AbuseIPDB » 213.55.85.202

213.55.85.202 was found in our database!

This IP was reported 31,208 times. Confidence of Abuse is 100%: ?

100%

ISP	Ethio Telecom
Usage Type	Fixed Line ISP
ASN	AS24757
Domain Name	ethiotelecom.et
Country	Ethiopia
City	Addis Ababa, Addis Ababa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 213.55.85.202

Whois 213.55.85.202

IP Abuse Reports for 213.55.85.202:

This IP address has been reported a total of 31,208 times from 1,882 distinct sources. 213.55.85.202 was first reported on December 3rd 2021, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
scoots	2025-05-15 09:34:51 (5 minutes ago)	May 15 05:34:45 authie-ny-5 sshd[1795802]: Invalid user admin from 213.55.85.202 port 2212 May ... show moreMay 15 05:34:45 authie-ny-5 sshd[1795802]: Invalid user admin from 213.55.85.202 port 2212 May 15 05:34:47 authie-ny-5 sshd[1795802]: Failed password for invalid user admin from 213.55.85.202 port 2212 ssh2 May 15 05:34:50 authie-ny-5 sshd[1795802]: error: PAM: Authentication failure for illegal user admin from 213.55.85.202 May 15 05:34:50 authie-ny-5 sshd[1795802]: Failed keyboard-interactive/pam for invalid user admin from 213.55.85.202 port 2212 ssh2 May 15 05:34:51 authie-ny-5 sshd[1795802]: Connection closed by invalid user admin 213.55.85.202 port 2212 [preauth] ... show less	Brute-Force SSH
TZNOC	2025-05-15 09:32:29 (7 minutes ago)	Excessive number of invalid login attempts	Email Spam Hacking Brute-Force Exploited Host
adlp.org	2025-05-15 08:48:07 (52 minutes ago)	May 15 08:48:00 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;213.55.85.202;[UNAVA ... show moreMay 15 08:48:00 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;213.55.85.202;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill May 15 08:48:03 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;213.55.85.202;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill May 15 08:48:06 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;213.55.85.202;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
malamanhado.com.br	2025-05-15 08:30:58 (1 hour ago)	2025-05-15T08:30:55.993804+00:00 jitsi.malamanhado.com.br sshd[151623]: Connection from 213.55.85.20 ... show more2025-05-15T08:30:55.993804+00:00 jitsi.malamanhado.com.br sshd[151623]: Connection from 213.55.85.202 port 2307 on 74.50.123.34 port 22 rdomain "" 2025-05-15T08:30:57.515046+00:00 jitsi.malamanhado.com.br sshd[151623]: Invalid user test from 213.55.85.202 port 2307 show less	Brute-Force SSH
mg	2025-05-15 08:29:31 (1 hour ago)	2025-05-15T01:28:54.459685-07:00 bluejay sshd[3370370]: Failed password for invalid user test from 2 ... show more2025-05-15T01:28:54.459685-07:00 bluejay sshd[3370370]: Failed password for invalid user test from 213.55.85.202 port 2426 ssh2 2025-05-15T01:29:03.446594-07:00 bluejay sshd[3370394]: Invalid user test from 213.55.85.202 port 2427 2025-05-15T01:29:03.448780-07:00 bluejay sshd[3370394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.85.202 2025-05-15T01:29:05.117703-07:00 bluejay sshd[3370394]: Failed password for invalid user test from 213.55.85.202 port 2427 ssh2 ... show less	Brute-Force SSH
librebit	2025-05-15 07:28:39 (2 hours ago)	Brute force	Brute-Force
maxxsense	2025-05-15 07:17:29 (2 hours ago)	(sshd) Failed SSH login from 213.55.85.202 (ET/Ethiopia/-)	Brute-Force SSH
webnestify	2025-05-15 07:00:17 (2 hours ago)	2025-05-15T07:00:14.782304+00:00 wn-at sshd[160825]: pam_unix(sshd:auth): authentication failure; lo ... show more2025-05-15T07:00:14.782304+00:00 wn-at sshd[160825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.85.202 user=nobody 2025-05-15T07:00:14.782304+00:00 wn-at sshd[160825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.85.202 user=nobody 2025-05-15T07:00:16.873369+00:00 wn-at sshd[160825]: Failed password for nobody from 213.55.85.202 port 2254 ssh2 ... show less	Brute-Force SSH
drewf.ink	2025-05-15 06:36:35 (3 hours ago)	[06:36] Attempted SSH login on port 22 with credentials test:654321	Brute-Force SSH
tecnicorioja	2025-05-15 06:00:37 (3 hours ago)	SASL LOGIN authentication failed May 15 04:18:12	Brute-Force
bonux-s	2025-05-15 05:22:00 (4 hours ago)	[213.55.85.202]: SASL LOGIN authentication failed: authe..	Brute-Force
Paul Smith	2025-05-15 05:02:00 (4 hours ago)	Email Auth Brute force attack 7/7 in last day	Brute-Force
DaleCooper	2025-05-15 04:47:35 (4 hours ago)	2025-05-15_04:47:35.58078 Invalid user Test from 213.55.85.202 port 2505 ...	Brute-Force SSH
ghostwarriors	2025-05-15 04:20:17 (5 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
Anonymous	2025-05-15 04:12:21 (5 hours ago)	213.55.85.202 (ET/Ethiopia/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; ... show more213.55.85.202 (ET/Ethiopia/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: May 15 00:11:07 server2 sshd[17804]: Invalid user admin from 78.36.41.213 port 53500 May 15 00:11:07 server2 sshd[17804]: Failed password for invalid user admin from 78.36.41.213 port 53500 ssh2 May 15 00:07:30 server2 sshd[15695]: Invalid user admin from 213.55.85.202 port 2260 May 15 00:07:30 server2 sshd[15695]: Failed password for invalid user admin from 213.55.85.202 port 2260 ssh2 May 15 00:09:48 server2 sshd[16905]: Invalid user admin from 36.137.38.119 port 47730 May 15 00:09:48 server2 sshd[16905]: Failed password for invalid user admin from 36.137.38.119 port 47730 ssh2 May 15 00:12:14 server2 sshd[18355]: Invalid user admin from 61.184.176.231 port 43057 IP Addresses Blocked: 78.36.41.213 (RU/Russia/-) show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩