🇩🇪
FeG Deutschland
2026-10-05 04:18:02
(2 days ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇩🇪
CDiehl
2026-10-05 00:39:25
(2 days ago)
Oct 5 02:39:15 centrum sshd-session[3423]: Connection closed by 103.93.141.93 port 42904 [preauth]
...
show more
Oct 5 02:39:15 centrum sshd-session[3423]: Connection closed by 103.93.141.93 port 42904 [preauth]
Oct 5 02:39:24 centrum sshd-session[3426]: Connection closed by 103.93.141.93 port 55722 [preauth]
...
show less
Brute-Force
SSH
🇵🇹
redmihype
2026-10-04 03:44:51
(3 days ago)
SSH tarpit (endlessh)
Brute-Force
SSH
🇷🇸
Scan
2026-10-04 02:03:52
(3 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇨🇭
SOC [GOLINE SA]
2026-10-02 09:55:05
(4 days ago)
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 20 ...
show more
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 2001219 | Severity: 2 | Category: Attempted Information Leak === SOURCE === IP: 103.93.141.93 (IPv4) | Port: 59710 | Country: Bangladesh | ISP: MRN-BD | rDNS: None === TARGET === Host: nextcloud.goline.ch | IP: 185.54.81.37 | Port: 22 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-02 09:55:04 | Action: Blocked
show less
SSH
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-10-02 06:50:23
(4 days ago)
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 20 ...
show more
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 2001219 | Severity: 2 | Category: Attempted Information Leak === SOURCE === IP: 103.93.141.93 (IPv4) | Port: 59710 | Country: Bangladesh | ISP: MRN-BD | rDNS: None === TARGET === Host: nextcloud.goline.ch | IP: 185.54.81.37 | Port: 22 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-02 06:50:22 | Action: Blocked
show less
SSH
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-10-02 02:08:20
(5 days ago)
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 20 ...
show more
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 2001219 | Severity: 2 | Category: Attempted Information Leak === SOURCE === IP: 103.93.141.93 (IPv4) | Port: 59710 | Country: Bangladesh | ISP: MRN-BD | rDNS: None === TARGET === Host: nextcloud.goline.ch | IP: 185.54.81.37 | Port: 22 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-02 02:08:19 | Action: Blocked
show less
SSH
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-10-02 00:59:07
(5 days ago)
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 20 ...
show more
IDS Alert: ET SCAN Potential SSH Scan === ATTACK === Signature: ET SCAN Potential SSH Scan | SID: 2001219 | Severity: 2 | Category: Attempted Information Leak === SOURCE === IP: 103.93.141.93 (IPv4) | Port: 59710 | Country: Bangladesh | ISP: MRN-BD | rDNS: None === TARGET === Host: nextcloud.goline.ch | IP: 185.54.81.37 | Port: 22 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-02 00:59:06 | Action: Blocked
show less
SSH
Brute-Force
🇺🇸
xmission.com
2026-10-01 06:50:10
(5 days ago)
Blocked by UFW (TCP on 22)
Source port: 30738
TTL: 53
Packet length: 60
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 22)
Source port: 30738
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 103.93.141.93) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
SSH
Brute-Force
🇫🇷
security.rdmc.fr
2026-10-01 03:59:44
(6 days ago)
Port Scan Attack proto:TCP src:34646 dst:23
Port Scan
🇺🇸
TPI-Abuse
2026-09-29 03:40:05
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 103.93.141.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 103.93.141.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 23:39:56.601554 2026] [security2:error] [pid 4613:tid 4699] [client 103.93.141.93:39684] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||millievelasco.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "millievelasco.com"] [uri "/"] [unique_id "arszDL5-K7Gj5u9vsnO0UgAAARU"], referer: https://seobacklinkagency.space/dir/white-hat-link-building-136765
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
noconex
2026-09-28 15:57:08
(1 week ago)
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 103.93.141 ...
show more
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 103.93.141.93
show less
Port Scan
Brute-Force
SSH
🇨🇭
backslash
2026-09-27 02:51:00
(1 week ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇷🇸
Scan
2026-09-27 01:28:18
(1 week ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇮🇹
RaffOne
2026-09-26 15:23:31
(1 week ago)
SSH - Attempt to login using invalid or illegal credential
Brute-Force
SSH
