City: unknown
Region: unknown
Country: United States
Internet Service Provider: Global Frag Networks
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Jan 7 20:47:46 mxgate1 postfix/postscreen[8982]: CONNECT from [104.148.64.185]:51528 to [176.31.12.44]:25 Jan 7 20:47:46 mxgate1 postfix/dnsblog[9025]: addr 104.148.64.185 listed by domain zen.spamhaus.org as 127.0.0.3 Jan 7 20:47:47 mxgate1 postfix/dnsblog[9026]: addr 104.148.64.185 listed by domain b.barracudacentral.org as 127.0.0.2 Jan 7 20:47:52 mxgate1 postfix/postscreen[8982]: DNSBL rank 3 for [104.148.64.185]:51528 Jan x@x Jan 7 20:47:53 mxgate1 postfix/postscreen[8982]: DISCONNECT [104.148.64.185]:51528 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.64.185 |
2020-01-08 17:53:27 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.148.64.136 | attackspam | Nov 25 07:13:40 mxgate1 postfix/postscreen[31676]: CONNECT from [104.148.64.136]:60602 to [176.31.12.44]:25 Nov 25 07:13:40 mxgate1 postfix/dnsblog[31678]: addr 104.148.64.136 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 25 07:13:40 mxgate1 postfix/dnsblog[31680]: addr 104.148.64.136 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 25 07:13:46 mxgate1 postfix/postscreen[31676]: DNSBL rank 3 for [104.148.64.136]:60602 Nov x@x Nov 25 07:13:47 mxgate1 postfix/postscreen[31676]: DISCONNECT [104.148.64.136]:60602 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.64.136 |
2019-11-25 19:58:48 |
| 104.148.64.174 | attackspam | 10.10.2019 13:58:30 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F |
2019-10-10 21:30:17 |
| 104.148.64.135 | attackspam | Jul 30 04:21:07 mxgate1 postfix/postscreen[8687]: CONNECT from [104.148.64.135]:60088 to [176.31.12.44]:25 Jul 30 04:21:07 mxgate1 postfix/dnsblog[8958]: addr 104.148.64.135 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 30 04:21:13 mxgate1 postfix/postscreen[8687]: DNSBL rank 2 for [104.148.64.135]:60088 Jul x@x Jul 30 04:21:14 mxgate1 postfix/postscreen[8687]: DISCONNECT [104.148.64.135]:60088 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.64.135 |
2019-07-30 13:41:40 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.64.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.64.185. IN A
;; AUTHORITY SECTION:
. 126 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400
;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 17:53:24 CST 2020
;; MSG SIZE rcvd: 118Host 185.64.148.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 185.64.148.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.54.160.21 | attackspambots | firewall-block, port(s): 2375/tcp, 4506/tcp |
2020-07-23 07:33:10 |
| 171.224.82.223 | attackbots | Failed RDP login |
2020-07-23 07:57:52 |
| 179.222.96.70 | attackspambots | 2020-07-22T23:28:44.181424shield sshd\[13629\]: Invalid user e from 179.222.96.70 port 41396 2020-07-22T23:28:44.192721shield sshd\[13629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 2020-07-22T23:28:46.525467shield sshd\[13629\]: Failed password for invalid user e from 179.222.96.70 port 41396 ssh2 2020-07-22T23:33:14.330059shield sshd\[14424\]: Invalid user andrzej from 179.222.96.70 port 46303 2020-07-22T23:33:14.341910shield sshd\[14424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 |
2020-07-23 07:43:40 |
| 188.22.2.98 | attackbots | Failed RDP login |
2020-07-23 07:49:08 |
| 37.144.61.72 | attackspambots | Failed RDP login |
2020-07-23 07:43:10 |
| 106.12.89.206 | attack | Jul 23 00:51:18 piServer sshd[23946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206 Jul 23 00:51:19 piServer sshd[23946]: Failed password for invalid user zhangbo from 106.12.89.206 port 38326 ssh2 Jul 23 00:55:06 piServer sshd[24321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206 ... |
2020-07-23 07:58:26 |
| 115.146.126.209 | attackspam | Jul 23 01:28:45 fhem-rasp sshd[18904]: Invalid user denise from 115.146.126.209 port 39244 ... |
2020-07-23 07:51:05 |
| 107.170.178.103 | attackspam | *Port Scan* detected from 107.170.178.103 (US/United States/New York/New York/tapafriend.com). 4 hits in the last 106 seconds |
2020-07-23 08:00:58 |
| 192.99.34.42 | attackspambots | Sniffing for wp-login |
2020-07-23 07:53:00 |
| 98.194.110.50 | attackbots | Port Scan detected! ... |
2020-07-23 08:02:45 |
| 222.186.175.182 | attackbots | Jul 23 01:49:11 nextcloud sshd\[4382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Jul 23 01:49:13 nextcloud sshd\[4382\]: Failed password for root from 222.186.175.182 port 29602 ssh2 Jul 23 01:49:35 nextcloud sshd\[4798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root |
2020-07-23 07:54:43 |
| 80.211.185.217 | attackbots | Distributed brute force attack |
2020-07-23 08:05:37 |
| 191.193.225.202 | attack | *Port Scan* detected from 191.193.225.202 (BR/Brazil/São Paulo/Itu/191-193-225-202.user.vivozap.com.br). 4 hits in the last 166 seconds |
2020-07-23 07:39:15 |
| 103.214.129.204 | attack | Jul 23 02:01:11 * sshd[12322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.129.204 Jul 23 02:01:13 * sshd[12322]: Failed password for invalid user toor from 103.214.129.204 port 39758 ssh2 |
2020-07-23 08:02:15 |
| 206.189.3.176 | attackspam | Jul 23 00:56:10 rocket sshd[12087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.3.176 Jul 23 00:56:13 rocket sshd[12087]: Failed password for invalid user ts3server1 from 206.189.3.176 port 48680 ssh2 Jul 23 01:00:15 rocket sshd[12709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.3.176 ... |
2020-07-23 08:04:54 |