212.83.138.90

Classification: Malicious

212.83.138.90 is a malicious IP address in Paris, FR. 920 sightings from AbuseIPDB and Blocklist.de (Bruteforce, SSH Attacker), last seen 2026-10-09.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host AbuseIPDB 2026-10-01 14:49:33 2026-10-09 17:24:06 attacker compromised malicious-activity
HTTP Attacker AbuseIPDB 2026-09-25 13:22:08 2026-10-09 17:24:06 attacker malicious-activity
Port Scanner AbuseIPDB 2026-09-25 13:23:52 2026-10-08 20:50:01 malicious-activity reconnaissance
Hacking AbuseIPDB 2026-09-25 15:07:49 2026-10-08 06:10:17 attacker malicious-activity
Bruteforce AbuseIPDB 2026-07-29 10:34:03 2026-10-03 03:08:16 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-07-29 10:34:03 2026-10-03 03:08:16 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-10-01 18:58:36 2026-10-02 19:55:15 attacker malicious-activity
Known Attacker AbuseIPDB 2026-10-02 01:19:38 2026-10-02 19:55:15 attacker malicious-activity
Mail Spammer AbuseIPDB 2026-10-02 01:19:38 2026-10-02 19:55:15 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-09-25 22:26:03 2026-10-02 19:55:15 anomalous-activity
HTTP Attacker Blocklist.de 2021-08-10 03:04:51 2026-09-26 07:00:39 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2021-08-10 03:17:17 2021-08-10 03:17:17 malicious-activity

Tags

apache ddos rfi attacker login bruteforce bot joomla wordpress

Whois information

AS name
AS12876 Scaleway
AS registry
ripencc
AS date
1998-12-14 00:00:00
AS CIDR
212.83.128.0/19
Registrant
Scaleway
City
Paris
Postal code
75001
Country
FR — France 🇫🇷
First indexed
2021-08-10 03:04:51
Last updated
2026-10-15 05:17:43

Malicious IPs in the same CIDR

212.83.149.217 212.83.157.140 212.83.136.22 212.83.133.74 212.83.152.126 212.83.153.241 212.83.152.146 212.83.138.90 212.83.128.2