City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.145.254 | attackbots | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-29 04:25:26 |
| 104.248.145.254 | attack | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-28 20:40:54 |
| 104.248.145.254 | attackspam | firewall-block, port(s): 4205/tcp |
2020-09-28 12:47:46 |
| 104.248.145.254 | attack |
|
2020-09-04 03:43:34 |
| 104.248.145.254 | attackspam | TCP ports : 11182 / 15830 |
2020-09-03 19:19:07 |
| 104.248.145.254 | attack |
|
2020-08-13 04:54:36 |
| 104.248.145.254 | attackbots | " " |
2020-08-07 07:34:25 |
| 104.248.145.254 | attack | Aug 6 16:45:53 debian-2gb-nbg1-2 kernel: \[18983609.468139\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.145.254 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=16833 PROTO=TCP SPT=43412 DPT=32345 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-07 03:27:55 |
| 104.248.145.254 | attackbots | scans once in preceeding hours on the ports (in chronological order) 8748 resulting in total of 6 scans from 104.248.0.0/16 block. |
2020-08-05 20:37:31 |
| 104.248.145.254 | attackbotsspam |
|
2020-08-02 23:36:48 |
| 104.248.145.254 | attack | Port scan denied |
2020-07-28 02:07:35 |
| 104.248.145.254 | attackbots | firewall-block, port(s): 8532/tcp |
2020-07-18 19:01:14 |
| 104.248.145.254 | attackspam | firewall-block, port(s): 29634/tcp |
2020-07-07 00:13:46 |
| 104.248.145.163 | attackspam | Invalid user acj from 104.248.145.163 port 60982 |
2020-02-12 02:45:08 |
| 104.248.145.163 | attackbots | Jan 31 00:05:40 php1 sshd\[4148\]: Invalid user sumita from 104.248.145.163 Jan 31 00:05:40 php1 sshd\[4148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 Jan 31 00:05:42 php1 sshd\[4148\]: Failed password for invalid user sumita from 104.248.145.163 port 49590 ssh2 Jan 31 00:09:03 php1 sshd\[4514\]: Invalid user ilavalagi from 104.248.145.163 Jan 31 00:09:03 php1 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 |
2020-01-31 18:14:00 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.145.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.248.145.161. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 20:23:42 CST 2022
;; MSG SIZE rcvd: 108Host 161.145.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 161.145.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.89.7 | attackspam | Feb 3 02:28:44 vpn01 sshd[2161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.89.7 Feb 3 02:28:46 vpn01 sshd[2161]: Failed password for invalid user u1 from 139.59.89.7 port 46306 ssh2 ... |
2020-02-03 09:30:15 |
| 95.178.159.193 | attack | Telnetd brute force attack detected by fail2ban |
2020-02-03 09:11:21 |
| 13.232.146.139 | attackspam | Unauthorized connection attempt detected from IP address 13.232.146.139 to port 2220 [J] |
2020-02-03 09:01:38 |
| 46.101.119.148 | attack | Feb 3 00:29:20 pornomens sshd\[14222\]: Invalid user sshvpn from 46.101.119.148 port 48000 Feb 3 00:29:20 pornomens sshd\[14222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.119.148 Feb 3 00:29:22 pornomens sshd\[14222\]: Failed password for invalid user sshvpn from 46.101.119.148 port 48000 ssh2 ... |
2020-02-03 09:03:18 |
| 222.186.175.212 | attack | Feb 2 15:06:29 hpm sshd\[6025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root Feb 2 15:06:32 hpm sshd\[6025\]: Failed password for root from 222.186.175.212 port 43534 ssh2 Feb 2 15:06:46 hpm sshd\[6025\]: Failed password for root from 222.186.175.212 port 43534 ssh2 Feb 2 15:06:52 hpm sshd\[6038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root Feb 2 15:06:54 hpm sshd\[6038\]: Failed password for root from 222.186.175.212 port 48918 ssh2 |
2020-02-03 09:10:41 |
| 190.145.7.42 | attackspam | Unauthorized connection attempt detected from IP address 190.145.7.42 to port 2220 [J] |
2020-02-03 09:29:46 |
| 114.67.80.209 | attack | Feb 3 01:02:54 [host] sshd[17762]: Invalid user sastoque from 114.67.80.209 Feb 3 01:02:54 [host] sshd[17762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.80.209 Feb 3 01:02:57 [host] sshd[17762]: Failed password for invalid user sastoque from 114.67.80.209 port 60922 ssh2 |
2020-02-03 08:49:39 |
| 121.162.60.159 | attackspambots | Feb 3 01:23:58 silence02 sshd[2432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.60.159 Feb 3 01:24:00 silence02 sshd[2432]: Failed password for invalid user iq from 121.162.60.159 port 54626 ssh2 Feb 3 01:27:38 silence02 sshd[2815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.60.159 |
2020-02-03 08:51:34 |
| 73.32.54.205 | attack | Feb 3 00:29:16 mout sshd[28095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.32.54.205 user=pi Feb 3 00:29:17 mout sshd[28095]: Failed password for pi from 73.32.54.205 port 56496 ssh2 Feb 3 00:29:18 mout sshd[28095]: Connection closed by 73.32.54.205 port 56496 [preauth] |
2020-02-03 09:07:48 |
| 51.15.165.211 | attackspambots | Jan 27 18:28:57 admin sshd[10071]: Invalid user zimbra from 51.15.165.211 port 42970 Jan 27 18:28:57 admin sshd[10071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.165.211 Jan 27 18:28:58 admin sshd[10071]: Failed password for invalid user zimbra from 51.15.165.211 port 42970 ssh2 Jan 27 18:28:58 admin sshd[10071]: Received disconnect from 51.15.165.211 port 42970:11: Bye Bye [preauth] Jan 27 18:28:58 admin sshd[10071]: Disconnected from 51.15.165.211 port 42970 [preauth] Jan 27 18:52:22 admin sshd[10964]: Invalid user ubuntu from 51.15.165.211 port 55250 Jan 27 18:52:22 admin sshd[10964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.165.211 Jan 27 18:52:25 admin sshd[10964]: Failed password for invalid user ubuntu from 51.15.165.211 port 55250 ssh2 Jan 27 18:52:25 admin sshd[10964]: Received disconnect from 51.15.165.211 port 55250:11: Bye Bye [preauth] Jan 27 18:52:25 ad........ ------------------------------- |
2020-02-03 09:11:40 |
| 54.38.190.48 | attackbotsspam | Feb 2 14:20:46 web9 sshd\[22190\]: Invalid user rigmor from 54.38.190.48 Feb 2 14:20:46 web9 sshd\[22190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 Feb 2 14:20:47 web9 sshd\[22190\]: Failed password for invalid user rigmor from 54.38.190.48 port 46542 ssh2 Feb 2 14:22:12 web9 sshd\[22293\]: Invalid user andre1 from 54.38.190.48 Feb 2 14:22:12 web9 sshd\[22293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 |
2020-02-03 08:50:17 |
| 124.158.164.146 | attackbots | Unauthorized connection attempt detected from IP address 124.158.164.146 to port 2220 [J] |
2020-02-03 09:20:17 |
| 46.38.144.102 | attackspam | 2020-02-03 01:17:44 dovecot_login authenticator failed for \(User\) \[46.38.144.102\]: 535 Incorrect authentication data \(set_id=catalogues@no-server.de\) 2020-02-03 01:18:04 dovecot_login authenticator failed for \(User\) \[46.38.144.102\]: 535 Incorrect authentication data \(set_id=catalogues@no-server.de\) 2020-02-03 01:18:09 dovecot_login authenticator failed for \(User\) \[46.38.144.102\]: 535 Incorrect authentication data \(set_id=nieruchomosci@no-server.de\) 2020-02-03 01:18:32 dovecot_login authenticator failed for \(User\) \[46.38.144.102\]: 535 Incorrect authentication data \(set_id=nieruchomosci@no-server.de\) 2020-02-03 01:18:39 dovecot_login authenticator failed for \(User\) \[46.38.144.102\]: 535 Incorrect authentication data \(set_id=nieruchomosci@no-server.de\) ... |
2020-02-03 08:51:13 |
| 62.12.115.116 | attack | Feb 3 02:22:24 legacy sshd[30382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.12.115.116 Feb 3 02:22:26 legacy sshd[30382]: Failed password for invalid user krzysiek from 62.12.115.116 port 50572 ssh2 Feb 3 02:25:50 legacy sshd[30701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.12.115.116 ... |
2020-02-03 09:30:00 |
| 190.147.159.34 | attackspambots | Invalid user paru from 190.147.159.34 port 55993 |
2020-02-03 08:53:07 |