This IP address has been reported a total of
842
times from
386 distinct
sources.
213.209.159.217 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"event":{"DateTime":"2026-06-12T06:06:32Z","RemoteAddr":"213.209.159.217:58648","Protocol":"SSH","C ...
show more{"event":{"DateTime":"2026-06-12T06:06:32Z","RemoteAddr":"213.209.159.217:58648","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"3fe8692f-d6a9-4e4d-807d-a2223aa746fa","Environ":"","User":"root","Password":"pulacubile1982","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"213.209.159.217","SourcePort":"58648","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-12T08:32:40Z","RemoteAddr":"213.209.159.217:34542","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"dee792ab-5155-4c74-a2f6-e6382f9664ee","Environ":"","User":"bin","Password":"worlddomination","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Descr
show less
2026-06-13T17:59:50.370054+02:00 vm1386.de.snk.wtf sshd[520724]: Failed password for root from 213.2 ...
show more2026-06-13T17:59:50.370054+02:00 vm1386.de.snk.wtf sshd[520724]: Failed password for root from 213.209.159.217 port 47528 ssh2
2026-06-13T17:59:51.694443+02:00 vm1386.de.snk.wtf sshd[520724]: Connection closed by authenticating user root 213.209.159.217 port 47528 [preauth]
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:Wz123456!
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:Wz123456!
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH
• Credential used: root:Wz123456 ...
show moreHoneypot [nx-infrastructure]: Brute-force attack detected on 22/SSH
• Credential used: root:Wz123456!
• Number of login attempts: 1
• Client: SSH-2.0-Go
Reported by: Justin F.
show less
CSF/LFD blocked 213.209.159.217 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SS ...
show moreCSF/LFD blocked 213.209.159.217 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 213.209.159.217 (DE/Germany/-): 5 in the last 3600 secs. Evidence: Jun 13 10:16:06 paladin sshd-session[2235173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.217 user=root
show less
2026-06-13T23:02:24.024061+08:00 vmi996132.contaboserver.net sshd[2476730]: pam_unix(sshd:auth): aut ...
show more2026-06-13T23:02:24.024061+08:00 vmi996132.contaboserver.net sshd[2476730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.217 user=root
2026-06-13T23:02:25.487286+08:00 vmi996132.contaboserver.net sshd[2476730]: Failed password for root from 213.209.159.217 port 41736 ssh2
...
show less