This IP address has been reported a total of
10
times from
10 distinct
sources.
213.6.13.13 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Belarus
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
SSH
9
times;
Brute-Force
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2725938 with IP 3773507 for SSH brute-force attack by source 3768163 via ssh-honeypot/0.2.0+h ...
show moreReport 2725938 with IP 3773507 for SSH brute-force attack by source 3768163 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Anonymous
Fail2ban (sshd jail): 2 failed SSH attempts from 213.6.13.13.
2026-10-04T16:06:05.315763+00:00 LYN-HMS-1 sshd-session[3023665]: Invalid user runner from 213.6.13. ...
show more2026-10-04T16:06:05.315763+00:00 LYN-HMS-1 sshd-session[3023665]: Invalid user runner from 213.6.13.13 port 53172
2026-10-04T16:06:05.319794+00:00 LYN-HMS-1 sshd-session[3023665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.13.13
2026-10-04T16:06:06.557036+00:00 LYN-HMS-1 sshd-session[3023665]: Failed password for invalid user runner from 213.6.13.13 port 53172 ssh2
2026-10-04T16:07:39.064108+00:00 LYN-HMS-1 sshd-session[3023821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.13.13 user=root
2026-10-04T16:07:41.343383+00:00 LYN-HMS-1 sshd-session[3023821]: Failed password for root from 213.6.13.13 port 60182 ssh2
...
show less
2026-10-04T18:04:30.802559milloweb sshd[31114]: pam_unix(sshd:auth): authentication failure; logname ...
show more2026-10-04T18:04:30.802559milloweb sshd[31114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.13.13
2026-10-04T18:04:32.764758milloweb sshd[31114]: Failed password for invalid user sftpuser from 213.6.13.13 port 56408 ssh2
2026-10-04T18:06:34.076353milloweb sshd[31459]: Invalid user runner from 213.6.13.13 port 39398
...
show less
Oct 4 16:08:49 ipmi sshd[3987579]: Failed password for invalid user kk from 213.6.13.13 port 46296 ...
show moreOct 4 16:08:49 ipmi sshd[3987579]: Failed password for invalid user kk from 213.6.13.13 port 46296 ssh2
Oct 4 16:08:50 ipmi sshd[3987579]: Disconnected from invalid user kk 213.6.13.13 port 46296 [preauth]
Oct 4 16:16:02 ipmi sshd[3989565]: Invalid user center from 213.6.13.13 port 51716
Oct 4 16:16:02 ipmi sshd[3989565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.13.13
Oct 4 16:16:04 ipmi sshd[3989565]: Failed password for invalid user center from 213.6.13.13 port 51716 ssh2
...
show less
2026-04-03T09:26:50+02:00 theta asterisk\[1575\]: WARNING\[4713\]: res_pjsip_registrar.c:1166 in fin ...
show more2026-04-03T09:26:50+02:00 theta asterisk\[1575\]: WARNING\[4713\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(213.6.13.13:59177\)
2026-04-03T09:29:19+02:00 theta asterisk\[1575\]: WARNING\[9929\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(213.6.13.13:55994\)
2026-04-03T09:30:14+02:00 theta asterisk\[1575\]: WARNING\[30455\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(213.6.13.13:56088\)
2026-04-03T09:31:03+02:00 theta asterisk\[1575\]: WARNING\[8066\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(213.6.13.13:56189\)
2026-04-03T09:32:25+02:00 theta asterisk\[1575\]: WARNING\[8066\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(213.6.13.13:56322\)
2026-04-03T10:44:18+02:00 theta asterisk\[1575\]: WARNING\[8066\]: res_pjsip_registrar.c:1166 in f
show less
Fraud VoIP
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
