City: Singapore
Region: Central Singapore Community Development Council
Country: Singapore
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | Sep 26 20:02:00 tdfoods sshd\[28959\]: Invalid user autocad from 104.248.157.14 Sep 26 20:02:00 tdfoods sshd\[28959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Sep 26 20:02:02 tdfoods sshd\[28959\]: Failed password for invalid user autocad from 104.248.157.14 port 44764 ssh2 Sep 26 20:07:03 tdfoods sshd\[29343\]: Invalid user hdduser from 104.248.157.14 Sep 26 20:07:03 tdfoods sshd\[29343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 |
2019-09-27 14:14:40 |
| attack | 2019-09-14T08:35:27.493417abusebot-2.cloudsearch.cf sshd\[11970\]: Invalid user xue from 104.248.157.14 port 44372 |
2019-09-14 16:55:35 |
| attack | Aug 31 14:14:04 eddieflores sshd\[2898\]: Invalid user weblogic from 104.248.157.14 Aug 31 14:14:04 eddieflores sshd\[2898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 31 14:14:06 eddieflores sshd\[2898\]: Failed password for invalid user weblogic from 104.248.157.14 port 56518 ssh2 Aug 31 14:18:47 eddieflores sshd\[3292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 user=root Aug 31 14:18:49 eddieflores sshd\[3292\]: Failed password for root from 104.248.157.14 port 44610 ssh2 |
2019-09-01 08:32:10 |
| attack | 2019-08-29T09:57:58.837452abusebot.cloudsearch.cf sshd\[31640\]: Invalid user student from 104.248.157.14 port 42378 |
2019-08-29 22:35:45 |
| attackspam | Aug 27 00:55:55 tdfoods sshd\[18527\]: Invalid user ya from 104.248.157.14 Aug 27 00:55:55 tdfoods sshd\[18527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 27 00:55:57 tdfoods sshd\[18527\]: Failed password for invalid user ya from 104.248.157.14 port 58666 ssh2 Aug 27 01:00:37 tdfoods sshd\[18961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 user=root Aug 27 01:00:39 tdfoods sshd\[18961\]: Failed password for root from 104.248.157.14 port 46598 ssh2 |
2019-08-28 01:42:09 |
| attackspam | Aug 27 01:43:08 rpi sshd[8347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 27 01:43:09 rpi sshd[8347]: Failed password for invalid user sruser from 104.248.157.14 port 49170 ssh2 |
2019-08-27 07:49:31 |
| attackspambots | Aug 26 07:21:23 vps200512 sshd\[27814\]: Invalid user rosica from 104.248.157.14 Aug 26 07:21:23 vps200512 sshd\[27814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 26 07:21:25 vps200512 sshd\[27814\]: Failed password for invalid user rosica from 104.248.157.14 port 43812 ssh2 Aug 26 07:25:55 vps200512 sshd\[27849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 user=root Aug 26 07:25:57 vps200512 sshd\[27849\]: Failed password for root from 104.248.157.14 port 58726 ssh2 |
2019-08-26 19:37:42 |
| attack | Aug 14 01:55:33 itv-usvr-01 sshd[14012]: Invalid user walesca from 104.248.157.14 Aug 14 01:55:33 itv-usvr-01 sshd[14012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 14 01:55:33 itv-usvr-01 sshd[14012]: Invalid user walesca from 104.248.157.14 Aug 14 01:55:35 itv-usvr-01 sshd[14012]: Failed password for invalid user walesca from 104.248.157.14 port 41770 ssh2 Aug 14 02:02:18 itv-usvr-01 sshd[14276]: Invalid user ag from 104.248.157.14 |
2019-08-14 04:54:44 |
| attack | Aug 12 04:46:55 MK-Soft-Root2 sshd\[9061\]: Invalid user pollo from 104.248.157.14 port 50850 Aug 12 04:46:55 MK-Soft-Root2 sshd\[9061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Aug 12 04:46:58 MK-Soft-Root2 sshd\[9061\]: Failed password for invalid user pollo from 104.248.157.14 port 50850 ssh2 ... |
2019-08-12 11:25:54 |
| attackspam | 2019-08-05T06:34:01.423219abusebot-3.cloudsearch.cf sshd\[8559\]: Invalid user st from 104.248.157.14 port 45242 |
2019-08-05 16:42:33 |
| attackspambots | Jul 23 11:06:26 MainVPS sshd[23307]: Invalid user cassandra from 104.248.157.14 port 53144 Jul 23 11:06:26 MainVPS sshd[23307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Jul 23 11:06:26 MainVPS sshd[23307]: Invalid user cassandra from 104.248.157.14 port 53144 Jul 23 11:06:28 MainVPS sshd[23307]: Failed password for invalid user cassandra from 104.248.157.14 port 53144 ssh2 Jul 23 11:11:41 MainVPS sshd[23756]: Invalid user exploit from 104.248.157.14 port 49022 ... |
2019-07-24 01:21:03 |
| attack | Jul 18 11:25:25 mail sshd\[718\]: Invalid user ec2-user from 104.248.157.14 port 57954 Jul 18 11:25:25 mail sshd\[718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Jul 18 11:25:27 mail sshd\[718\]: Failed password for invalid user ec2-user from 104.248.157.14 port 57954 ssh2 Jul 18 11:30:52 mail sshd\[818\]: Invalid user admin from 104.248.157.14 port 54860 Jul 18 11:30:52 mail sshd\[818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 ... |
2019-07-18 19:39:49 |
| attackbotsspam | Jul 18 03:23:35 mail sshd\[26879\]: Invalid user hen from 104.248.157.14 port 46534 Jul 18 03:23:35 mail sshd\[26879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 Jul 18 03:23:37 mail sshd\[26879\]: Failed password for invalid user hen from 104.248.157.14 port 46534 ssh2 Jul 18 03:29:02 mail sshd\[26928\]: Invalid user user from 104.248.157.14 port 43436 Jul 18 03:29:02 mail sshd\[26928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.14 ... |
2019-07-18 11:35:03 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.157.92 | attack | Unauthorized connection attempt from IP address 104.248.157.92 on port 3389 |
2020-08-27 07:17:24 |
| 104.248.157.207 | attackbotsspam | Invalid user test from 104.248.157.207 port 59114 |
2020-08-26 15:48:30 |
| 104.248.157.207 | attackbots | Aug 25 06:59:17 PorscheCustomer sshd[16742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.207 Aug 25 06:59:19 PorscheCustomer sshd[16742]: Failed password for invalid user andi from 104.248.157.207 port 48074 ssh2 Aug 25 07:03:48 PorscheCustomer sshd[16804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.157.207 ... |
2020-08-25 15:57:21 |
| 104.248.157.207 | attack | 20 attempts against mh-ssh on cloud |
2020-08-23 06:36:53 |
| 104.248.157.118 | attackbots | Aug 6 15:25:08 debian-2gb-nbg1-2 kernel: \[18978763.950285\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=18267 PROTO=TCP SPT=58985 DPT=2693 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-06 23:14:03 |
| 104.248.157.118 | attackbots | scans once in preceeding hours on the ports (in chronological order) 30651 resulting in total of 6 scans from 104.248.0.0/16 block. |
2020-08-05 22:32:48 |
| 104.248.157.118 | attack | Fail2Ban Ban Triggered |
2020-07-17 12:41:52 |
| 104.248.157.118 | attackspambots | TCP port : 9081 |
2020-06-26 21:24:59 |
| 104.248.157.118 | attack | 21580/tcp 25256/tcp 31693/tcp... [2020-04-22/06-22]182pkt,63pt.(tcp) |
2020-06-23 18:38:13 |
| 104.248.157.118 | attackspam |
|
2020-06-23 04:30:13 |
| 104.248.157.60 | attack | 2020-06-14T02:08:34.483278hz01.yumiweb.com sshd\[15483\]: Invalid user oracle from 104.248.157.60 port 56164 2020-06-14T02:08:54.774017hz01.yumiweb.com sshd\[15485\]: Invalid user hadoop from 104.248.157.60 port 58424 2020-06-14T02:09:14.577470hz01.yumiweb.com sshd\[15487\]: Invalid user hadoop from 104.248.157.60 port 60684 ... |
2020-06-14 08:11:43 |
| 104.248.157.118 | attack | firewall-block, port(s): 29533/tcp |
2020-06-13 01:42:08 |
| 104.248.157.60 | attack | [MK-Root1] SSH login failed |
2020-06-04 06:15:03 |
| 104.248.157.118 | attackbotsspam | May 23 22:14:25 debian-2gb-nbg1-2 kernel: \[12523676.581759\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=38554 PROTO=TCP SPT=44296 DPT=24925 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-24 05:54:13 |
| 104.248.157.118 | attack | May 8 14:12:48 debian-2gb-nbg1-2 kernel: \[11198849.577578\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.157.118 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=18259 PROTO=TCP SPT=46298 DPT=30522 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-08 23:59:53 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.157.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25929
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.157.14. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040500 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 05 19:33:11 +08 2019
;; MSG SIZE rcvd: 118
Host 14.157.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 14.157.248.104.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.196.137.213 | attackspambots | 2019-07-30T12:21:51.467976abusebot-3.cloudsearch.cf sshd\[22905\]: Invalid user rosa from 5.196.137.213 port 35272 |
2019-07-30 21:32:40 |
| 61.177.172.128 | attack | 30.07.2019 13:13:06 SSH access blocked by firewall |
2019-07-30 21:16:25 |
| 183.143.118.41 | attackspam | 23/tcp [2019-07-30]1pkt |
2019-07-30 21:07:07 |
| 23.94.148.13 | attackbotsspam | Spam |
2019-07-30 21:14:41 |
| 138.185.239.69 | attackspambots | 445/tcp 445/tcp 445/tcp [2019-07-30]3pkt |
2019-07-30 21:03:28 |
| 49.68.211.61 | attack | " " |
2019-07-30 21:05:45 |
| 202.78.197.197 | attackbotsspam | 2019-07-30T13:31:53.592005abusebot-2.cloudsearch.cf sshd\[6853\]: Invalid user webmaster from 202.78.197.197 port 38702 |
2019-07-30 21:47:33 |
| 188.12.187.231 | attackbots | Jul 30 12:17:34 MK-Soft-VM3 sshd\[29237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.12.187.231 user=root Jul 30 12:17:36 MK-Soft-VM3 sshd\[29237\]: Failed password for root from 188.12.187.231 port 57585 ssh2 Jul 30 12:22:02 MK-Soft-VM3 sshd\[29407\]: Invalid user mia from 188.12.187.231 port 54816 ... |
2019-07-30 21:22:53 |
| 82.137.208.177 | attack | 445/tcp [2019-07-30]1pkt |
2019-07-30 20:58:47 |
| 54.36.150.67 | attackspam | Automatic report - Banned IP Access |
2019-07-30 21:17:55 |
| 128.199.96.234 | attackbots | Jul 30 14:55:50 s64-1 sshd[22052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.96.234 Jul 30 14:55:51 s64-1 sshd[22052]: Failed password for invalid user tecnici from 128.199.96.234 port 41226 ssh2 Jul 30 15:00:42 s64-1 sshd[22103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.96.234 ... |
2019-07-30 21:07:44 |
| 1.171.48.10 | attackbotsspam | 445/tcp [2019-07-30]1pkt |
2019-07-30 21:35:38 |
| 62.234.131.141 | attackbots | 30.07.2019 13:09:01 SSH access blocked by firewall |
2019-07-30 21:57:40 |
| 165.227.220.178 | attackbotsspam | Jul 30 14:21:42 lnxmail61 sshd[7016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.220.178 |
2019-07-30 21:42:53 |
| 103.81.85.184 | attackspambots | Automatic report generated by Wazuh |
2019-07-30 21:05:24 |