213.202.212.69

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: myLoc managed IT AG

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Lines containing failures of 213.202.212.69 Oct 21 01:38:11 nextcloud sshd[18279]: Invalid user ohh from 213.202.212.69 port 51318 Oct 21 01:38:11 nextcloud sshd[18279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69 Oct 21 01:38:12 nextcloud sshd[18279]: Failed password for invalid user ohh from 213.202.212.69 port 51318 ssh2 Oct 21 01:38:12 nextcloud sshd[18279]: Received disconnect from 213.202.212.69 port 51318:11: Bye Bye [preauth] Oct 21 01:38:12 nextcloud sshd[18279]: Disconnected from invalid user ohh 213.202.212.69 port 51318 [preauth] Oct 21 01:49:49 nextcloud sshd[20036]: Invalid user oracle from 213.202.212.69 port 40558 Oct 21 01:49:49 nextcloud sshd[20036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69 Oct 21 01:49:51 nextcloud sshd[20036]: Failed password for invalid user oracle from 213.202.212.69 port 40558 ssh2 Oct 21 01:49:51 nextcloud sshd[........ ------------------------------	2019-10-23 19:35:13
attack	$f2bV_matches	2019-10-21 22:01:06
attack	Oct 19 14:45:56 mail sshd[8118]: Invalid user ashish from 213.202.212.69 Oct 19 14:45:56 mail sshd[8118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69 Oct 19 14:45:56 mail sshd[8118]: Invalid user ashish from 213.202.212.69 Oct 19 14:45:58 mail sshd[8118]: Failed password for invalid user ashish from 213.202.212.69 port 49628 ssh2 Oct 19 14:55:17 mail sshd[10293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69 user=root Oct 19 14:55:19 mail sshd[10293]: Failed password for root from 213.202.212.69 port 46568 ssh2 ...	2019-10-19 23:04:54

Type

Details

Datetime

attackspam

Lines containing failures of 213.202.212.69
Oct 21 01:38:11 nextcloud sshd[18279]: Invalid user ohh from 213.202.212.69 port 51318
Oct 21 01:38:11 nextcloud sshd[18279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69
Oct 21 01:38:12 nextcloud sshd[18279]: Failed password for invalid user ohh from 213.202.212.69 port 51318 ssh2
Oct 21 01:38:12 nextcloud sshd[18279]: Received disconnect from 213.202.212.69 port 51318:11: Bye Bye [preauth]
Oct 21 01:38:12 nextcloud sshd[18279]: Disconnected from invalid user ohh 213.202.212.69 port 51318 [preauth]
Oct 21 01:49:49 nextcloud sshd[20036]: Invalid user oracle from 213.202.212.69 port 40558
Oct 21 01:49:49 nextcloud sshd[20036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69
Oct 21 01:49:51 nextcloud sshd[20036]: Failed password for invalid user oracle from 213.202.212.69 port 40558 ssh2
Oct 21 01:49:51 nextcloud sshd[........
------------------------------

2019-10-23 19:35:13

attack

$f2bV_matches

2019-10-21 22:01:06

attack

Oct 19 14:45:56 mail sshd[8118]: Invalid user ashish from 213.202.212.69
Oct 19 14:45:56 mail sshd[8118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69
Oct 19 14:45:56 mail sshd[8118]: Invalid user ashish from 213.202.212.69
Oct 19 14:45:58 mail sshd[8118]: Failed password for invalid user ashish from 213.202.212.69 port 49628 ssh2
Oct 19 14:55:17 mail sshd[10293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.69  user=root
Oct 19 14:55:19 mail sshd[10293]: Failed password for root from 213.202.212.69 port 46568 ssh2
...

2019-10-19 23:04:54

Comments on same subnet:

IP	Type	Details	Datetime
213.202.212.45	attack	spam	2020-08-17 18:59:55
213.202.212.45	attackbots	spam	2020-07-06 16:44:43
213.202.212.45	attackbotsspam	TCP src-port=45146 dst-port=25 Listed on MailSpike (spam wave plus L3-L5) (357)	2020-04-30 07:39:27
213.202.212.80	attackbots	Feb 11 21:57:08 ms-srv sshd[21806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.212.80 Feb 11 21:57:10 ms-srv sshd[21806]: Failed password for invalid user annie from 213.202.212.80 port 47227 ssh2	2020-03-09 00:13:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.202.212.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13556
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.202.212.69.			IN	A

;; AUTHORITY SECTION:
.			586	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101900 1800 900 604800 86400

;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 19 23:04:42 CST 2019
;; MSG SIZE  rcvd: 118

Host info

69.212.202.213.in-addr.arpa domain name pointer rs003423.fastrootserver.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
69.212.202.213.in-addr.arpa	name = rs003423.fastrootserver.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.178.51.36	attack	Oct 10 20:57:46 vm0 sshd[4488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.51.36 Oct 10 20:57:48 vm0 sshd[4488]: Failed password for invalid user clamav1 from 51.178.51.36 port 45730 ssh2 ...	2020-10-11 05:08:04
167.71.195.173	attackbots	Oct 10 16:39:32 lanister sshd[23350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.195.173 user=root Oct 10 16:39:35 lanister sshd[23350]: Failed password for root from 167.71.195.173 port 35710 ssh2 Oct 10 16:41:14 lanister sshd[23395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.195.173 user=root Oct 10 16:41:16 lanister sshd[23395]: Failed password for root from 167.71.195.173 port 59274 ssh2	2020-10-11 05:13:31
162.158.93.41	attackspambots	srv02 DDoS Malware Target(80:http) ..	2020-10-11 05:20:44
106.12.180.136	attack	Invalid user gpadmin from 106.12.180.136 port 59726	2020-10-11 05:25:02
111.198.48.204	attackbotsspam	DATE:2020-10-10 22:10:08, IP:111.198.48.204, PORT:ssh SSH brute force auth (docker-dc)	2020-10-11 05:06:35
175.125.149.217	attack	Oct 7 22:06:10 hidden sshd[30819]: Invalid user support from 175.125.149.217 port 64427 Oct 7 22:06:10 hidden sshd[30819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.125.149.217 Oct 7 22:06:13 hidden sshd[30819]: Failed password for invalid user support from 175.125.149.217 port 64427 ssh2	2020-10-11 04:52:54
202.157.176.154	attackbots	Oct 10 16:10:51 mail sshd[1080156]: Failed password for invalid user anukis from 202.157.176.154 port 49332 ssh2 Oct 10 16:17:04 mail sshd[1080411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.157.176.154 user=root Oct 10 16:17:06 mail sshd[1080411]: Failed password for root from 202.157.176.154 port 38606 ssh2 ...	2020-10-11 05:02:23
189.181.55.113	attackspambots	TCP (SYN) 189.181.55.113:57423 -> port 23, len 44	2020-10-11 04:59:39
36.133.0.37	attackspambots	2020-10-11T01:38:43.691651hostname sshd[12293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.0.37 user=root 2020-10-11T01:38:45.721123hostname sshd[12293]: Failed password for root from 36.133.0.37 port 59548 ssh2 ...	2020-10-11 05:17:25
118.96.55.186	attackbots	Port scan on 1 port(s): 445	2020-10-11 04:58:12
106.13.231.171	attackspam	Oct 10 10:48:35 shivevps sshd[17119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.231.171 Oct 10 10:48:38 shivevps sshd[17119]: Failed password for invalid user test from 106.13.231.171 port 43654 ssh2 Oct 10 10:50:24 shivevps sshd[17195]: Invalid user install from 106.13.231.171 port 55200 ...	2020-10-11 05:24:39
178.62.187.136	attackspam	Oct 10 20:44:51 onepixel sshd[2043610]: Failed password for invalid user vagrant from 178.62.187.136 port 39680 ssh2 Oct 10 20:49:02 onepixel sshd[2044303]: Invalid user su from 178.62.187.136 port 45238 Oct 10 20:49:02 onepixel sshd[2044303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.187.136 Oct 10 20:49:02 onepixel sshd[2044303]: Invalid user su from 178.62.187.136 port 45238 Oct 10 20:49:04 onepixel sshd[2044303]: Failed password for invalid user su from 178.62.187.136 port 45238 ssh2	2020-10-11 04:56:36
164.163.23.19	attack	(sshd) Failed SSH login from 164.163.23.19 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 10 14:23:20 server sshd[9782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.23.19 user=root Oct 10 14:23:22 server sshd[9782]: Failed password for root from 164.163.23.19 port 54392 ssh2 Oct 10 14:32:31 server sshd[12588]: Invalid user kapferer from 164.163.23.19 port 52234 Oct 10 14:32:33 server sshd[12588]: Failed password for invalid user kapferer from 164.163.23.19 port 52234 ssh2 Oct 10 14:36:28 server sshd[13713]: Invalid user test from 164.163.23.19 port 55830	2020-10-11 05:21:14
165.227.52.184	attack	Oct 10 18:19:56 con01 sshd[3298685]: Failed password for root from 165.227.52.184 port 47748 ssh2 Oct 10 18:22:56 con01 sshd[3303207]: Invalid user toor from 165.227.52.184 port 50294 Oct 10 18:22:56 con01 sshd[3303207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.52.184 Oct 10 18:22:56 con01 sshd[3303207]: Invalid user toor from 165.227.52.184 port 50294 Oct 10 18:22:58 con01 sshd[3303207]: Failed password for invalid user toor from 165.227.52.184 port 50294 ssh2 ...	2020-10-11 05:13:06
113.31.102.8	attack	(sshd) Failed SSH login from 113.31.102.8 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 10 15:02:41 optimus sshd[15815]: Invalid user danny from 113.31.102.8 Oct 10 15:02:41 optimus sshd[15815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.102.8 Oct 10 15:02:43 optimus sshd[15815]: Failed password for invalid user danny from 113.31.102.8 port 38408 ssh2 Oct 10 15:09:41 optimus sshd[17942]: Invalid user laraht from 113.31.102.8 Oct 10 15:09:41 optimus sshd[17942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.102.8	2020-10-11 04:50:39

Recently Reported IPs

14.178.144.77	189.18.140.65	84.54.79.213	36.71.233.137
84.10.55.147	205.185.124.24	200.98.68.239	117.214.111.167
255.45.52.111	49.149.76.130	5.89.124.95	185.53.79.149
185.40.13.166	181.129.100.98	176.96.1.33	124.11.229.219
5.188.86.171	83.110.97.117	87.203.202.31	194.187.251.155