This IP address has been reported a total of
31
times from
26 distinct
sources.
213.189.200.4 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. Sources: fail2ban. First seen: 2026-08-26. Risk score: 20/100.
show less
Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 22.
2026-08-26T02:05:04.802597+02:00 dedi111 sshd-session[4135570]: Invalid user ubuntu from 213.189.200 ...
show more2026-08-26T02:05:04.802597+02:00 dedi111 sshd-session[4135570]: Invalid user ubuntu from 213.189.200.4 port 33268
2026-08-26T02:05:05.019290+02:00 dedi111 sshd-session[4135573]: Invalid user ubuntu from 213.189.200.4 port 33282
2026-08-26T02:05:05.224728+02:00 dedi111 sshd-session[4135576]: Invalid user ubuntu from 213.189.200.4 port 33290
2026-08-26T02:05:05.425261+02:00 dedi111 sshd-session[4135581]: Invalid user ubuntu from 213.189.200.4 port 33296
2026-08-26T02:05:05.638519+02:00 dedi111 sshd-session[4135583]: Invalid user ubuntu from 213.189.200.4 port 33298
...
show less
2026-08-26T01:44:27.794365+02:00 dedi111 sshd-session[4127652]: Invalid user ubuntu from 213.189.200 ...
show more2026-08-26T01:44:27.794365+02:00 dedi111 sshd-session[4127652]: Invalid user ubuntu from 213.189.200.4 port 45492
2026-08-26T01:44:28.188140+02:00 dedi111 sshd-session[4127656]: Invalid user ubuntu from 213.189.200.4 port 45504
2026-08-26T01:44:28.549141+02:00 dedi111 sshd-session[4127658]: Invalid user ubuntu from 213.189.200.4 port 45512
2026-08-26T01:44:28.769967+02:00 dedi111 sshd-session[4127662]: Invalid user ubuntu from 213.189.200.4 port 45514
2026-08-26T01:44:28.991388+02:00 dedi111 sshd-session[4127664]: Invalid user ubuntu from 213.189.200.4 port 45516
...
show less
2026-08-26T01:23:50.772747+02:00 dedi111 sshd-session[4119791]: Invalid user user from 213.189.200.4 ...
show more2026-08-26T01:23:50.772747+02:00 dedi111 sshd-session[4119791]: Invalid user user from 213.189.200.4 port 46736
2026-08-26T01:23:50.974838+02:00 dedi111 sshd-session[4119803]: Invalid user user from 213.189.200.4 port 46740
2026-08-26T01:23:51.174395+02:00 dedi111 sshd-session[4119814]: Invalid user user from 213.189.200.4 port 46754
2026-08-26T01:23:51.387366+02:00 dedi111 sshd-session[4119816]: Invalid user user from 213.189.200.4 port 46766
2026-08-26T01:23:51.590702+02:00 dedi111 sshd-session[4119820]: Invalid user user from 213.189.200.4 port 46780
...
show less
2026-08-26T01:03:17.087234+02:00 dedi111 sshd-session[4112141]: Invalid user user from 213.189.200.4 ...
show more2026-08-26T01:03:17.087234+02:00 dedi111 sshd-session[4112141]: Invalid user user from 213.189.200.4 port 51742
2026-08-26T01:03:17.297795+02:00 dedi111 sshd-session[4112143]: Invalid user user from 213.189.200.4 port 51758
2026-08-26T01:03:17.524858+02:00 dedi111 sshd-session[4112147]: Invalid user user from 213.189.200.4 port 51766
2026-08-26T01:03:17.750286+02:00 dedi111 sshd-session[4112149]: Invalid user user from 213.189.200.4 port 51778
2026-08-26T01:03:17.973978+02:00 dedi111 sshd-session[4112151]: Invalid user user from 213.189.200.4 port 51788
...
show less
2026-08-25T21:54:15.094586+00:00 xenon sshd-session[914351]: Connection closed by authenticating use ...
show more2026-08-25T21:54:15.094586+00:00 xenon sshd-session[914351]: Connection closed by authenticating user root 213.189.200.4 port 57194 [preauth]
2026-08-25T21:54:15.342820+00:00 xenon sshd-session[914353]: Connection closed by authenticating user root 213.189.200.4 port 57202 [preauth]
2026-08-25T21:54:15.603405+00:00 xenon sshd-session[914374]: Connection closed by authenticating user root 213.189.200.4 port 57206 [preauth]
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less