This IP address has been reported a total of
108
times from
96 distinct
sources.
106.13.23.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
(sshd) Failed SSH login from 106.13.23.149 (CN/China/-)
2026-06-13 16:18:45.484814-0500 localhost sshd-session[99593]: Failed password for invalid user ubu ...
show more2026-06-13 16:18:45.484814-0500 localhost sshd-session[99593]: Failed password for invalid user ubuntu from 106.13.23.149 port 52438 ssh2
show less
2026-06-13T17:52:56.124896+00:00 ubuntu sshd[1110678]: Failed password for root from 106.13.23.149 p ...
show more2026-06-13T17:52:56.124896+00:00 ubuntu sshd[1110678]: Failed password for root from 106.13.23.149 port 54270 ssh2
2026-06-13T17:52:57.101682+00:00 ubuntu sshd[1110678]: Failed password for root from 106.13.23.149 port 54270 ssh2
2026-06-13T17:52:57.400865+00:00 ubuntu sshd[1110678]: Failed password for root from 106.13.23.149 port 54270 ssh2
2026-06-13T17:52:58.223453+00:00 ubuntu sshd[1110678]: Disconnecting authenticating user root 106.13.23.149 port 54270: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-06-13T17:53:00.266371+00:00 ubuntu sshd[1114407]: Invalid user test from 106.13.23.149 port 57824
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Honeypot bot from CN: 4 SSH login attempts; 2 commands executed; first 2026-06-11 11:10:13, last 202 ...
show moreHoneypot bot from CN: 4 SSH login attempts; 2 commands executed; first 2026-06-11 11:10:13, last 2026-06-11 11:10:34
show less
Active SSH brute-force detected. Logs: Jun 11 03:52:30 AVM-518639 sshd[118036]: Disconnecting authen ...
show moreActive SSH brute-force detected. Logs: Jun 11 03:52:30 AVM-518639 sshd[118036]: Disconnecting authenticating user root 106.13.23.149 port 40364: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] Jun ...
show less
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ...
show moreHoneypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-06-10T12:43:52.268Z ACCEPT host=::ffff:106.13.23.149 port=49220 fd=4 n=1/4096
...
show less
Jun 9 17:03:20 odin sshd[8862]: Failed password for root from 106.13.23.149 port 35658 ssh2
Jun 9 ...
show moreJun 9 17:03:20 odin sshd[8862]: Failed password for root from 106.13.23.149 port 35658 ssh2
Jun 9 17:03:24 odin sshd[8862]: Failed password for root from 106.13.23.149 port 35658 ssh2
Jun 9 17:03:32 odin sshd[8862]: Failed password for root from 106.13.23.149 port 35658 ssh2
Jun 9 17:03:34 odin sshd[8862]: Failed password for root from 106.13.23.149 port 35658 ssh2
show less
2026-06-09T05:03:32.500033+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.14 ...
show more2026-06-09T05:03:32.500033+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.149 port 37978 ssh2
2026-06-09T05:03:35.342327+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.149 port 37978 ssh2
2026-06-09T05:03:38.965344+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.149 port 37978 ssh2
2026-06-09T05:03:41.632454+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.149 port 37978 ssh2
2026-06-09T05:03:45.044999+00:00 md sshd-session[907211]: Failed password for root from 106.13.23.149 port 37978 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 108 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩