AbuseIPDB » 94.159.107.42

94.159.107.42 was found in our database!

This IP was reported 1,989 times. Confidence of Abuse is 100%: ?

100%

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49531
Hostname(s)	95555.h2.nexus
Domain Name	h2.nexus
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 94.159.107.42

Whois 94.159.107.42

IP Abuse Reports for 94.159.107.42:

This IP address has been reported a total of 1,989 times from 650 distinct sources. 94.159.107.42 was first reported on December 5th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
sf-noh.de	2025-01-17 14:59:53 (1 day ago)	Dec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130< ... show moreDec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130 Dec 24 20:42:17 v2202111159968167802 sshd[775332]: Invalid user amour from 94.159.107.42 port 52286 Dec 24 20:43:33 v2202111159968167802 sshd[775458]: Invalid user teamspeak from 94.159.107.42 port 45070 Dec 24 20:44:48 v2202111159968167802 sshd[775574]: Invalid user jesse from 94.159.107.42 port 60902 Dec 24 20:46:06 v2202111159968167802 sshd[775713]: Invalid user password from 94.159.107.42 port 55632 ... show less	Brute-Force SSH
qli.de	2025-01-17 14:59:52 (1 day ago)	Dec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130< ... show moreDec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130 Dec 24 20:42:17 v2202111159968167802 sshd[775332]: Invalid user amour from 94.159.107.42 port 52286 Dec 24 20:43:33 v2202111159968167802 sshd[775458]: Invalid user teamspeak from 94.159.107.42 port 45070 Dec 24 20:44:48 v2202111159968167802 sshd[775574]: Invalid user jesse from 94.159.107.42 port 60902 Dec 24 20:46:06 v2202111159968167802 sshd[775713]: Invalid user password from 94.159.107.42 port 55632 ... show less	Brute-Force SSH
qli.de	2025-01-04 15:44:40 (2 weeks ago)	Dec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130< ... show moreDec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130 Dec 24 20:42:17 v2202111159968167802 sshd[775332]: Invalid user amour from 94.159.107.42 port 52286 Dec 24 20:43:33 v2202111159968167802 sshd[775458]: Invalid user teamspeak from 94.159.107.42 port 45070 Dec 24 20:44:48 v2202111159968167802 sshd[775574]: Invalid user jesse from 94.159.107.42 port 60902 Dec 24 20:46:06 v2202111159968167802 sshd[775713]: Invalid user password from 94.159.107.42 port 55632 ... show less	Brute-Force SSH
sf-noh.de	2025-01-04 15:44:40 (2 weeks ago)	Dec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130< ... show moreDec 24 20:40:02 v2202111159968167802 sshd[775115]: Invalid user xwang from 94.159.107.42 port 37130 Dec 24 20:42:17 v2202111159968167802 sshd[775332]: Invalid user amour from 94.159.107.42 port 52286 Dec 24 20:43:33 v2202111159968167802 sshd[775458]: Invalid user teamspeak from 94.159.107.42 port 45070 Dec 24 20:44:48 v2202111159968167802 sshd[775574]: Invalid user jesse from 94.159.107.42 port 60902 Dec 24 20:46:06 v2202111159968167802 sshd[775713]: Invalid user password from 94.159.107.42 port 55632 ... show less	Brute-Force SSH
check-the-sum.fr	2025-01-01 01:18:17 (2 weeks ago)	Scan the port number 22 (SSH)	Port Scan SSH
Parth Maniar	2024-12-30 14:17:33 (2 weeks ago)	This IP address carried out 3 SSH credential attack (attempts) on 29-12-2024. For more information o ... show moreThis IP address carried out 3 SSH credential attack (attempts) on 29-12-2024. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
AWW-Admin	2024-12-29 00:06:17 (3 weeks ago)	(sshd) Failed SSH login from 94.159.107.42 (DE/Germany/57274.h2.nexus)	Brute-Force SSH
Andrew Dymov	2024-12-29 00:04:04 (3 weeks ago)	2024-12-29T00:00:10.492320+00:00 sentry sshd[3447786]: Failed password for root from 94.159.107.42 p ... show more2024-12-29T00:00:10.492320+00:00 sentry sshd[3447786]: Failed password for root from 94.159.107.42 port 38052 ssh2 2024-12-29T00:02:05.435982+00:00 sentry sshd[3448762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 user=root 2024-12-29T00:02:07.429680+00:00 sentry sshd[3448762]: Failed password for root from 94.159.107.42 port 53904 ssh2 2024-12-29T00:04:02.146256+00:00 sentry sshd[3449708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 user=root 2024-12-29T00:04:04.198498+00:00 sentry sshd[3449708]: Failed password for root from 94.159.107.42 port 48302 ssh2 ... show less	Brute-Force SSH
Dark0547	2024-12-29 00:01:22 (3 weeks ago)	[2024-12-29 00:00:02.281425] SSH/22 Unautorized connection. SSH Brute-force.	Hacking Brute-Force SSH IoT Targeted
1000grad.com	2024-12-29 00:00:13 (3 weeks ago)	Dec 29 00:58:07 monitoring sshd[1736796]: User root from 94.159.107.42 not allowed because none of u ... show moreDec 29 00:58:07 monitoring sshd[1736796]: User root from 94.159.107.42 not allowed because none of user's groups are listed in AllowGroups Dec 29 00:58:07 monitoring sshd[1736796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 user=root Dec 29 00:58:09 monitoring sshd[1736796]: Failed password for invalid user root from 94.159.107.42 port 48818 ssh2 Dec 29 01:00:11 monitoring sshd[1736971]: Connection from 94.159.107.42 port 57998 on 5.9.54.139 port 22 rdomain "" Dec 29 01:00:11 monitoring sshd[1736971]: User root from 94.159.107.42 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
electronico	2024-12-28 23:14:18 (3 weeks ago)	Dec 29 10:06:55 electronicohost sshd[3372938]: Failed password for invalid user test101 from 94.159. ... show moreDec 29 10:06:55 electronicohost sshd[3372938]: Failed password for invalid user test101 from 94.159.107.42 port 37942 ssh2 Dec 29 10:12:27 electronicohost sshd[3373986]: Invalid user server from 94.159.107.42 port 36398 Dec 29 10:12:27 electronicohost sshd[3373986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 Dec 29 10:12:28 electronicohost sshd[3373986]: Failed password for invalid user server from 94.159.107.42 port 36398 ssh2 Dec 29 10:14:18 electronicohost sshd[3374184]: Invalid user sftpuser from 94.159.107.42 port 55478 show less	Brute-Force SSH
JesionZ	2024-12-28 23:13:29 (3 weeks ago)	Dec 29 00:10:21 4429 sshd[1866663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreDec 29 00:10:21 4429 sshd[1866663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 Dec 29 00:10:23 4429 sshd[1866663]: Failed password for invalid user test101 from 94.159.107.42 port 50920 ssh2 Dec 29 00:13:28 4429 sshd[1866778]: Invalid user server from 94.159.107.42 port 53302 ... show less	Brute-Force SSH
bittiguru.fi	2024-12-28 23:03:32 (3 weeks ago)	Dec 29 01:01:44 www sshd\[13939\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not m ... show moreDec 29 01:01:44 www sshd\[13939\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 29 01:01:46 www sshd\[13939\]: Failed password for root from 94.159.107.42 port 60122 ssh2Dec 29 01:03:32 www sshd\[13980\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... show less	Brute-Force SSH
bittiguru.fi	2024-12-28 22:45:38 (3 weeks ago)	Dec 29 00:43:47 www sshd\[13533\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not m ... show moreDec 29 00:43:47 www sshd\[13533\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 29 00:43:48 www sshd\[13533\]: Failed password for root from 94.159.107.42 port 49646 ssh2Dec 29 00:45:35 www sshd\[13635\]: Address 94.159.107.42 maps to 57274.h2.nexus, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... show less	Brute-Force SSH
sailx.co	2024-12-28 22:36:04 (3 weeks ago)	2024-12-28T22:32:12.621130jump1.sailx.co sshd[18952]: Failed password for root from 94.159.107.42 po ... show more2024-12-28T22:32:12.621130jump1.sailx.co sshd[18952]: Failed password for root from 94.159.107.42 port 35356 ssh2 2024-12-28T22:34:09.630013jump1.sailx.co sshd[19124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 user=root 2024-12-28T22:34:11.318562jump1.sailx.co sshd[19124]: Failed password for root from 94.159.107.42 port 60294 ssh2 2024-12-28T22:36:01.012009jump1.sailx.co sshd[19158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.107.42 user=root 2024-12-28T22:36:03.272540jump1.sailx.co sshd[19158]: Failed password for root from 94.159.107.42 port 54334 ssh2 ... show less	Brute-Force SSH