JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.131.7.11

213.131.7.11 was found in our database!

This IP was reported 507 times. Confidence of Abuse is 0%: ?

ISP	Department for Electromagnetic Processes and Atomic Nuclei
Usage Type	University/College/School
ASN	AS12925
Hostname(s)	npr.sinp.msu.ru
Domain Name	msu.su
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.131.7.11

Whois 213.131.7.11

IP Abuse Reports for 213.131.7.11:

This IP address has been reported a total of 507 times from 271 distinct sources. 213.131.7.11 was first reported on October 15th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-07-19 03:00:04 (1 month ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-20 22:05:40 (3 months ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 01:07:01 (3 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-09 02:05:19 (4 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice02,wa01]	Brute-Force SSH
🇬🇧 [email protected]	2025-11-05 00:50:44 (9 months ago)	...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-01 20:09:41 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-31 20:09:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇪🇸 librebit	2025-10-31 14:07:17 (9 months ago)	SSH brute force attack	Brute-Force SSH
🇺🇸 drodrig	2025-10-31 07:03:32 (9 months ago)	CrowdSec triggered: %!s(*string=0xc00449bf00) (0 events)	Brute-Force
Anonymous	2025-10-31 06:28:57 (9 months ago)	2025-10-31T08:10:58.793397+02:00 hvs sshd-session[296627]: Disconnected from invalid user dr 213.131 ... show more 2025-10-31T08:10:58.793397+02:00 hvs sshd-session[296627]: Disconnected from invalid user dr 213.131.7.11 port 36632 [preauth] 2025-10-31T08:26:35.164226+02:00 hvs sshd-session[296811]: Invalid user middle from 213.131.7.11 port 36660 2025-10-31T08:26:35.207437+02:00 hvs sshd-session[296811]: Disconnected from invalid user middle 213.131.7.11 port 36660 [preauth] 2025-10-31T08:27:44.674133+02:00 hvs sshd-session[296868]: Disconnected from authenticating user root 213.131.7.11 port 36664 [preauth] 2025-10-31T08:28:56.459604+02:00 hvs sshd-session[296890]: Disconnected from authenticating user root 213.131.7.11 port 36664 [preauth] ... show less	Brute-Force SSH
🇪🇸 paradoxnetworks	2025-10-31 06:13:35 (9 months ago)	2025-10-31T06:11:08.532510+00:00 edge-fog-bcn01.int.pdx.net.uk sshd[3369366]: Invalid user dr from 2 ... show more 2025-10-31T06:11:08.532510+00:00 edge-fog-bcn01.int.pdx.net.uk sshd[3369366]: Invalid user dr from 213.131.7.11 port 47680 2025-10-31T06:12:21.236548+00:00 edge-fog-bcn01.int.pdx.net.uk sshd[3369631]: Invalid user entry from 213.131.7.11 port 47684 2025-10-31T06:13:34.177744+00:00 edge-fog-bcn01.int.pdx.net.uk sshd[3369880]: Invalid user cys from 213.131.7.11 port 47690 ... show less	Brute-Force SSH
Anonymous	2025-10-31 06:10:59 (9 months ago)	2025-10-31T08:04:40.986716+02:00 hvs sshd-session[296477]: Disconnected from authenticating user roo ... show more 2025-10-31T08:04:40.986716+02:00 hvs sshd-session[296477]: Disconnected from authenticating user root 213.131.7.11 port 48514 [preauth] 2025-10-31T08:07:20.038750+02:00 hvs sshd-session[296544]: Disconnected from authenticating user root 213.131.7.11 port 36656 [preauth] 2025-10-31T08:08:30.690976+02:00 hvs sshd-session[296583]: Disconnected from authenticating user root 213.131.7.11 port 36646 [preauth] 2025-10-31T08:09:44.058350+02:00 hvs sshd-session[296608]: Disconnected from authenticating user root 213.131.7.11 port 36640 [preauth] 2025-10-31T08:10:58.744373+02:00 hvs sshd-session[296627]: Invalid user dr from 213.131.7.11 port 36632 ... show less	Brute-Force SSH
🇭🇺 tokyohost.eu	2025-10-31 05:45:57 (9 months ago)	Oct 31 06:43:24 node1 sshd[2307202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Oct 31 06:43:24 node1 sshd[2307202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.131.7.11 Oct 31 06:43:27 node1 sshd[2307202]: Failed password for invalid user indra from 213.131.7.11 port 42398 ssh2 Oct 31 06:45:56 node1 sshd[2374931]: Invalid user llm from 213.131.7.11 port 57342 ... show less	Brute-Force SSH
🇮🇹 Rosh	2025-10-31 05:42:27 (9 months ago)	[10/31/25 06:42:27] SSH: illegal login attempts	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-31 04:59:11 (9 months ago)	213.131.7.11 (RU/Russia/npr.sinp.msu.ru), 5 distributed sshd attacks on account [root] in the last 3 ... show more 213.131.7.11 (RU/Russia/npr.sinp.msu.ru), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 30 23:37:43 15104 sshd[23358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.128.4 user=root Oct 30 23:37:44 15104 sshd[23358]: Failed password for root from 192.227.128.4 port 41318 ssh2 Oct 30 23:38:35 15104 sshd[23483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.122.26.253 user=root Oct 30 23:38:37 15104 sshd[23483]: Failed password for root from 125.122.26.253 port 14638 ssh2 Oct 30 23:58:57 15104 sshd[26132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.131.7.11 user=root IP Addresses Blocked: 192.227.128.4 (US/United States/192-227-128-4-host.colocrossing.com) 125.122.26.253 (CN/China/-) show less	Brute-Force SSH

Showing 1 to 15 of 507 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:537:1000:11df:5cf9:4185:40e6

🇦🇷 149.78.152.40

🇮🇳 98.70.127.17

🇳🇱 95.173.207.168

🇸🇦 79.72.3.119

🇺🇸 66.132.195.90

🇨🇳 27.19.119.103

🇳🇱 213.177.179.79

🇵🇰 203.101.177.1

🇭🇰 199.45.154.48

🇻🇪 190.72.211.66

🇮🇳 182.95.123.102

🇵🇭 180.191.127.34

🇨🇳 129.204.142.154

🇰🇷 15.165.81.178

🇰🇷 211.228.197.187

🇺🇸 205.210.31.110

🇺🇸 192.155.84.194

🇦🇷 186.132.255.219

🇪🇨 186.69.94.185