This IP address has been reported a total of
32
times from
30 distinct
sources.
106.13.126.89 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-09T02:23:37.205159 arp-hbs-db sshd[1639798]: Failed password for root from 106.13.126.89 por ...
show more2026-07-09T02:23:37.205159 arp-hbs-db sshd[1639798]: Failed password for root from 106.13.126.89 port 42320 ssh2
2026-07-09T02:23:50.893708 arp-hbs-db sshd[1640755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.89 user=root
2026-07-09T02:23:52.657628 arp-hbs-db sshd[1640755]: Failed password for root from 106.13.126.89 port 42104 ssh2
...
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-07-09 02:02:48 | LAST=2026-07-09 02:02:49. Last seen 2026-07-09 02:02:49.
show less
2026-07-09T01:07:21.532157+02:00 matrix-host01.talk.srvfarm.net sshd[177758]: Connection closed by a ...
show more2026-07-09T01:07:21.532157+02:00 matrix-host01.talk.srvfarm.net sshd[177758]: Connection closed by authenticating user root 106.13.126.89 port 48048 [preauth]
2026-07-09T01:07:26.360534+02:00 matrix-host01.talk.srvfarm.net sshd[177822]: Connection closed by authenticating user root 106.13.126.89 port 46732 [preauth]
2026-07-09T01:07:29.352814+02:00 matrix-host01.talk.srvfarm.net sshd[177827]: Connection closed by authenticating user root 106.13.126.89 port 46748 [preauth]
2026-07-09T01:07:31.756543+02:00 matrix-host01.talk.srvfarm.net sshd[177832]: Connection closed by authenticating user root 106.13.126.89 port 46764 [preauth]
2026-07-09T01:07:34.798128+02:00 matrix-host01.talk.srvfarm.net sshd[177836]: Connection closed by authenticating user root 106.13.126.89 port 39320 [preauth]
show less
Brute-Force
Anonymous
2026-07-08T22:18:44.567141+00:00 nbg01-02-mail sshd[54189]: Failed password for root from 106.13.126 ...
show more2026-07-08T22:18:44.567141+00:00 nbg01-02-mail sshd[54189]: Failed password for root from 106.13.126.89 port 59942 ssh2
2026-07-08T22:34:53.412432+00:00 nbg01-02-mail sshd[54258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.89 user=root
2026-07-08T22:34:55.008403+00:00 nbg01-02-mail sshd[54258]: Failed password for root from 106.13.126.89 port 36504 ssh2
...
show less
2026-07-08T08:11:06.245548+00:00 edge-con-sin01.int.pdx.net.uk sshd[1425719]: Failed password for ro ...
show more2026-07-08T08:11:06.245548+00:00 edge-con-sin01.int.pdx.net.uk sshd[1425719]: Failed password for root from 106.13.126.89 port 36694 ssh2
2026-07-08T08:11:17.632739+00:00 edge-con-sin01.int.pdx.net.uk sshd[1425854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.89 user=root
2026-07-08T08:11:19.327130+00:00 edge-con-sin01.int.pdx.net.uk sshd[1425854]: Failed password for root from 106.13.126.89 port 55676 ssh2
...
show less
2026-07-08T03:41:20.696158+02:00 router01.dreibaeumen.de sshd[1975265]: Connection closed by authent ...
show more2026-07-08T03:41:20.696158+02:00 router01.dreibaeumen.de sshd[1975265]: Connection closed by authenticating user root 106.13.126.89 port 43938 [preauth]
2026-07-08T03:41:28.628183+02:00 router01.dreibaeumen.de sshd[1975287]: Connection closed by authenticating user root 106.13.126.89 port 58694 [preauth]
2026-07-08T03:41:47.274007+02:00 router01.dreibaeumen.de sshd[1975319]: Connection closed by authenticating user root 106.13.126.89 port 50856 [preauth]
2026-07-08T03:41:52.934622+02:00 router01.dreibaeumen.de sshd[1975339]: Connection closed by authenticating user root 106.13.126.89 port 57792 [preauth]
2026-07-08T03:42:02.046098+02:00 router01.dreibaeumen.de sshd[1975403]: Connection closed by authenticating user root 106.13.126.89 port 41768 [preauth]
show less
Brute-Force
Showing 1 to
15
of 32 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩