This IP address has been reported a total of
370
times from
211 distinct
sources.
106.13.96.57 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 63 port scanning attempts on 24-05-2026. For more information or to repo ...
show moreThis IP address carried out 63 port scanning attempts on 24-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 5 SSH credential attack (attempts) on 24-05-2026. For more information o ...
show moreThis IP address carried out 5 SSH credential attack (attempts) on 24-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Anonymous
2026-05-24T20:26:22.999518 mail2.akcurate.de sshd[36966]: Invalid user user14 from 106.13.96.57 port ...
show more2026-05-24T20:26:22.999518 mail2.akcurate.de sshd[36966]: Invalid user user14 from 106.13.96.57 port 48066
2026-05-24T20:26:23.234743 mail2.akcurate.de sshd[36966]: Disconnected from invalid user user14 106.13.96.57 port 48066 [preauth]
2026-05-24T20:34:22.971820 mail2.akcurate.de sshd[37048]: Invalid user ftp_client from 106.13.96.57 port 59144
...
show less
2026-05-24T18:31:31.627503+02:00 ka02 sshd-session[1547593]: Connection from 106.13.96.57 port 45466 ...
show more2026-05-24T18:31:31.627503+02:00 ka02 sshd-session[1547593]: Connection from 106.13.96.57 port 45466 on 46.38.234.197 port 22 rdomain ""
2026-05-24T18:31:33.482195+02:00 ka02 sshd-session[1547593]: User root from 106.13.96.57 not allowed because not listed in AllowUsers
2026-05-24T18:31:33.645142+02:00 ka02 sshd-session[1547593]: Disconnected from invalid user root 106.13.96.57 port 45466 [preauth]
2026-05-24T18:33:20.517170+02:00 ka02 sshd-session[1547720]: Connection from 106.13.96.57 port 41834 on 46.38.234.197 port 22 rdomain ""
2026-05-24T18:33:25.864621+02:00 ka02 sshd-session[1547720]: Connection closed by 106.13.96.57 port 41834 [preauth]
...
show less
2026-05-24T17:19:33.262310 phoenix sshd-session[3331228]: Failed password for root from 106.13.96.57 ...
show more2026-05-24T17:19:33.262310 phoenix sshd-session[3331228]: Failed password for root from 106.13.96.57 port 50114 ssh2
2026-05-24T17:19:34.811871 phoenix sshd-session[3331228]: Disconnected from authenticating user root 106.13.96.57 port 50114 [preauth]
2026-05-24T17:34:06.085002 phoenix sshd-session[3341245]: Invalid user ali from 106.13.96.57 port 42194
...
show less
2026-05-24T14:44:42.321055+01:00 srv03 sshd-session[3195129]: Invalid user git from 106.13.96.57 por ...
show more2026-05-24T14:44:42.321055+01:00 srv03 sshd-session[3195129]: Invalid user git from 106.13.96.57 port 45222
2026-05-24T14:44:42.322755+01:00 srv03 sshd-session[3195129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.57
2026-05-24T14:44:44.357839+01:00 srv03 sshd-session[3195129]: Failed password for invalid user git from 106.13.96.57 port 45222 ssh2
...
show less
May 22 08:49:26 frank sshd[1290430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreMay 22 08:49:26 frank sshd[1290430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.57
May 22 08:49:28 frank sshd[1290430]: Failed password for invalid user pavel from 106.13.96.57 port 32906 ssh2
May 22 08:50:33 frank sshd[1296934]: Connection from 106.13.96.57 port 57844 on 213.255.209.66 port 22 rdomain ""
May 22 08:50:37 frank sshd[1296934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.57 user=root
May 22 08:50:39 frank sshd[1296934]: Failed password for root from 106.13.96.57 port 57844 ssh2
...
show less
2026-05-24T11:18:15.397690+02:00 gw-de20-01.guestgw.net sshd[229889]: Connection closed by 106.13.96 ...
show more2026-05-24T11:18:15.397690+02:00 gw-de20-01.guestgw.net sshd[229889]: Connection closed by 106.13.96.57 port 50286 [preauth]
2026-05-24T11:19:40.421396+02:00 gw-de20-01.guestgw.net sshd[230266]: Invalid user develop from 106.13.96.57 port 42334
2026-05-24T11:19:40.755110+02:00 gw-de20-01.guestgw.net sshd[230266]: Disconnected from invalid user develop 106.13.96.57 port 42334 [preauth]
2026-05-24T11:21:58.729180+02:00 gw-de20-01.guestgw.net sshd[230965]: Connection closed by 106.13.96.57 port 44940 [preauth]
2026-05-24T11:22:49.859966+02:00 gw-de20-01.guestgw.net sshd[231223]: Connection closed by 106.13.96.57 port 59500 [preauth]
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-24T05:19:23Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-24T05:19:23Z and 2026-05-24T07:13:26Z
show less
May 23 23:26:10 ws12vmsma01 sshd[28217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 23 23:26:10 ws12vmsma01 sshd[28217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.96.57
May 23 23:26:10 ws12vmsma01 sshd[28217]: Invalid user github-runner from 106.13.96.57
May 23 23:26:13 ws12vmsma01 sshd[28217]: Failed password for invalid user github-runner from 106.13.96.57 port 60630 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 370 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩