AbuseIPDB » 140.213.1.93

140.213.1.93 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 88%: ?

88%

ISP	PT. XL Axiata Tbk
Usage Type	Mobile ISP
Domain Name	xl.co.id
Country	Indonesia
City	Bekasi, Jawa Barat

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 140.213.1.93

Whois 140.213.1.93

IP Abuse Reports for 140.213.1.93:

This IP address has been reported a total of 139 times from 68 distinct sources. 140.213.1.93 was first reported on January 13th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	21 Mar 2023	Feb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user r ... show moreFeb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user root 140.213.1.93 port 18119 [preauth] Feb 4 14:05:04 pbx-router-01.de.pbx-host.com sshd[3118128]: Disconnected from authenticating user admin 140.213.1.93 port 19676 [preauth] Feb 4 14:07:08 pbx-router-01.de.pbx-host.com sshd[3118747]: Disconnected from authenticating user root 140.213.1.93 port 11253 [preauth] Feb 4 14:09:13 pbx-router-01.de.pbx-host.com sshd[3119390]: Disconnected from authenticating user root 140.213.1.93 port 18199 [preauth] Feb 4 14:11:16 pbx-router-01.de.pbx-host.com sshd[3120045]: Disconnected from authenticating user bin 140.213.1.93 port 16822 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user r ... show moreFeb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user root 140.213.1.93 port 18119 [preauth] Feb 4 14:05:04 pbx-router-01.de.pbx-host.com sshd[3118128]: Disconnected from authenticating user admin 140.213.1.93 port 19676 [preauth] Feb 4 14:07:08 pbx-router-01.de.pbx-host.com sshd[3118747]: Disconnected from authenticating user root 140.213.1.93 port 11253 [preauth] Feb 4 14:09:13 pbx-router-01.de.pbx-host.com sshd[3119390]: Disconnected from authenticating user root 140.213.1.93 port 18199 [preauth] Feb 4 14:11:16 pbx-router-01.de.pbx-host.com sshd[3120045]: Disconnected from authenticating user bin 140.213.1.93 port 16822 [preauth] show less	Brute-Force
ipcop.net	21 Mar 2023	Feb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user r ... show moreFeb 4 14:00:05 pbx-router-01.de.pbx-host.com sshd[3116545]: Disconnected from authenticating user root 140.213.1.93 port 18119 [preauth] Feb 4 14:05:04 pbx-router-01.de.pbx-host.com sshd[3118128]: Disconnected from authenticating user admin 140.213.1.93 port 19676 [preauth] Feb 4 14:07:08 pbx-router-01.de.pbx-host.com sshd[3118747]: Disconnected from authenticating user root 140.213.1.93 port 11253 [preauth] Feb 4 14:09:13 pbx-router-01.de.pbx-host.com sshd[3119390]: Disconnected from authenticating user root 140.213.1.93 port 18199 [preauth] Feb 4 14:11:16 pbx-router-01.de.pbx-host.com sshd[3120045]: Disconnected from authenticating user bin 140.213.1.93 port 16822 [preauth] show less	Brute-Force
ipcop.net	20 Mar 2023	Feb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root ... show moreFeb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root 140.213.1.93 port 19943 [preauth] Feb 3 00:15:01 router02.imr-richtsfeld.de sshd[3434718]: Disconnected from authenticating user root 140.213.1.93 port 17759 [preauth] Feb 3 00:17:00 router02.imr-richtsfeld.de sshd[3434945]: Disconnected from authenticating user root 140.213.1.93 port 19903 [preauth] Feb 3 00:18:55 router02.imr-richtsfeld.de sshd[3435163]: Disconnected from authenticating user root 140.213.1.93 port 20093 [preauth] Feb 3 00:20:51 router02.imr-richtsfeld.de sshd[3435495]: Disconnected from authenticating user root 140.213.1.93 port 20670 [preauth] show less	Brute-Force
ipcop.net	20 Mar 2023	Feb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root ... show moreFeb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root 140.213.1.93 port 19943 [preauth] Feb 3 00:15:01 router02.imr-richtsfeld.de sshd[3434718]: Disconnected from authenticating user root 140.213.1.93 port 17759 [preauth] Feb 3 00:17:00 router02.imr-richtsfeld.de sshd[3434945]: Disconnected from authenticating user root 140.213.1.93 port 19903 [preauth] Feb 3 00:18:55 router02.imr-richtsfeld.de sshd[3435163]: Disconnected from authenticating user root 140.213.1.93 port 20093 [preauth] Feb 3 00:20:51 router02.imr-richtsfeld.de sshd[3435495]: Disconnected from authenticating user root 140.213.1.93 port 20670 [preauth] show less	Brute-Force
ipcop.net	20 Mar 2023	Feb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root ... show moreFeb 3 00:09:56 router02.imr-richtsfeld.de sshd[3434189]: Disconnected from authenticating user root 140.213.1.93 port 19943 [preauth] Feb 3 00:15:01 router02.imr-richtsfeld.de sshd[3434718]: Disconnected from authenticating user root 140.213.1.93 port 17759 [preauth] Feb 3 00:17:00 router02.imr-richtsfeld.de sshd[3434945]: Disconnected from authenticating user root 140.213.1.93 port 19903 [preauth] Feb 3 00:18:55 router02.imr-richtsfeld.de sshd[3435163]: Disconnected from authenticating user root 140.213.1.93 port 20093 [preauth] Feb 3 00:20:51 router02.imr-richtsfeld.de sshd[3435495]: Disconnected from authenticating user root 140.213.1.93 port 20670 [preauth] show less	Brute-Force
etu brutus	19 Feb 2023	23/2/[email protected]:13:24: FAIL: Alarm-Network address from=140.213.1.93 ...	Hacking Brute-Force SSH
Justin Catello	04 Feb 2023	140.213.1.93 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more140.213.1.93 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 4 11:21:56 9835 sshd[8414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.233.177.113 user=root Feb 4 11:21:44 9835 sshd[8411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.153.108 user=root Feb 4 11:21:47 9835 sshd[8411]: Failed password for root from 137.74.153.108 port 38694 ssh2 Feb 4 11:21:31 9835 sshd[8409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.213.1.93 user=root Feb 4 11:21:33 9835 sshd[8409]: Failed password for root from 140.213.1.93 port 13599 ssh2 IP Addresses Blocked: 213.233.177.113 (IR/Iran/-) 137.74.153.108 (FR/France/ip108.ip-137-74-153.eu) show less	Brute-Force SSH
Gian	04 Feb 2023	Feb 4 16:18:51 sshd[2210174]: Disconnected from authenticating user root 140.213.1.93 port 13574 [ ... show moreFeb 4 16:18:51 sshd[2210174]: Disconnected from authenticating user root 140.213.1.93 port 13574 [preauth] Feb 4 16:22:49 sshd[2211495]: Disconnected from authenticating user root 140.213.1.93 port 14067 [preauth] Feb 4 16:24:49 sshd[2212179]: Disconnected from authenticating user root 140.213.1.93 port 15965 [preauth] show less	Brute-Force SSH
lewisgill.com	04 Feb 2023	2023-02-04T15:16:11.219021localhost.localdomain sshd[2940164]: Invalid user administrator from 140.2 ... show more2023-02-04T15:16:11.219021localhost.localdomain sshd[2940164]: Invalid user administrator from 140.213.1.93 port 11525 2023-02-04T15:16:11.223562localhost.localdomain sshd[2940164]: Failed password for invalid user administrator from 140.213.1.93 port 11525 ssh2 2023-02-04T15:19:02.695269localhost.localdomain sshd[2940172]: Failed password for root from 140.213.1.93 port 18142 ssh2 2023-02-04T15:21:08.335259localhost.localdomain sshd[2940176]: Failed password for root from 140.213.1.93 port 18250 ssh2 2023-02-04T15:23:07.995409localhost.localdomain sshd[2940182]: Failed password for root from 140.213.1.93 port 17717 ssh2 ... show less	Hacking Brute-Force SSH
Justin Catello	04 Feb 2023	140.213.1.93 (ID/Indonesia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more140.213.1.93 (ID/Indonesia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 4 08:47:40 13987 sshd[5023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.192.136.43 user=root Feb 4 08:47:42 13987 sshd[5023]: Failed password for root from 91.192.136.43 port 34424 ssh2 Feb 4 08:46:58 13987 sshd[4967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.192.136.43 user=root Feb 4 08:47:00 13987 sshd[4967]: Failed password for root from 91.192.136.43 port 56692 ssh2 Feb 4 09:18:14 13987 sshd[6990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.213.1.93 user=root Feb 4 08:48:03 13987 sshd[5082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.192.136.43 user=root IP Addresses Blocked: 91.192.136.43 (UA/Ukraine/-) show less	Brute-Force SSH
kukki	04 Feb 2023	detected by Fail2Ban	Brute-Force SSH
bitosis	04 Feb 2023	Feb 4 15:46:51 jumphost sshd[285940]: User root from 140.213.1.93 not allowed because none of user& ... show moreFeb 4 15:46:51 jumphost sshd[285940]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups Feb 4 15:48:50 jumphost sshd[285999]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups Feb 4 15:50:48 jumphost sshd[286038]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
bitosis	04 Feb 2023	Feb 4 15:09:31 jumphost sshd[285146]: User root from 140.213.1.93 not allowed because none of user& ... show moreFeb 4 15:09:31 jumphost sshd[285146]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups Feb 4 15:13:46 jumphost sshd[285242]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups Feb 4 15:15:45 jumphost sshd[285314]: User root from 140.213.1.93 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
M127	04 Feb 2023	Feb 4 14:10:15 scw-tender-jepsen sshd[2257]: Failed password for root from 140.213.1.93 port 13259 ... show moreFeb 4 14:10:15 scw-tender-jepsen sshd[2257]: Failed password for root from 140.213.1.93 port 13259 ssh2 show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩