City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-29 04:25:26 |
| attack | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-28 20:40:54 |
| attackspam | firewall-block, port(s): 4205/tcp |
2020-09-28 12:47:46 |
| attack |
|
2020-09-04 03:43:34 |
| attackspam | TCP ports : 11182 / 15830 |
2020-09-03 19:19:07 |
| attack |
|
2020-08-13 04:54:36 |
| attackbots | " " |
2020-08-07 07:34:25 |
| attack | Aug 6 16:45:53 debian-2gb-nbg1-2 kernel: \[18983609.468139\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.145.254 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=16833 PROTO=TCP SPT=43412 DPT=32345 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-07 03:27:55 |
| attackbots | scans once in preceeding hours on the ports (in chronological order) 8748 resulting in total of 6 scans from 104.248.0.0/16 block. |
2020-08-05 20:37:31 |
| attackbotsspam |
|
2020-08-02 23:36:48 |
| attack | Port scan denied |
2020-07-28 02:07:35 |
| attackbots | firewall-block, port(s): 8532/tcp |
2020-07-18 19:01:14 |
| attackspam | firewall-block, port(s): 29634/tcp |
2020-07-07 00:13:46 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.145.163 | attackspam | Invalid user acj from 104.248.145.163 port 60982 |
2020-02-12 02:45:08 |
| 104.248.145.163 | attackbots | Jan 31 00:05:40 php1 sshd\[4148\]: Invalid user sumita from 104.248.145.163 Jan 31 00:05:40 php1 sshd\[4148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 Jan 31 00:05:42 php1 sshd\[4148\]: Failed password for invalid user sumita from 104.248.145.163 port 49590 ssh2 Jan 31 00:09:03 php1 sshd\[4514\]: Invalid user ilavalagi from 104.248.145.163 Jan 31 00:09:03 php1 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163 |
2020-01-31 18:14:00 |
| 104.248.145.163 | attackbots | Unauthorized connection attempt detected from IP address 104.248.145.163 to port 2220 [J] |
2020-01-19 01:55:18 |
| 104.248.145.163 | attackspam | Unauthorized connection attempt detected from IP address 104.248.145.163 to port 2220 [J] |
2020-01-18 04:40:50 |
| 104.248.145.163 | attackbots | Unauthorized connection attempt detected from IP address 104.248.145.163 to port 2220 [J] |
2020-01-17 03:23:47 |
| 104.248.145.71 | attackbots | Nov 23 07:08:31 web2 sshd[10827]: Failed password for root from 104.248.145.71 port 47066 ssh2 |
2019-11-23 17:17:59 |
| 104.248.145.18 | attackspambots | fire |
2019-11-17 02:17:30 |
| 104.248.145.110 | attackbotsspam | Report Spam to: Re: 104.248.145.110 (Administrator of network where email originates) To: abuse@digitalocean.com (Notes) digitalocean.com associated with cloudflare.com |
2019-08-29 03:37:36 |
| 104.248.145.123 | attackspam | MYH,DEF GET /wp-login.php |
2019-07-23 21:20:23 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.145.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41605
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.145.254. IN A
;; AUTHORITY SECTION:
. 524 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020070600 1800 900 604800 86400
;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 00:13:33 CST 2020
;; MSG SIZE rcvd: 119Host 254.145.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 254.145.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.35.44.253 | attackbots | Invalid user sftpuser from 114.35.44.253 port 59783 |
2020-09-04 00:09:25 |
| 113.190.40.199 | attackspambots | scans once in preceeding hours on the ports (in chronological order) 30443 resulting in total of 1 scans from 113.160.0.0/11 block. |
2020-09-04 00:22:46 |
| 160.153.147.155 | attackspambots | 160.153.147.155 - - [03/Sep/2020:09:16:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 160.153.147.155 - - [03/Sep/2020:09:16:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ... |
2020-09-04 00:07:05 |
| 213.59.204.250 | attack | Unauthorized connection attempt from IP address 213.59.204.250 on Port 445(SMB) |
2020-09-04 00:27:34 |
| 23.243.21.167 | attackspam | Automatic report - Port Scan Attack |
2020-09-04 00:43:23 |
| 156.204.80.73 | attack | Attempted connection to port 23. |
2020-09-04 00:20:18 |
| 179.127.59.229 | attackspambots | (sshd) Failed SSH login from 179.127.59.229 (BR/Brazil/São Paulo/Bauru/179-127-59-229.static.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 2 12:44:54 atlas sshd[27056]: Invalid user admin from 179.127.59.229 port 40502 Sep 2 12:44:56 atlas sshd[27056]: Failed password for invalid user admin from 179.127.59.229 port 40502 ssh2 Sep 2 12:44:58 atlas sshd[27066]: Invalid user admin from 179.127.59.229 port 40584 Sep 2 12:45:00 atlas sshd[27066]: Failed password for invalid user admin from 179.127.59.229 port 40584 ssh2 Sep 2 12:45:01 atlas sshd[27077]: Invalid user admin from 179.127.59.229 port 40685 |
2020-09-04 00:46:54 |
| 223.65.203.130 | attackspam | Sep 3 09:01:07 *** sshd[22813]: User root from 223.65.203.130 not allowed because not listed in AllowUsers |
2020-09-04 00:33:02 |
| 61.181.80.253 | attackspam | Invalid user rob from 61.181.80.253 port 44293 |
2020-09-04 00:21:58 |
| 161.35.196.163 | attackbots | Wordpress brute force login attempt |
2020-09-04 00:51:25 |
| 124.207.165.138 | attackspam | 2020-09-03T19:43:20.201625lavrinenko.info sshd[23645]: Invalid user jeus from 124.207.165.138 port 48356 2020-09-03T19:43:20.212086lavrinenko.info sshd[23645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.165.138 2020-09-03T19:43:20.201625lavrinenko.info sshd[23645]: Invalid user jeus from 124.207.165.138 port 48356 2020-09-03T19:43:22.207230lavrinenko.info sshd[23645]: Failed password for invalid user jeus from 124.207.165.138 port 48356 ssh2 2020-09-03T19:46:52.579602lavrinenko.info sshd[23876]: Invalid user user from 124.207.165.138 port 34702 ... |
2020-09-04 00:50:06 |
| 216.4.95.61 | attackbots | Unauthorized connection attempt detected from IP address 216.4.95.61 to port 5555 [T] |
2020-09-04 00:41:41 |
| 103.151.184.14 | attackbots | Unauthorized connection attempt from IP address 103.151.184.14 on Port 445(SMB) |
2020-09-04 00:10:48 |
| 184.168.152.169 | attackspambots | Automatic report - XMLRPC Attack |
2020-09-04 00:06:49 |
| 51.210.109.104 | attackbotsspam | Invalid user anna from 51.210.109.104 port 37704 |
2020-09-04 00:27:16 |