City: unknown
Region: unknown
Country: Germany
Internet Service Provider: UpCloud Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Apr 9 07:10:13 www2 sshd\[48360\]: Invalid user cristiane from 94.237.93.99Apr 9 07:10:15 www2 sshd\[48360\]: Failed password for invalid user cristiane from 94.237.93.99 port 43016 ssh2Apr 9 07:13:48 www2 sshd\[48567\]: Invalid user work from 94.237.93.99 ... |
2020-04-09 12:25:51 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.237.93.83 | attackbotsspam | xmlrpc attack |
2019-11-01 22:38:48 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.237.93.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.237.93.99. IN A
;; AUTHORITY SECTION:
. 338 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040801 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 09 12:25:46 CST 2020
;; MSG SIZE rcvd: 11699.93.237.94.in-addr.arpa domain name pointer 94-237-93-99.de-fra1.upcloud.host.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
99.93.237.94.in-addr.arpa name = 94-237-93-99.de-fra1.upcloud.host.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.185.54 | attack | Nov 18 08:06:19 hanapaa sshd\[24543\]: Invalid user gavidia from 106.12.185.54 Nov 18 08:06:19 hanapaa sshd\[24543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.185.54 Nov 18 08:06:21 hanapaa sshd\[24543\]: Failed password for invalid user gavidia from 106.12.185.54 port 59198 ssh2 Nov 18 08:10:08 hanapaa sshd\[24992\]: Invalid user ab from 106.12.185.54 Nov 18 08:10:08 hanapaa sshd\[24992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.185.54 |
2019-11-19 02:12:31 |
| 159.192.143.249 | attackbotsspam | (sshd) Failed SSH login from 159.192.143.249 (-): 5 in the last 3600 secs |
2019-11-19 02:25:20 |
| 180.68.177.15 | attack | Nov 18 19:21:03 jane sshd[18940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.68.177.15 Nov 18 19:21:05 jane sshd[18940]: Failed password for invalid user hung from 180.68.177.15 port 56588 ssh2 ... |
2019-11-19 02:27:39 |
| 200.54.242.46 | attackbots | Nov 18 19:28:08 SilenceServices sshd[7175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.54.242.46 Nov 18 19:28:11 SilenceServices sshd[7175]: Failed password for invalid user claypoole from 200.54.242.46 port 56848 ssh2 Nov 18 19:32:30 SilenceServices sshd[9999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.54.242.46 |
2019-11-19 02:37:18 |
| 106.53.82.166 | attack | no |
2019-11-19 02:21:48 |
| 178.238.227.208 | attack | [Mon Nov 18 21:50:21.293816 2019] [:error] [pid 4024:tid 140087446652672] [client 178.238.227.208:61000] [client 178.238.227.208] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XdKvrZO3542h6ROpuOBP-AAAARU"]
... |
2019-11-19 02:28:09 |
| 101.89.150.73 | attack | SSH bruteforce (Triggered fail2ban) |
2019-11-19 02:06:30 |
| 106.12.33.50 | attackspam | $f2bV_matches |
2019-11-19 02:12:44 |
| 178.62.28.7 | attackbots | SSH login attempts with user root. |
2019-11-19 02:03:31 |
| 219.91.222.148 | attack | Nov 18 07:59:31 eddieflores sshd\[15735\]: Invalid user backe from 219.91.222.148 Nov 18 07:59:31 eddieflores sshd\[15735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.222.148 Nov 18 07:59:34 eddieflores sshd\[15735\]: Failed password for invalid user backe from 219.91.222.148 port 57301 ssh2 Nov 18 08:03:48 eddieflores sshd\[16048\]: Invalid user lcimonet from 219.91.222.148 Nov 18 08:03:48 eddieflores sshd\[16048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.222.148 |
2019-11-19 02:04:45 |
| 101.230.238.32 | attackspambots | Automatic report - Banned IP Access |
2019-11-19 02:02:54 |
| 192.144.142.72 | attackbots | Nov 18 15:14:20 thevastnessof sshd[31829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.142.72 ... |
2019-11-19 02:10:41 |
| 82.64.2.114 | attack | Automatic report - SSH Brute-Force Attack |
2019-11-19 02:08:19 |
| 222.186.175.167 | attack | Nov 18 19:26:43 ovpn sshd\[11078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Nov 18 19:26:44 ovpn sshd\[11078\]: Failed password for root from 222.186.175.167 port 39336 ssh2 Nov 18 19:26:57 ovpn sshd\[11078\]: Failed password for root from 222.186.175.167 port 39336 ssh2 Nov 18 19:27:00 ovpn sshd\[11125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Nov 18 19:27:02 ovpn sshd\[11125\]: Failed password for root from 222.186.175.167 port 38956 ssh2 |
2019-11-19 02:34:24 |
| 109.194.175.27 | attackspam | Automatic report - Banned IP Access |
2019-11-19 02:11:38 |