Question
Is there anything I can do if someone try to connect on my droplet?
I’m getting multiple tries to connect on my droplet from 211.251.237.142, is there any thing we can do?
It keeps trying with different users.
https://www.abuseipdb.com/check/211.251.237.142
Seems to be a Korean ip.
Sep 10 10:42:43 node-1506570992471-1gb-nyc1-01 sshd[6293]: Invalid user oracle from 211.251.237.142
Sep 10 10:42:43 node-1506570992471-1gb-nyc1-01 sshd[6293]: inputuserauthrequest: invalid user oracle [preauth]
Sep 10 10:42:44 node-1506570992471-1gb-nyc1-01 sshd[6293]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:46 node-1506570992471-1gb-nyc1-01 sshd[6295]: Invalid user oracle from 211.251.237.142
Sep 10 10:42:46 node-1506570992471-1gb-nyc1-01 sshd[6295]: inputuserauthrequest: invalid user oracle [preauth]
Sep 10 10:42:46 node-1506570992471-1gb-nyc1-01 sshd[6295]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:48 node-1506570992471-1gb-nyc1-01 sshd[6297]: Invalid user oracle from 211.251.237.142
Sep 10 10:42:48 node-1506570992471-1gb-nyc1-01 sshd[6297]: inputuserauthrequest: invalid user oracle [preauth]
Sep 10 10:42:48 node-1506570992471-1gb-nyc1-01 sshd[6297]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:50 node-1506570992471-1gb-nyc1-01 sshd[6299]: Invalid user oracle from 211.251.237.142
Sep 10 10:42:50 node-1506570992471-1gb-nyc1-01 sshd[6299]: inputuserauthrequest: invalid user oracle [preauth]
Sep 10 10:42:50 node-1506570992471-1gb-nyc1-01 sshd[6299]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:52 node-1506570992471-1gb-nyc1-01 sshd[6301]: Invalid user oracle from 211.251.237.142
Sep 10 10:42:52 node-1506570992471-1gb-nyc1-01 sshd[6301]: inputuserauthrequest: invalid user oracle [preauth]
Sep 10 10:42:52 node-1506570992471-1gb-nyc1-01 sshd[6301]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:54 node-1506570992471-1gb-nyc1-01 sshd[6303]: Invalid user nagios from 211.251.237.142
Sep 10 10:42:54 node-1506570992471-1gb-nyc1-01 sshd[6303]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:42:54 node-1506570992471-1gb-nyc1-01 sshd[6303]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:56 node-1506570992471-1gb-nyc1-01 sshd[6305]: Invalid user nagios from 211.251.237.142
Sep 10 10:42:56 node-1506570992471-1gb-nyc1-01 sshd[6305]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:42:56 node-1506570992471-1gb-nyc1-01 sshd[6305]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:42:58 node-1506570992471-1gb-nyc1-01 sshd[6307]: Invalid user nagios from 211.251.237.142
Sep 10 10:42:58 node-1506570992471-1gb-nyc1-01 sshd[6307]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:42:58 node-1506570992471-1gb-nyc1-01 sshd[6307]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:00 node-1506570992471-1gb-nyc1-01 sshd[6309]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:00 node-1506570992471-1gb-nyc1-01 sshd[6309]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:00 node-1506570992471-1gb-nyc1-01 sshd[6309]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:02 node-1506570992471-1gb-nyc1-01 sshd[6311]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:02 node-1506570992471-1gb-nyc1-01 sshd[6311]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:03 node-1506570992471-1gb-nyc1-01 sshd[6311]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:05 node-1506570992471-1gb-nyc1-01 sshd[6313]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:05 node-1506570992471-1gb-nyc1-01 sshd[6313]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:05 node-1506570992471-1gb-nyc1-01 sshd[6313]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:07 node-1506570992471-1gb-nyc1-01 sshd[6315]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:07 node-1506570992471-1gb-nyc1-01 sshd[6315]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:07 node-1506570992471-1gb-nyc1-01 sshd[6315]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:09 node-1506570992471-1gb-nyc1-01 sshd[6317]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:09 node-1506570992471-1gb-nyc1-01 sshd[6317]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:09 node-1506570992471-1gb-nyc1-01 sshd[6317]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:11 node-1506570992471-1gb-nyc1-01 sshd[6319]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:11 node-1506570992471-1gb-nyc1-01 sshd[6319]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:11 node-1506570992471-1gb-nyc1-01 sshd[6319]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:13 node-1506570992471-1gb-nyc1-01 sshd[6321]: Invalid user naigos from 211.251.237.142
Sep 10 10:43:13 node-1506570992471-1gb-nyc1-01 sshd[6321]: inputuserauthrequest: invalid user naigos [preauth]
Sep 10 10:43:13 node-1506570992471-1gb-nyc1-01 sshd[6321]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:15 node-1506570992471-1gb-nyc1-01 sshd[6323]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:15 node-1506570992471-1gb-nyc1-01 sshd[6323]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:15 node-1506570992471-1gb-nyc1-01 sshd[6323]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:17 node-1506570992471-1gb-nyc1-01 sshd[6325]: Invalid user nagios from 211.251.237.142
Sep 10 10:43:17 node-1506570992471-1gb-nyc1-01 sshd[6325]: inputuserauthrequest: invalid user nagios [preauth]
Sep 10 10:43:17 node-1506570992471-1gb-nyc1-01 sshd[6325]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:19 node-1506570992471-1gb-nyc1-01 sshd[6327]: Invalid user git from 211.251.237.142
Sep 10 10:43:19 node-1506570992471-1gb-nyc1-01 sshd[6327]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:20 node-1506570992471-1gb-nyc1-01 sshd[6327]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:21 node-1506570992471-1gb-nyc1-01 sshd[6329]: Invalid user git from 211.251.237.142
Sep 10 10:43:21 node-1506570992471-1gb-nyc1-01 sshd[6329]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:22 node-1506570992471-1gb-nyc1-01 sshd[6329]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:23 node-1506570992471-1gb-nyc1-01 sshd[6331]: Invalid user git from 211.251.237.142
Sep 10 10:43:23 node-1506570992471-1gb-nyc1-01 sshd[6331]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:24 node-1506570992471-1gb-nyc1-01 sshd[6331]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:25 node-1506570992471-1gb-nyc1-01 sshd[6333]: Invalid user git from 211.251.237.142
Sep 10 10:43:25 node-1506570992471-1gb-nyc1-01 sshd[6333]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:25 node-1506570992471-1gb-nyc1-01 sshd[6333]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:27 node-1506570992471-1gb-nyc1-01 sshd[6335]: Invalid user git from 211.251.237.142
Sep 10 10:43:27 node-1506570992471-1gb-nyc1-01 sshd[6335]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:28 node-1506570992471-1gb-nyc1-01 sshd[6335]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:29 node-1506570992471-1gb-nyc1-01 sshd[6337]: Invalid user git from 211.251.237.142
Sep 10 10:43:29 node-1506570992471-1gb-nyc1-01 sshd[6337]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:30 node-1506570992471-1gb-nyc1-01 sshd[6337]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:31 node-1506570992471-1gb-nyc1-01 sshd[6339]: Invalid user git from 211.251.237.142
Sep 10 10:43:31 node-1506570992471-1gb-nyc1-01 sshd[6339]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:32 node-1506570992471-1gb-nyc1-01 sshd[6339]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:34 node-1506570992471-1gb-nyc1-01 sshd[6341]: Invalid user git from 211.251.237.142
Sep 10 10:43:34 node-1506570992471-1gb-nyc1-01 sshd[6341]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:34 node-1506570992471-1gb-nyc1-01 sshd[6341]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:36 node-1506570992471-1gb-nyc1-01 sshd[6343]: Invalid user git from 211.251.237.142
Sep 10 10:43:36 node-1506570992471-1gb-nyc1-01 sshd[6343]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:36 node-1506570992471-1gb-nyc1-01 sshd[6343]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:38 node-1506570992471-1gb-nyc1-01 sshd[6345]: Invalid user git from 211.251.237.142
Sep 10 10:43:38 node-1506570992471-1gb-nyc1-01 sshd[6345]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:38 node-1506570992471-1gb-nyc1-01 sshd[6345]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:40 node-1506570992471-1gb-nyc1-01 sshd[6347]: Invalid user git from 211.251.237.142
Sep 10 10:43:40 node-1506570992471-1gb-nyc1-01 sshd[6347]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:40 node-1506570992471-1gb-nyc1-01 sshd[6347]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:42 node-1506570992471-1gb-nyc1-01 sshd[6349]: Invalid user git from 211.251.237.142
Sep 10 10:43:42 node-1506570992471-1gb-nyc1-01 sshd[6349]: inputuserauthrequest: invalid user git [preauth]
Sep 10 10:43:42 node-1506570992471-1gb-nyc1-01 sshd[6349]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:44 node-1506570992471-1gb-nyc1-01 sshd[6351]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:44 node-1506570992471-1gb-nyc1-01 sshd[6351]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:44 node-1506570992471-1gb-nyc1-01 sshd[6351]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:46 node-1506570992471-1gb-nyc1-01 sshd[6353]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:46 node-1506570992471-1gb-nyc1-01 sshd[6353]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:46 node-1506570992471-1gb-nyc1-01 sshd[6353]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:48 node-1506570992471-1gb-nyc1-01 sshd[6355]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:48 node-1506570992471-1gb-nyc1-01 sshd[6355]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:48 node-1506570992471-1gb-nyc1-01 sshd[6355]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:50 node-1506570992471-1gb-nyc1-01 sshd[6357]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:50 node-1506570992471-1gb-nyc1-01 sshd[6357]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:51 node-1506570992471-1gb-nyc1-01 sshd[6357]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:52 node-1506570992471-1gb-nyc1-01 sshd[6359]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:52 node-1506570992471-1gb-nyc1-01 sshd[6359]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:53 node-1506570992471-1gb-nyc1-01 sshd[6359]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:54 node-1506570992471-1gb-nyc1-01 sshd[6361]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:54 node-1506570992471-1gb-nyc1-01 sshd[6361]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:55 node-1506570992471-1gb-nyc1-01 sshd[6361]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:56 node-1506570992471-1gb-nyc1-01 sshd[6363]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:57 node-1506570992471-1gb-nyc1-01 sshd[6363]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:57 node-1506570992471-1gb-nyc1-01 sshd[6363]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:43:59 node-1506570992471-1gb-nyc1-01 sshd[6365]: Invalid user postgres from 211.251.237.142
Sep 10 10:43:59 node-1506570992471-1gb-nyc1-01 sshd[6365]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:43:59 node-1506570992471-1gb-nyc1-01 sshd[6365]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:01 node-1506570992471-1gb-nyc1-01 sshd[6367]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:01 node-1506570992471-1gb-nyc1-01 sshd[6367]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:01 node-1506570992471-1gb-nyc1-01 sshd[6367]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:03 node-1506570992471-1gb-nyc1-01 sshd[6369]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:03 node-1506570992471-1gb-nyc1-01 sshd[6369]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:03 node-1506570992471-1gb-nyc1-01 sshd[6369]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:05 node-1506570992471-1gb-nyc1-01 sshd[6371]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:05 node-1506570992471-1gb-nyc1-01 sshd[6371]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:05 node-1506570992471-1gb-nyc1-01 sshd[6371]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:07 node-1506570992471-1gb-nyc1-01 sshd[6373]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:07 node-1506570992471-1gb-nyc1-01 sshd[6373]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:08 node-1506570992471-1gb-nyc1-01 sshd[6373]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:09 node-1506570992471-1gb-nyc1-01 sshd[6375]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:09 node-1506570992471-1gb-nyc1-01 sshd[6375]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:10 node-1506570992471-1gb-nyc1-01 sshd[6375]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:11 node-1506570992471-1gb-nyc1-01 sshd[6377]: Invalid user postgres from 211.251.237.142
Sep 10 10:44:11 node-1506570992471-1gb-nyc1-01 sshd[6377]: inputuserauthrequest: invalid user postgres [preauth]
Sep 10 10:44:11 node-1506570992471-1gb-nyc1-01 sshd[6377]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:13 node-1506570992471-1gb-nyc1-01 sshd[6379]: Invalid user admin from 211.251.237.142
Sep 10 10:44:13 node-1506570992471-1gb-nyc1-01 sshd[6379]: inputuserauthrequest: invalid user admin [preauth]
Sep 10 10:44:14 node-1506570992471-1gb-nyc1-01 sshd[6379]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:15 node-1506570992471-1gb-nyc1-01 sshd[6381]: Invalid user admin from 211.251.237.142
Sep 10 10:44:15 node-1506570992471-1gb-nyc1-01 sshd[6381]: inputuserauthrequest: invalid user admin [preauth]
Sep 10 10:44:16 node-1506570992471-1gb-nyc1-01 sshd[6381]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
Sep 10 10:44:18 node-1506570992471-1gb-nyc1-01 sshd[6383]: Invalid user admin from 211.251.237.142
Sep 10 10:44:18 node-1506570992471-1gb-nyc1-01 sshd[6383]: inputuserauthrequest: invalid user admin [preauth]
Sep 10 10:44:18 node-1506570992471-1gb-nyc1-01 sshd[6383]: Received disconnect from 211.251.237.142: 11: Bye Bye [preauth]
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
×
Is there a way to block this IP on DigitalOcean or should I install firewall on my machine?
You can use a service like Fail2ban, to auto block temporarily an attacker.
https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-7