207.194	54.250.54.33	187.114.212.197
38.112.26.144	105.157.242.73	67.43.138.33	168.223.9.20
188.227.195.19	181.152.31.166	41.0.94.36	83.153.85.79
179.13.101.102	77.248.10.16	46.211.113.68	82.11.172.182