This IP address has been reported a total of
12
times from
11 distinct
sources.
158.160.139.213 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T17:04:55.040371voip.dilenatech.com sshd[9586]: pam_unix(sshd:auth): authentication failur ...
show more2026-06-03T17:04:55.040371voip.dilenatech.com sshd[9586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.160.139.213
2026-06-03T17:04:57.968351voip.dilenatech.com sshd[9586]: Failed password for invalid user admin from 158.160.139.213 port 46966 ssh2
2026-06-03T17:05:28.494505voip.dilenatech.com sshd[9592]: Invalid user orangepi from 158.160.139.213 port 34428
...
show less
ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2
ET EXPLOIT Apache HTTP ...
show moreET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2
ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2
ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
ET WEB_SERVER Generic PHP Remote File Include
ET WEB_SERVER PHP tags in HTTP POST
ET WEB_SERVER PHP.//Input in HTTP POST
ET WEB_SERVER Possible SQL Injection (exec) in HTTP Request Body
ET WEB_SERVER ThinkPHP RCE Exploitation Attempt
ET WEB_SERVER allow_url_include PHP config option in uri
ET WEB_SERVER auto_prepend_file PHP config option in uri
ET WEB_SPECIFIC_APPS PHP-CGI OS Command Injection (soft hyphen) (CVE-2024-4577)
GPL WEB_SERVER 403 Forbidden
show less
Port Scan
Anonymous
2026-06-03T17:11:34.204032+02:00 luspi-server sshd-session[3163401]: Invalid user admin from 158.160 ...
show more2026-06-03T17:11:34.204032+02:00 luspi-server sshd-session[3163401]: Invalid user admin from 158.160.139.213 port 54852
2026-06-03T17:12:04.472721+02:00 luspi-server sshd-session[3163945]: Invalid user orangepi from 158.160.139.213 port 59244
...
show less
Attempted SSH connection from 158.160.139.213 port 53506 asn outside arin; no valid users in that as ...
show moreAttempted SSH connection from 158.160.139.213 port 53506 asn outside arin; no valid users in that asn
show less
2026-06-03T15:10:30.151776+02:00 axisverse sshd-session[118022]: Invalid user admin from 158.160.139 ...
show more2026-06-03T15:10:30.151776+02:00 axisverse sshd-session[118022]: Invalid user admin from 158.160.139.213 port 33864
2026-06-03T15:11:00.814697+02:00 axisverse sshd-session[118740]: Invalid user orangepi from 158.160.139.213 port 60200
2026-06-03T15:14:35.727732+02:00 axisverse sshd-session[123526]: Invalid user test from 158.160.139.213 port 51550
...
show less
2026-06-03T12:46:01.741381rednet sshd[1847845]: Invalid user admin from 158.160.139.213 port 37428
2 ...
show more2026-06-03T12:46:01.741381rednet sshd[1847845]: Invalid user admin from 158.160.139.213 port 37428
2026-06-03T12:46:33.006355rednet sshd[1847947]: Invalid user orangepi from 158.160.139.213 port 39102
2026-06-03T12:50:13.582157rednet sshd[1848040]: Invalid user test from 158.160.139.213 port 56148
2026-06-03T12:50:45.235095rednet sshd[1848042]: Invalid user user from 158.160.139.213 port 47590
2026-06-03T12:51:49.370967rednet sshd[1848534]: Invalid user admin from 158.160.139.213 port 48498
...
show less