Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: Contabo GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
02/22/2020-05:50:53.019059 213.136.83.55 Protocol: 6 ET POLICY Cleartext WordPress Login
2020-02-22 15:39:53
attackbots
02/21/2020-22:30:57.494714 213.136.83.55 Protocol: 6 ET POLICY Cleartext WordPress Login
2020-02-22 06:39:51
attackbots
Masscan Port Scanning Tool PA
2019-11-06 01:42:40
Comments on same subnet:
IP Type Details Datetime
213.136.83.212 attack
2020-08-04T09:59:13.306503shield sshd\[29928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04T09:59:15.497839shield sshd\[29928\]: Failed password for root from 213.136.83.212 port 60650 ssh2
2020-08-04T10:03:11.686824shield sshd\[30311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04T10:03:14.212207shield sshd\[30311\]: Failed password for root from 213.136.83.212 port 43906 ssh2
2020-08-04T10:07:04.199531shield sshd\[30796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi410824.contaboserver.net  user=root
2020-08-04 18:18:22
213.136.83.212 attackbotsspam
Invalid user hewenlong from 213.136.83.212 port 48556
2020-07-30 14:37:34
213.136.83.212 attackspam
Jul 25 07:40:31 sticky sshd\[22765\]: Invalid user admin from 213.136.83.212 port 48860
Jul 25 07:40:31 sticky sshd\[22765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.212
Jul 25 07:40:33 sticky sshd\[22765\]: Failed password for invalid user admin from 213.136.83.212 port 48860 ssh2
Jul 25 07:44:39 sticky sshd\[22783\]: Invalid user suchy from 213.136.83.212 port 34504
Jul 25 07:44:39 sticky sshd\[22783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.212
2020-07-25 13:48:31
213.136.83.212 attackspam
Jul 18 06:33:12 zooi sshd[27196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.212
Jul 18 06:33:14 zooi sshd[27196]: Failed password for invalid user mq from 213.136.83.212 port 52322 ssh2
...
2020-07-18 12:58:09
213.136.83.14 attack
Jan  1 22:53:01 ovpn sshd[6861]: Did not receive identification string from 213.136.83.14
Jan  1 22:55:06 ovpn sshd[7444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.14  user=r.r
Jan  1 22:55:09 ovpn sshd[7444]: Failed password for r.r from 213.136.83.14 port 36722 ssh2
Jan  1 22:55:09 ovpn sshd[7444]: Received disconnect from 213.136.83.14 port 36722:11: Normal Shutdown, Thank you for playing [preauth]
Jan  1 22:55:09 ovpn sshd[7444]: Disconnected from 213.136.83.14 port 36722 [preauth]
Jan  1 22:57:27 ovpn sshd[8019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.14  user=r.r
Jan  1 22:57:29 ovpn sshd[8019]: Failed password for r.r from 213.136.83.14 port 45778 ssh2
Jan  1 22:57:29 ovpn sshd[8019]: Received disconnect from 213.136.83.14 port 45778:11: Normal Shutdown, Thank you for playing [preauth]
Jan  1 22:57:29 ovpn sshd[8019]: Disconnected from 213.136.83.1........
------------------------------
2020-01-03 18:38:13
213.136.83.130 attack
Nov 13 06:26:51 itv-usvr-01 sshd[20281]: Invalid user yury from 213.136.83.130
Nov 13 06:26:51 itv-usvr-01 sshd[20281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.83.130
Nov 13 06:26:51 itv-usvr-01 sshd[20281]: Invalid user yury from 213.136.83.130
Nov 13 06:26:53 itv-usvr-01 sshd[20281]: Failed password for invalid user yury from 213.136.83.130 port 34310 ssh2
Nov 13 06:30:07 itv-usvr-01 sshd[20434]: Invalid user nymoen from 213.136.83.130
2019-11-16 07:16:36
213.136.83.130 attack
Automatic report - SSH Brute-Force Attack
2019-11-13 19:53:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.136.83.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.136.83.55.			IN	A

;; AUTHORITY SECTION:
.			300	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110501 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 01:42:37 CST 2019
;; MSG SIZE  rcvd: 117
Host info
55.83.136.213.in-addr.arpa domain name pointer vmi193741.contaboserver.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.83.136.213.in-addr.arpa	name = vmi193741.contaboserver.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.101.187.76 attack
5x Failed Password
2019-11-17 04:17:28
103.249.89.55 attackbotsspam
Automatic report - Port Scan Attack
2019-11-17 04:19:38
36.78.84.195 attack
MYH,DEF GET /downloader/
2019-11-17 04:12:23
138.97.65.4 attackbotsspam
Nov 16 20:20:17 venus sshd\[32711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4  user=root
Nov 16 20:20:19 venus sshd\[32711\]: Failed password for root from 138.97.65.4 port 34840 ssh2
Nov 16 20:24:09 venus sshd\[32714\]: Invalid user www from 138.97.65.4 port 42944
...
2019-11-17 04:24:19
192.169.243.124 attack
Automatic report - Banned IP Access
2019-11-17 04:28:13
42.6.26.40 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/42.6.26.40/ 
 
 CN - 1H : (650)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 42.6.26.40 
 
 CIDR : 42.4.0.0/14 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 ATTACKS DETECTED ASN4837 :  
  1H - 9 
  3H - 18 
  6H - 41 
 12H - 130 
 24H - 245 
 
 DateTime : 2019-11-16 15:47:02 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-17 04:20:01
51.77.193.213 attackspam
Nov 16 20:35:06 server sshd\[29168\]: Invalid user ching from 51.77.193.213
Nov 16 20:35:06 server sshd\[29168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-193.eu 
Nov 16 20:35:08 server sshd\[29168\]: Failed password for invalid user ching from 51.77.193.213 port 40408 ssh2
Nov 16 20:39:31 server sshd\[30149\]: Invalid user raddalgoda from 51.77.193.213
Nov 16 20:39:31 server sshd\[30149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-193.eu 
...
2019-11-17 04:25:07
106.13.45.92 attack
Nov 16 08:40:49 dallas01 sshd[14927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.92
Nov 16 08:40:50 dallas01 sshd[14927]: Failed password for invalid user guest from 106.13.45.92 port 59326 ssh2
Nov 16 08:46:28 dallas01 sshd[15728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.92
2019-11-17 04:30:42
106.12.178.127 attackbots
Invalid user ssh from 106.12.178.127 port 40426
2019-11-17 04:13:33
213.136.109.67 attackspambots
Nov 16 08:41:01 web1 sshd\[27837\]: Invalid user veiculo from 213.136.109.67
Nov 16 08:41:01 web1 sshd\[27837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.109.67
Nov 16 08:41:03 web1 sshd\[27837\]: Failed password for invalid user veiculo from 213.136.109.67 port 45426 ssh2
Nov 16 08:45:03 web1 sshd\[28205\]: Invalid user rafek from 213.136.109.67
Nov 16 08:45:03 web1 sshd\[28205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.109.67
2019-11-17 04:40:11
77.42.73.40 attack
Automatic report - Port Scan Attack
2019-11-17 04:33:05
5.189.186.191 attackspam
" "
2019-11-17 04:29:35
39.110.250.69 attackspam
Nov 16 15:20:09 ws19vmsma01 sshd[8185]: Failed password for root from 39.110.250.69 port 32842 ssh2
...
2019-11-17 04:25:26
222.128.93.67 attackspam
Nov 16 20:52:12 server sshd\[1195\]: Invalid user joe from 222.128.93.67
Nov 16 20:52:12 server sshd\[1195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.93.67 
Nov 16 20:52:13 server sshd\[1195\]: Failed password for invalid user joe from 222.128.93.67 port 46664 ssh2
Nov 16 21:10:30 server sshd\[6031\]: Invalid user hovedfagskonto from 222.128.93.67
Nov 16 21:10:30 server sshd\[6031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.93.67 
...
2019-11-17 04:38:22
176.110.229.27 attack
" "
2019-11-17 04:33:23

Recently Reported IPs

217.112.128.48 61.21.80.216 3.121.188.242 193.219.128.10
79.137.24.142 199.164.150.84 159.203.201.139 112.161.241.30
210.68.41.184 151.74.147.213 193.150.113.5 141.8.143.182
36.233.89.87 188.116.186.130 104.211.67.107 91.165.211.133
71.87.7.226 185.154.73.59 165.22.81.128 179.99.43.105