JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.13.138.2

106.13.138.2 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 43%: ?

43%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.13.138.2

Whois 106.13.138.2

IP Abuse Reports for 106.13.138.2:

This IP address has been reported a total of 93 times from 22 distinct sources. 106.13.138.2 was first reported on January 17th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ipcop.net	2026-07-01 16:59:18 (1 hour ago)	2026-07-01T18:45:58.357520+02:00 guestgw-router01.remscheid.de sshd-session[3438856]: Connection clo ... show more 2026-07-01T18:45:58.357520+02:00 guestgw-router01.remscheid.de sshd-session[3438856]: Connection closed by authenticating user root 106.13.138.2 port 53114 [preauth] 2026-07-01T18:50:47.085610+02:00 guestgw-router01.remscheid.de sshd-session[3439780]: Connection closed by authenticating user root 106.13.138.2 port 50106 [preauth] 2026-07-01T18:59:09.438695+02:00 guestgw-router01.remscheid.de sshd-session[3440895]: Invalid user observer from 106.13.138.2 port 40502 2026-07-01T18:59:09.656939+02:00 guestgw-router01.remscheid.de sshd-session[3440895]: Connection closed by invalid user observer 106.13.138.2 port 40502 [preauth] 2026-07-01T18:59:16.047673+02:00 guestgw-router01.remscheid.de sshd-session[3441095]: Invalid user opsadmin from 106.13.138.2 port 56954 show less	Brute-Force
🇩🇪 ipcop.net	2026-07-01 11:32:06 (7 hours ago)	2026-07-01T13:21:52.353731+02:00 gw2.wira-gmbh.de sshd[1180212]: Connection closed by authenticating ... show more 2026-07-01T13:21:52.353731+02:00 gw2.wira-gmbh.de sshd[1180212]: Connection closed by authenticating user root 106.13.138.2 port 34460 [preauth] 2026-07-01T13:29:24.514540+02:00 gw2.wira-gmbh.de sshd[1181175]: Connection closed by authenticating user root 106.13.138.2 port 42826 [preauth] 2026-07-01T13:31:55.974891+02:00 gw2.wira-gmbh.de sshd[1181631]: Connection closed by authenticating user root 106.13.138.2 port 41540 [preauth] 2026-07-01T13:32:04.623355+02:00 gw2.wira-gmbh.de sshd[1181651]: Invalid user fangke from 106.13.138.2 port 54606 2026-07-01T13:32:05.457690+02:00 gw2.wira-gmbh.de sshd[1181651]: Connection closed by invalid user fangke 106.13.138.2 port 54606 [preauth] show less	Brute-Force
🇨🇳 kipfel★	2026-06-29 09:22:59 (2 days ago)	2026-06-29T17:12:00.224658+08:00 localhost sshd-session[2640136]: Invalid user albert from 106.13.13 ... show more 2026-06-29T17:12:00.224658+08:00 localhost sshd-session[2640136]: Invalid user albert from 106.13.138.2 port 53834 2026-06-29T17:15:15.099711+08:00 localhost sshd-session[2640772]: Invalid user ADMIN from 106.13.138.2 port 47242 2026-06-29T17:22:58.584826+08:00 localhost sshd-session[2643052]: Invalid user sysadmin from 106.13.138.2 port 60542 ... show less	Brute-Force SSH
🇩🇪 Shadowcloud	2026-06-27 08:18:16 (4 days ago)	Unauthorized SSH connection attempt detected / 3 attempts (via Fail2Ban)	Port Scan Brute-Force SSH
🇩🇪 Shadowcloud	2026-06-20 12:52:51 (1 week ago)	Unauthorized SSH connection attempt detected / 3 attempts (via Fail2Ban)	Port Scan Brute-Force SSH
🇨🇳 pengpeng	2026-06-18 07:19:46 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇩🇪 ipcop.net	2026-06-16 13:43:29 (2 weeks ago)	2026-06-16T15:41:53.300833+02:00 router01.kfz-heimchen.de sshd-session[1829131]: Connection closed b ... show more 2026-06-16T15:41:53.300833+02:00 router01.kfz-heimchen.de sshd-session[1829131]: Connection closed by authenticating user root 106.13.138.2 port 58318 [preauth] 2026-06-16T15:42:00.736940+02:00 router01.kfz-heimchen.de sshd-session[1829191]: Connection closed by authenticating user root 106.13.138.2 port 47976 [preauth] 2026-06-16T15:42:09.635064+02:00 router01.kfz-heimchen.de sshd-session[1829213]: Connection closed by authenticating user root 106.13.138.2 port 52448 [preauth] 2026-06-16T15:42:31.767571+02:00 router01.kfz-heimchen.de sshd-session[1829250]: Connection closed by authenticating user root 106.13.138.2 port 36872 [preauth] 2026-06-16T15:43:28.955855+02:00 router01.kfz-heimchen.de sshd-session[1829307]: Connection closed by authenticating user root 106.13.138.2 port 52944 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-06-16 11:21:19 (2 weeks ago)	2026-06-16T13:15:32.933509+02:00 router01.kfz-heimchen.de sshd-session[1805105]: Connection closed b ... show more 2026-06-16T13:15:32.933509+02:00 router01.kfz-heimchen.de sshd-session[1805105]: Connection closed by authenticating user root 106.13.138.2 port 36650 [preauth] 2026-06-16T13:18:02.212562+02:00 router01.kfz-heimchen.de sshd-session[1805489]: Invalid user ksyun from 106.13.138.2 port 45050 2026-06-16T13:18:04.066430+02:00 router01.kfz-heimchen.de sshd-session[1805489]: Connection closed by invalid user ksyun 106.13.138.2 port 45050 [preauth] 2026-06-16T13:20:58.516240+02:00 router01.kfz-heimchen.de sshd-session[1805949]: Connection closed by authenticating user root 106.13.138.2 port 39122 [preauth] 2026-06-16T13:21:18.364784+02:00 router01.kfz-heimchen.de sshd-session[1806025]: Invalid user albert from 106.13.138.2 port 35304 show less	Brute-Force
🇩🇪 Shadowcloud	2026-06-11 15:47:01 (2 weeks ago)	Unauthorized SSH connection attempt detected / 3 attempts (via Fail2Ban)	Port Scan Brute-Force SSH
🇨🇳 kipfel★	2026-06-10 08:12:53 (3 weeks ago)	2026-06-10T16:08:03.882202+08:00 self-dedi-wyse-5070-tna sshd-session[278913]: Invalid user ksyun fr ... show more 2026-06-10T16:08:03.882202+08:00 self-dedi-wyse-5070-tna sshd-session[278913]: Invalid user ksyun from 106.13.138.2 port 58056 2026-06-10T16:12:43.425968+08:00 self-dedi-wyse-5070-tna sshd-session[279309]: Invalid user albert from 106.13.138.2 port 54572 2026-06-10T16:12:51.329873+08:00 self-dedi-wyse-5070-tna sshd-session[279328]: Invalid user taobao from 106.13.138.2 port 35644 ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-06-09 19:13:02 (3 weeks ago)	ICS Labs identified 106.13.138.2 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇨🇳 pengpeng	2026-06-08 14:46:52 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
Anonymous	2026-06-03 11:40:35 (4 weeks ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇩🇪 ipcop.net	2026-06-01 16:04:25 (1 month ago)	2026-06-01T17:53:25.404604+02:00 router01.bongen-auto.de sshd[3973340]: Connection closed by authent ... show more 2026-06-01T17:53:25.404604+02:00 router01.bongen-auto.de sshd[3973340]: Connection closed by authenticating user root 106.13.138.2 port 43500 [preauth] 2026-06-01T17:55:34.726369+02:00 router01.bongen-auto.de sshd[3973815]: Connection closed by authenticating user root 106.13.138.2 port 39738 [preauth] 2026-06-01T17:58:39.689452+02:00 router01.bongen-auto.de sshd[3974495]: Connection closed by authenticating user root 106.13.138.2 port 48902 [preauth] 2026-06-01T18:04:13.863931+02:00 router01.bongen-auto.de sshd[3975138]: Connection closed by authenticating user root 106.13.138.2 port 59424 [preauth] 2026-06-01T18:04:25.136146+02:00 router01.bongen-auto.de sshd[3975386]: Connection closed by authenticating user root 106.13.138.2 port 52540 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-06-01 14:30:48 (1 month ago)	2026-06-01T16:25:27.441558+02:00 guestgw-router01.remscheid.de sshd-session[835091]: Connection clos ... show more 2026-06-01T16:25:27.441558+02:00 guestgw-router01.remscheid.de sshd-session[835091]: Connection closed by authenticating user root 106.13.138.2 port 34122 [preauth] 2026-06-01T16:25:44.977682+02:00 guestgw-router01.remscheid.de sshd-session[835119]: Invalid user ksyun from 106.13.138.2 port 45414 2026-06-01T16:25:55.538546+02:00 guestgw-router01.remscheid.de sshd-session[835119]: Connection closed by invalid user ksyun 106.13.138.2 port 45414 [preauth] 2026-06-01T16:30:23.644645+02:00 guestgw-router01.remscheid.de sshd-session[835728]: Connection closed by authenticating user root 106.13.138.2 port 53456 [preauth] 2026-06-01T16:30:47.826795+02:00 guestgw-router01.remscheid.de sshd-session[835854]: Invalid user albert from 106.13.138.2 port 37156 show less	Brute-Force

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.108.165

🇺🇸 216.180.246.157

🇮🇳 210.212.136.3

🇩🇪 118.193.59.194

🇺🇸 38.148.249.2

🇮🇪 2603:1062:0:358::c

🇮🇪 2603:1062:0:bd::13

🇺🇸 205.210.31.44

🇺🇸 45.85.145.64

🇹🇿 41.59.228.160

🇬🇧 35.203.211.83

🇷🇴 2.57.122.168

🇩🇪 209.50.191.231

🇵🇱 176.53.159.197

🇺🇸 162.216.149.190

🇻🇳 160.30.160.195

🇺🇸 147.185.132.157

🇺🇸 107.21.135.85

🇻🇳 103.63.108.25

🇬🇧 89.223.23.55