City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.108.242.140 | attackspam | Oct 11 13:56:20 NPSTNNYC01T sshd[11746]: Failed password for root from 93.108.242.140 port 34022 ssh2 Oct 11 13:59:54 NPSTNNYC01T sshd[12050]: Failed password for root from 93.108.242.140 port 46409 ssh2 ... |
2020-10-12 02:19:22 |
| 93.108.242.140 | attackspam | DATE:2020-10-11 10:26:32, IP:93.108.242.140, PORT:ssh SSH brute force auth (docker-dc) |
2020-10-11 18:09:30 |
| 93.108.242.140 | attackspam | (sshd) Failed SSH login from 93.108.242.140 (PT/Portugal/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 10 17:23:04 server2 sshd[6736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root Oct 10 17:23:04 server2 sshd[6736]: Failed password for root from 93.108.242.140 port 45379 ssh2 Oct 10 17:29:59 server2 sshd[8009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root Oct 10 17:30:00 server2 sshd[8009]: Failed password for root from 93.108.242.140 port 23013 ssh2 Oct 10 17:33:36 server2 sshd[8502]: Invalid user apache from 93.108.242.140 port 43069 |
2020-10-11 01:52:26 |
| 93.108.242.140 | attack | Sep 28 16:55:34 pve1 sshd[19253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 Sep 28 16:55:36 pve1 sshd[19253]: Failed password for invalid user noreply from 93.108.242.140 port 44053 ssh2 ... |
2020-09-29 03:27:29 |
| 93.108.242.140 | attackspam | SSH brutforce |
2020-09-28 19:38:45 |
| 93.108.242.140 | attack | reported through recidive - multiple failed attempts(SSH) |
2020-09-23 21:24:09 |
| 93.108.242.140 | attackspam | Sep 22 18:22:16 vps-51d81928 sshd[296848]: Invalid user sybase from 93.108.242.140 port 45602 Sep 22 18:22:16 vps-51d81928 sshd[296848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 Sep 22 18:22:16 vps-51d81928 sshd[296848]: Invalid user sybase from 93.108.242.140 port 45602 Sep 22 18:22:18 vps-51d81928 sshd[296848]: Failed password for invalid user sybase from 93.108.242.140 port 45602 ssh2 Sep 22 18:26:11 vps-51d81928 sshd[296926]: Invalid user admin from 93.108.242.140 port 33807 ... |
2020-09-23 05:33:48 |
| 93.108.242.140 | attackspambots | 2020-09-12T09:50:37.301838yoshi.linuxbox.ninja sshd[2172536]: Failed password for root from 93.108.242.140 port 17758 ssh2 2020-09-12T09:52:48.702245yoshi.linuxbox.ninja sshd[2174090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root 2020-09-12T09:52:50.841777yoshi.linuxbox.ninja sshd[2174090]: Failed password for root from 93.108.242.140 port 12694 ssh2 ... |
2020-09-12 23:57:31 |
| 93.108.242.140 | attack | <6 unauthorized SSH connections |
2020-09-12 15:59:40 |
| 93.108.242.140 | attackbots | SSH Invalid Login |
2020-09-12 07:46:25 |
| 93.108.242.140 | attackspambots | Aug 28 00:22:49 abendstille sshd\[13400\]: Invalid user cloud from 93.108.242.140 Aug 28 00:22:49 abendstille sshd\[13400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 Aug 28 00:22:51 abendstille sshd\[13400\]: Failed password for invalid user cloud from 93.108.242.140 port 26168 ssh2 Aug 28 00:26:37 abendstille sshd\[17191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root Aug 28 00:26:39 abendstille sshd\[17191\]: Failed password for root from 93.108.242.140 port 16586 ssh2 ... |
2020-08-28 06:35:44 |
| 93.108.242.140 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-21 16:06:32 |
| 93.108.242.140 | attack | Invalid user zrb from 93.108.242.140 port 21599 |
2020-08-20 18:09:21 |
| 93.108.242.140 | attackspambots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-11 00:06:43 |
| 93.108.242.140 | attackbots | Aug 7 08:11:39 lukav-desktop sshd\[20237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root Aug 7 08:11:41 lukav-desktop sshd\[20237\]: Failed password for root from 93.108.242.140 port 27116 ssh2 Aug 7 08:15:37 lukav-desktop sshd\[10126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root Aug 7 08:15:39 lukav-desktop sshd\[10126\]: Failed password for root from 93.108.242.140 port 48624 ssh2 Aug 7 08:19:33 lukav-desktop sshd\[10169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.108.242.140 user=root |
2020-08-07 15:05:55 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.108.242.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.108.242.39. IN A
;; AUTHORITY SECTION:
. 593 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400
;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 02:12:15 CST 2020
;; MSG SIZE rcvd: 11739.242.108.93.in-addr.arpa domain name pointer 39.242.108.93.rev.vodafone.pt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
39.242.108.93.in-addr.arpa name = 39.242.108.93.rev.vodafone.pt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.131.180.249 | attackspambots | Attempted to connect 2 times to port 23 TCP |
2019-10-24 00:01:11 |
| 220.133.245.86 | attackbots | Port Scan |
2019-10-24 00:16:33 |
| 51.79.129.235 | attackbotsspam | 2019-10-22 05:28:11,307 fail2ban.actions [1121]: NOTICE [sshd] Ban 51.79.129.235 2019-10-22 06:41:07,494 fail2ban.actions [1121]: NOTICE [sshd] Ban 51.79.129.235 2019-10-22 07:53:32,805 fail2ban.actions [1121]: NOTICE [sshd] Ban 51.79.129.235 ... |
2019-10-23 23:51:59 |
| 140.143.4.188 | attackbotsspam | 2019-10-23T08:23:10.780543mizuno.rwx.ovh sshd[3139767]: Connection from 140.143.4.188 port 53986 on 78.46.61.178 port 22 rdomain "" 2019-10-23T08:23:12.891890mizuno.rwx.ovh sshd[3139767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.4.188 user=root 2019-10-23T08:23:14.291201mizuno.rwx.ovh sshd[3139767]: Failed password for root from 140.143.4.188 port 53986 ssh2 2019-10-23T08:46:00.432638mizuno.rwx.ovh sshd[3143342]: Connection from 140.143.4.188 port 58392 on 78.46.61.178 port 22 rdomain "" 2019-10-23T08:46:01.854026mizuno.rwx.ovh sshd[3143342]: Invalid user wnews from 140.143.4.188 port 58392 ... |
2019-10-23 23:39:19 |
| 47.22.135.70 | attackbotsspam | Oct 23 17:04:06 nginx sshd[84950]: Connection from 47.22.135.70 port 40634 on 10.23.102.80 port 22 Oct 23 17:04:07 nginx sshd[84950]: Connection closed by 47.22.135.70 port 40634 [preauth] |
2019-10-23 23:38:37 |
| 196.52.43.93 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-23 23:33:22 |
| 139.59.83.175 | attack | techno.ws 139.59.83.175 \[23/Oct/2019:13:45:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 5604 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" techno.ws 139.59.83.175 \[23/Oct/2019:13:46:05 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4070 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-23 23:36:07 |
| 83.76.24.180 | attackbotsspam | 2019-10-2315:09:01dovecot_plainauthenticatorfailedfor180.24.76.83.dynamic.wline.res.cust.swisscom.ch\([IPv6:::ffff:192.168.1.109]\)[83.76.24.180]:52454:535Incorrectauthenticationdata\(set_id=info@alphaboulder.ch\)2019-10-2315:09:07dovecot_loginauthenticatorfailedfor180.24.76.83.dynamic.wline.res.cust.swisscom.ch\([IPv6:::ffff:192.168.1.109]\)[83.76.24.180]:52454:535Incorrectauthenticationdata\(set_id=info@alphaboulder.ch\)2019-10-2315:09:13dovecot_plainauthenticatorfailedfor180.24.76.83.dynamic.wline.res.cust.swisscom.ch\([IPv6:::ffff:192.168.1.109]\)[83.76.24.180]:52455:535Incorrectauthenticationdata\(set_id=info@alphaboulder.ch\)2019-10-2315:09:19dovecot_loginauthenticatorfailedfor180.24.76.83.dynamic.wline.res.cust.swisscom.ch\([IPv6:::ffff:192.168.1.109]\)[83.76.24.180]:52455:535Incorrectauthenticationdata\(set_id=info@alphaboulder.ch\)2019-10-2315:37:01dovecot_plainauthenticatorfailedfor180.24.76.83.dynamic.wline.res.cust.swisscom.ch\([IPv6:::ffff:192.168.1.109]\)[83.76.24.180]:52489:535Incorrectauthenti |
2019-10-24 00:15:14 |
| 198.108.66.121 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-23 23:48:08 |
| 178.128.150.158 | attack | Oct 23 11:10:41 debian sshd\[2252\]: Invalid user deploy from 178.128.150.158 port 57558 Oct 23 11:10:41 debian sshd\[2252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 Oct 23 11:10:43 debian sshd\[2252\]: Failed password for invalid user deploy from 178.128.150.158 port 57558 ssh2 ... |
2019-10-24 00:16:51 |
| 104.37.185.151 | attackspambots | Oct 23 17:37:31 master sshd[30517]: Failed password for invalid user administrador from 104.37.185.151 port 39254 ssh2 Oct 23 17:52:34 master sshd[30531]: Failed password for invalid user gabri from 104.37.185.151 port 42072 ssh2 Oct 23 17:56:00 master sshd[30533]: Failed password for invalid user sasha from 104.37.185.151 port 55490 ssh2 Oct 23 17:59:19 master sshd[30535]: Failed password for invalid user massimo from 104.37.185.151 port 40266 ssh2 Oct 23 18:02:44 master sshd[30841]: Failed password for invalid user testftp from 104.37.185.151 port 54018 ssh2 Oct 23 18:06:10 master sshd[30843]: Failed password for root from 104.37.185.151 port 40036 ssh2 |
2019-10-23 23:55:46 |
| 40.120.48.155 | attack | Oct 23 13:38:59 tor-proxy-06 sshd\[28302\]: Invalid user professor from 40.120.48.155 port 45560 Oct 23 13:42:36 tor-proxy-06 sshd\[28319\]: Invalid user gitlab from 40.120.48.155 port 40692 Oct 23 13:46:04 tor-proxy-06 sshd\[28372\]: User root from 40.120.48.155 not allowed because not listed in AllowUsers ... |
2019-10-23 23:37:26 |
| 92.63.194.47 | attackbots | Automatic report - Banned IP Access |
2019-10-23 23:46:02 |
| 222.186.190.92 | attackspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Failed password for root from 222.186.190.92 port 12346 ssh2 Failed password for root from 222.186.190.92 port 12346 ssh2 Failed password for root from 222.186.190.92 port 12346 ssh2 Failed password for root from 222.186.190.92 port 12346 ssh2 |
2019-10-24 00:08:07 |
| 45.58.139.100 | attackspam | Spam |
2019-10-24 00:06:04 |