City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Report Spam to: Re: 104.248.145.110 (Administrator of network where email originates) To: abuse@digitalocean.com (Notes) digitalocean.com associated with cloudflare.com |
2019-08-29 03:37:36 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.145.254 | attackbots | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-29 04:25:26 |
| 104.248.145.254 | attack | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-28 20:40:54 |
| 104.248.145.254 | attackspam | firewall-block, port(s): 4205/tcp |
2020-09-28 12:47:46 |
| 104.248.145.254 | attack |
|
2020-09-04 03:43:34 |
| 104.248.145.254 | attackspam | TCP ports : 11182 / 15830 |
2020-09-03 19:19:07 |
| 104.248.145.254 | attack |
|
2020-08-13 04:54:36 |
| 104.248.145.254 | attackbots | " " |
2020-08-07 07:34:25 |
| 104.248.145.254 | attack | Aug 6 16:45:53 debian-2gb-nbg1-2 kernel: \[18983609.468139\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.145.254 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=16833 PROTO=TCP SPT=43412 DPT=32345 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-07 03:27:55 |
| 104.248.145.254 | attackbots | scans once in preceeding hours on the ports (in chronological order) 8748 resulting in total of 6 scans from 104.248.0.0/16 block. |
2020-08-05 20:37:31 |
| 104.248.145.254 | attackbotsspam |
|
2020-08-02 23:36:48 |
| 104.248.145.254 | attack | Port scan denied |
2020-07-28 02:07:35 |
| 104.248.145.254 | attackbots | firewall-block, port(s): 8532/tcp |
2020-07-18 19:01:14 |
| 104.248.145.254 | attackspam | firewall-block, port(s): 29634/tcp |
2020-07-07 00:13:46 |
| 104.248.145.163 | attackspam | Invalid user acj from 104.248.145.163 port 60982 |
2020-02-12 02:45:08 |
| 104.248.145.163 | attackbots | Jan 31 00:05:40 php1 sshd\[4148\]: Invalid user sumita from 104.248.145.163 Jan 31 00:05:40 php1 sshd\[4148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 Jan 31 00:05:42 php1 sshd\[4148\]: Failed password for invalid user sumita from 104.248.145.163 port 49590 ssh2 Jan 31 00:09:03 php1 sshd\[4514\]: Invalid user ilavalagi from 104.248.145.163 Jan 31 00:09:03 php1 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 |
2020-01-31 18:14:00 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.145.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49670
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.145.110. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082801 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 03:37:31 CST 2019
;; MSG SIZE rcvd: 119Host 110.145.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 110.145.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.167.178.41 | attackspambots | Aug 21 04:29:41 server sshd\[32320\]: Invalid user safety from 59.167.178.41 port 60260 Aug 21 04:29:41 server sshd\[32320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.167.178.41 Aug 21 04:29:43 server sshd\[32320\]: Failed password for invalid user safety from 59.167.178.41 port 60260 ssh2 Aug 21 04:34:52 server sshd\[22487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.167.178.41 user=uucp Aug 21 04:34:54 server sshd\[22487\]: Failed password for uucp from 59.167.178.41 port 48668 ssh2 |
2019-08-21 09:55:56 |
| 45.228.137.6 | attackspam | Aug 20 16:13:38 askasleikir sshd[15465]: Failed password for invalid user list from 45.228.137.6 port 36663 ssh2 |
2019-08-21 09:13:05 |
| 185.177.0.188 | attack | SSH Brute Force, server-1 sshd[4339]: Failed password for root from 185.177.0.188 port 44821 ssh2 |
2019-08-21 09:26:50 |
| 173.225.184.54 | attackbotsspam | Brute force attempt |
2019-08-21 09:14:24 |
| 183.111.166.49 | attack | Invalid user scaner from 183.111.166.49 port 52354 |
2019-08-21 09:18:58 |
| 106.75.103.35 | attack | Aug 20 15:29:26 php2 sshd\[31244\]: Invalid user amdsa from 106.75.103.35 Aug 20 15:29:26 php2 sshd\[31244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35 Aug 20 15:29:28 php2 sshd\[31244\]: Failed password for invalid user amdsa from 106.75.103.35 port 39798 ssh2 Aug 20 15:34:22 php2 sshd\[31749\]: Invalid user management from 106.75.103.35 Aug 20 15:34:22 php2 sshd\[31749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35 |
2019-08-21 09:46:56 |
| 103.35.64.73 | attackbotsspam | Aug 20 21:25:59 hcbbdb sshd\[30883\]: Invalid user vincintz from 103.35.64.73 Aug 20 21:25:59 hcbbdb sshd\[30883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.73 Aug 20 21:26:00 hcbbdb sshd\[30883\]: Failed password for invalid user vincintz from 103.35.64.73 port 39008 ssh2 Aug 20 21:31:02 hcbbdb sshd\[31461\]: Invalid user ftp_user from 103.35.64.73 Aug 20 21:31:02 hcbbdb sshd\[31461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.73 |
2019-08-21 09:10:01 |
| 170.81.131.34 | attackspambots | ... |
2019-08-21 09:54:49 |
| 171.25.193.78 | attackspam | scan r |
2019-08-21 09:19:28 |
| 178.62.54.79 | attack | 2019-08-20T21:08:15.242498abusebot.cloudsearch.cf sshd\[16063\]: Invalid user onm from 178.62.54.79 port 59406 |
2019-08-21 09:12:12 |
| 157.230.153.75 | attack | Automatic report - Banned IP Access |
2019-08-21 09:28:57 |
| 167.71.212.68 | attackspam | Aug 20 15:47:26 friendsofhawaii sshd\[22803\]: Invalid user redis from 167.71.212.68 Aug 20 15:47:26 friendsofhawaii sshd\[22803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.212.68 Aug 20 15:47:27 friendsofhawaii sshd\[22803\]: Failed password for invalid user redis from 167.71.212.68 port 42984 ssh2 Aug 20 15:53:47 friendsofhawaii sshd\[23385\]: Invalid user matt from 167.71.212.68 Aug 20 15:53:47 friendsofhawaii sshd\[23385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.212.68 |
2019-08-21 09:58:59 |
| 217.110.107.172 | attackbots | Aug 20 20:18:02 yabzik sshd[25219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.110.107.172 Aug 20 20:18:04 yabzik sshd[25219]: Failed password for invalid user tari from 217.110.107.172 port 35412 ssh2 Aug 20 20:22:23 yabzik sshd[27553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.110.107.172 |
2019-08-21 09:05:45 |
| 129.204.40.44 | attackspam | Aug 21 01:18:39 root sshd[5121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.40.44 Aug 21 01:18:41 root sshd[5121]: Failed password for invalid user su from 129.204.40.44 port 49010 ssh2 Aug 21 01:23:34 root sshd[5185]: Failed password for root from 129.204.40.44 port 38202 ssh2 ... |
2019-08-21 09:20:36 |
| 177.66.75.26 | attackspambots | $f2bV_matches |
2019-08-21 09:06:36 |