IP address

Search at other sites:

.054213.111.187.140140.187.111.213.in-addr.arpa

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

213.111.187.140 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-07-19 04:00:00.611000
Was present on blacklist at: 2026-07-19 04:00

blocklist.de bots

213.111.187.140 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-07-20 22:05:05.196000
Was present on blacklist at: 2026-07-19 04:05, 2026-07-19 10:05, 2026-07-19 16:05, 2026-07-19 22:05, 2026-07-20 04:05, 2026-07-20 10:05, 2026-07-20 16:05, 2026-07-20 22:05

Threat categories

TL	Role	Category	Details
63	src	scan	port: 22, 23, 80, 443, 2222, 2375
50	src	login	protocol: ssh, telnet port: 22, 23
48	src	—

---

Warden events (343)

2026-07-19

ReconScanning (node.9c1411): 13

ReconScanning (node.ce2b59): 13

IntrusionUserCompromise (node.cfb4f7): 6

AttemptLogin (node.ce2b59): 18

2026-07-18

IntrusionUserCompromise (node.cfb4f7): 289

ReconScanning (node.ce2b59): 3

ReconScanning (node.9c1411): 1

DShield reports (IP summary, reports)

2026-07-19

Number of reports: 11

Distinct targets: 3

Origin AS

AS57169 - EDIS-AS-EU

BGP Prefix

213.111.187.0/24

geo

Russia, Moscow

🕑 Europe/Moscow

hostname

140.187.111.213.in-addr.arpa

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

213.111.176.0 - 213.111.191.255

last_activity

2026-07-19 08:03:54

last_warden_event

2026-07-19 08:03:54

rep

0.05444949819003708

reserved_range

0

Shodan's InternetDB

Open ports: 22

Tags: –

CPEs: cpe:/o:debian:debian_linux, cpe:/a:openbsd:openssh:10.0p2, cpe:/o:linux:linux_kernel

ts_added

2026-07-18 23:23:44.198000

ts_last_update

2026-07-28 23:23:50.124000

Warden event timeline

DShield event timeline

Presence on blacklists