This IP address has been reported a total of
67
times from
64 distinct
sources.
106.13.120.65 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-25T14:49:49.843023+02:00 phishsim sshd[2702637]: Invalid user user from 106.13.120.65 port 4 ...
show more2026-06-25T14:49:49.843023+02:00 phishsim sshd[2702637]: Invalid user user from 106.13.120.65 port 43446
2026-06-25T14:49:52.042604+02:00 phishsim sshd[2702639]: Invalid user user from 106.13.120.65 port 46584
...
show less
2026-06-25T14:28:23.470514+02:00 phishsim sshd[2702020]: Invalid user user from 106.13.120.65 port 3 ...
show more2026-06-25T14:28:23.470514+02:00 phishsim sshd[2702020]: Invalid user user from 106.13.120.65 port 39236
2026-06-25T14:28:25.788614+02:00 phishsim sshd[2702022]: Invalid user user from 106.13.120.65 port 41366
...
show less
Honeypot [fra-de-honeypot]: Unauthorized connection attempt detected on 22/SSH
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Unauthorized connection attempt detected on 22/SSH
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-25T02:26:47.742017+01:00 sv5.ggsrv.de sshd-session[4082972]: Invalid user user from 106.13.1 ...
show more2026-06-25T02:26:47.742017+01:00 sv5.ggsrv.de sshd-session[4082972]: Invalid user user from 106.13.120.65 port 40964
2026-06-25T02:26:48.646129+01:00 sv5.ggsrv.de sshd-session[4082975]: Invalid user user from 106.13.120.65 port 42094
2026-06-25T02:26:49.460025+01:00 sv5.ggsrv.de sshd-session[4083001]: Invalid user user from 106.13.120.65 port 43222
2026-06-25T02:26:50.281857+01:00 sv5.ggsrv.de sshd-session[4083048]: Invalid user user from 106.13.120.65 port 44308
2026-06-25T02:26:51.046403+01:00 sv5.ggsrv.de sshd-session[4083050]: Invalid user user from 106.13.120.65 port 45494
...
show less
Jun 24 23:13:04 vmi174663 sshd[3259958]: Failed password for root from 106.13.120.65 port 57638 ssh2 ...
show moreJun 24 23:13:04 vmi174663 sshd[3259958]: Failed password for root from 106.13.120.65 port 57638 ssh2
Jun 24 23:13:08 vmi174663 sshd[3260001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.65 user=root
Jun 24 23:13:10 vmi174663 sshd[3260001]: Failed password for root from 106.13.120.65 port 36940 ssh2
Jun 24 23:13:12 vmi174663 sshd[3260084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.65 user=root
Jun 24 23:13:14 vmi174663 sshd[3260084]: Failed password for root from 106.13.120.65 port 44822 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-24T21:50:10.397209+02:00 vps sshd[1751847]: Failed password for root from 106.13.120.65 port ...
show more2026-06-24T21:50:10.397209+02:00 vps sshd[1751847]: Failed password for root from 106.13.120.65 port 52920 ssh2
2026-06-24T21:50:13.085831+02:00 vps sshd[1751884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.65 user=root
2026-06-24T21:50:14.982097+02:00 vps sshd[1751884]: Failed password for root from 106.13.120.65 port 34308 ssh2
...
show less
2026-06-24T18:10:37.713166+02:00 router01.sv01.de sshd-session[3277592]: Connection closed by authen ...
show more2026-06-24T18:10:37.713166+02:00 router01.sv01.de sshd-session[3277592]: Connection closed by authenticating user root 106.13.120.65 port 39072 [preauth]
2026-06-24T18:10:38.557823+02:00 router01.sv01.de sshd-session[3277596]: Connection closed by authenticating user root 106.13.120.65 port 39854 [preauth]
2026-06-24T18:10:39.636696+02:00 router01.sv01.de sshd-session[3277600]: Connection closed by authenticating user root 106.13.120.65 port 40596 [preauth]
2026-06-24T18:10:40.448741+02:00 router01.sv01.de sshd-session[3277604]: Connection closed by authenticating user root 106.13.120.65 port 41760 [preauth]
2026-06-24T18:10:42.903680+02:00 router01.sv01.de sshd-session[3277611]: Connection closed by authenticating user root 106.13.120.65 port 42710 [preauth]
show less
Brute-Force
Showing 1 to
15
of 67 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩