JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.6.68.94

213.6.68.94 was found in our database!

This IP was reported 232 times. Confidence of Abuse is 0%: ?

ISP	Palestine Telecommunications Company (PALTEL)
Usage Type	Fixed Line ISP
ASN	AS12975
Domain Name	paltelgroup.ps
Country	🇵🇸 Palestine, State of
City	Nablus, West Bank

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.6.68.94

Whois 213.6.68.94

IP Abuse Reports for 213.6.68.94:

This IP address has been reported a total of 232 times from 104 distinct sources. 213.6.68.94 was first reported on June 29th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 axonhost	2025-05-28 08:06:43 (1 year ago)	213.6.68.94 (PS/Palestine/-), 27 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇪🇸 el-brujo	2025-05-27 23:47:41 (1 year ago)	Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgen ... show more Cloudflare WAF: Request Path: /silentsigils/apdos_test_2 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2932.43 Safari/537.36 Action: block Source: ratelimit ASN Description: PALTEL-AS PALTEL Autonomous System Country: PS Method: GET Timestamp: 2025-05-27T23:47:41Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-05-25 13:56:18 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 213.6.68.94 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210831) triggered by 213.6.68.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 25 09:56:10.909094 2025] [security2:error] [pid 3325019:tid 3325019] [client 213.6.68.94:35851] [client 213.6.68.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "aDMhekwZCzNJzj_im7PAVQAAABA"], referer: https://sfcc-chemicals.com/shop/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lat	2025-05-12 02:24:14 (1 year ago)	SSH brute force detected (3 attempts)	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-05-06 20:06:29 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-05-05 20:06:28 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-05-05 00:20:23 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇷 pr0vieh	2025-05-05 00:13:30 (1 year ago)	May 5 01:55:00 mail sshd[14660]: Failed password for root from 213.6.68.94 port 41516 ssh2 May 5 0 ... show more May 5 01:55:00 mail sshd[14660]: Failed password for root from 213.6.68.94 port 41516 ssh2 May 5 02:00:38 mail sshd[15611]: Failed password for root from 213.6.68.94 port 50346 ssh2 May 5 02:03:00 mail sshd[15692]: Failed password for root from 213.6.68.94 port 53544 ssh2 May 5 02:09:58 mail sshd[16430]: Failed password for root from 213.6.68.94 port 35233 ssh2 May 5 02:13:29 mail sshd[17023]: Failed password for root from 213.6.68.94 port 40687 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2025-05-03 05:55:10 (1 year ago)	The IP 213.6.68.94 tried multiple SSH logins	Brute-Force SSH
🇩🇪 rh24	2025-05-02 10:00:26 (1 year ago)	213.6.68.94 (PS/Palestine/-), 6 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-24 11:03:15 (1 year ago)	[11:03] Attempted SSH login on port 22 with credentials root:help	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-24 10:58:51 (1 year ago)	[10:58] Attempted SSH login on port 22 with credentials root:gabriel	Brute-Force SSH
🇫🇷 jymeo.com	2025-04-19 21:15:37 (1 year ago)	2025-04-19T21:13:12.143319+00:00 prod-westeu sshd[1058518]: Failed password for root from 213.6.68.9 ... show more 2025-04-19T21:13:12.143319+00:00 prod-westeu sshd[1058518]: Failed password for root from 213.6.68.94 port 56226 ssh2 2025-04-19T21:15:44.523655+00:00 prod-westeu sshd[1059036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.68.94 user=root 2025-04-19T21:15:46.733772+00:00 prod-westeu sshd[1059036]: Failed password for root from 213.6.68.94 port 60002 ssh2 ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-14 22:34:53 (1 year ago)	[22:34] Attempted SSH login on port 22 with credentials root:147852	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-04-09 20:06:00 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 232 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:14d:5c85:87cf:d6e:1b1b:d900:d774

🇷🇴 193.32.162.84

🇧🇪 172.217.41.216

🇰🇷 49.247.37.22

🇳🇱 45.153.34.87

🇺🇸 2620:18c:0:192::e0:209

🇺🇸 2607:f8b0:4001:c17::12b

🇮🇩 202.154.45.32

🇩🇪 167.94.146.56

🇧🇮 154.117.199.56

🇮🇳 125.20.230.46

🇵🇰 124.29.214.39

🇨🇳 121.236.84.56

🇻🇳 103.189.208.13

🇩🇪 69.5.169.13

🇧🇪 34.52.172.57

🇸🇪 31.208.75.143

🇨🇳 27.17.201.209

🇧🇷 2804:1b3:a781:b7d1:f52f:866f:79b4:81ee

🇹🇼 198.235.24.109