59.93.94.210

MultiHost/MultiPort Probe, Scan, Hack -

list.rtbh.com.tr report: tcp/0

This IP address carried out 178 port scanning attempts on 15-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/59.93.94.210

This IP address carried out 39 SSH credential attack (attempts) on 15-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

list.rtbh.com.tr report: tcp/0

Sep 15 06:11:58 NODE-1 sshd[4078]: Disconnected from authenticating user root 59.93.94.210 port 47271 [preauth] Sep 15 06:14:44 NODE-1 sshd[100040]: Disconnected from authenticating user root 59.93.94.210 port 57364 [preauth] Sep 15 06:17:30 NODE-1 s ... show more Sep 15 06:11:58 NODE-1 sshd[4078]: Disconnected from authenticating user root 59.93.94.210 port 47271 [preauth] Sep 15 06:14:44 NODE-1 sshd[100040]: Disconnected from authenticating user root 59.93.94.210 port 57364 [preauth] Sep 15 06:17:30 NODE-1 sshd[190314]: Disconnected from authenticating user ubuntu 59.93.94.210 port 38600 [preauth] Sep 15 06:20:13 NODE-1 sshd[280840]: Invalid user demo from 59.93.94.210 port 47928 Sep 15 06:20:13 NODE-1 sshd[280840]: Disconnected from invalid user demo 59.93.94.210 port 47928 [preauth] ... show less

2025-09-15T04:13:05.234057+00:00 polka sshd-session[175137]: Disconnected from authenticating user root 59.93.94.210 port 41588 [preauth] 2025-09-15T04:15:47.900605+00:00 polka sshd-session[175151]: Invalid user ubuntu from 59.93.94.210 port 51027 20 ... show more 2025-09-15T04:13:05.234057+00:00 polka sshd-session[175137]: Disconnected from authenticating user root 59.93.94.210 port 41588 [preauth] 2025-09-15T04:15:47.900605+00:00 polka sshd-session[175151]: Invalid user ubuntu from 59.93.94.210 port 51027 2025-09-15T04:15:48.023139+00:00 polka sshd-session[175151]: Disconnected from invalid user ubuntu 59.93.94.210 port 51027 [preauth] 2025-09-15T04:18:31.896406+00:00 polka sshd-session[175159]: Invalid user demo from 59.93.94.210 port 60542 2025-09-15T04:18:32.020816+00:00 polka sshd-session[175159]: Disconnected from invalid user demo 59.93.94.210 port 60542 [preauth] ... show less

Sep 15 16:17:34 pdx sshd-session[1552537]: Invalid user ubuntu from 59.93.94.210 port 46713

(sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 23:06:31 15581 sshd[29401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more (sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 23:06:31 15581 sshd[29401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root Sep 14 23:06:33 15581 sshd[29401]: Failed password for root from 59.93.94.210 port 53347 ssh2 Sep 14 23:09:52 15581 sshd[29826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root Sep 14 23:09:54 15581 sshd[29826]: Failed password for root from 59.93.94.210 port 43403 ssh2 Sep 14 23:12:34 15581 sshd[30249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root show less

Sep 15 03:19:49 gx1 sshd[969296]: Invalid user drcom from 59.93.94.210 port 39588 Sep 15 03:30:28 gx1 sshd[969413]: Invalid user pcp from 59.93.94.210 port 46966 Sep 15 04:10:07 gx1 sshd[969568]: Invalid user nodeproxy from 59.93.94.210 port 60190 .. ... show more Sep 15 03:19:49 gx1 sshd[969296]: Invalid user drcom from 59.93.94.210 port 39588 Sep 15 03:30:28 gx1 sshd[969413]: Invalid user pcp from 59.93.94.210 port 46966 Sep 15 04:10:07 gx1 sshd[969568]: Invalid user nodeproxy from 59.93.94.210 port 60190 ... show less

Wordpress malicious attack:[sshd]

Failed password for root from 59.93.94.210 port 58961

(sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 22:49:28 11798 sshd[15517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more (sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 22:49:28 11798 sshd[15517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root Sep 14 22:49:30 11798 sshd[15517]: Failed password for root from 59.93.94.210 port 43472 ssh2 Sep 14 22:54:31 11798 sshd[15891]: Invalid user ts2 from 59.93.94.210 port 53612 Sep 14 22:54:33 11798 sshd[15891]: Failed password for invalid user ts2 from 59.93.94.210 port 53612 ssh2 Sep 14 22:57:10 11798 sshd[16115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root show less

(sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 22:09:36 9750 sshd[4669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... show more (sshd) Failed SSH login from 59.93.94.210 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 22:09:36 9750 sshd[4669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root Sep 14 22:09:38 9750 sshd[4669]: Failed password for root from 59.93.94.210 port 48862 ssh2 Sep 14 22:17:58 9750 sshd[5243]: Invalid user drcom from 59.93.94.210 port 41214 Sep 14 22:18:00 9750 sshd[5243]: Failed password for invalid user drcom from 59.93.94.210 port 41214 ssh2 Sep 14 22:20:41 9750 sshd[5455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.93.94.210 user=root show less