City: Santa Clara
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.68.88 | attackspam | miraniessen.de 104.248.68.88 \[24/Sep/2019:23:15:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 5972 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 104.248.68.88 \[24/Sep/2019:23:15:50 +0200\] "POST /wp-login.php HTTP/1.1" 200 5976 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-09-25 07:02:40 |
| 104.248.68.88 | attackspam | Forbidden directory scan :: 2019/07/15 12:25:44 [error] 1106#1106: *59957 access forbidden by rule, client: 104.248.68.88, server: [censored_4], request: "GET /source.sql HTTP/1.1", host: "[censored_4]", referrer: "http://[censored_4]/source.sql" |
2019-07-15 13:11:46 |
| 104.248.68.88 | attackbotsspam | Looking for wp-logins: "GET /user/wp-login.php HTTP/1.1" 404" |
2019-07-02 02:28:08 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 104.248.0.0 - 104.248.255.255
CIDR: 104.248.0.0/16
NetName: DIGITALOCEAN-104-248-0-0
NetHandle: NET-104-248-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: DigitalOcean, LLC (DO-13)
RegDate: 2018-08-06
Updated: 2020-04-03
Comment: Routing and Peering Policy can be found at https://www.as14061.net
Comment:
Comment: Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref: https://rdap.arin.net/registry/ip/104.248.0.0
OrgName: DigitalOcean, LLC
OrgId: DO-13
Address: 105 Edgeview Drive, Suite 425
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US
RegDate: 2012-05-14
Updated: 2025-04-11
Ref: https://rdap.arin.net/registry/entity/DO-13
OrgTechHandle: NOC32014-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-646-827-4366
OrgTechEmail: noc@digitalocean.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName: DigitalOcean Abuse
OrgAbusePhone: +1-646-827-4366
OrgAbuseEmail: abuse@digitalocean.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/DIGIT19-ARIN
OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-646-827-4366
OrgNOCEmail: noc@digitalocean.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.68.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10098
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.248.68.146. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041402 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 15 09:09:43 CST 2026
;; MSG SIZE rcvd: 107Host 146.68.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 146.68.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 207.46.13.31 | attackspambots | Automatic report - Banned IP Access |
2020-05-03 02:19:35 |
| 218.92.0.168 | attack | May 2 14:35:10 NPSTNNYC01T sshd[15166]: Failed password for root from 218.92.0.168 port 7095 ssh2 May 2 14:35:25 NPSTNNYC01T sshd[15166]: Failed password for root from 218.92.0.168 port 7095 ssh2 May 2 14:35:25 NPSTNNYC01T sshd[15166]: error: maximum authentication attempts exceeded for root from 218.92.0.168 port 7095 ssh2 [preauth] ... |
2020-05-03 02:38:51 |
| 110.185.104.126 | attack | SSH Brute-Force. Ports scanning. |
2020-05-03 02:43:32 |
| 111.229.15.228 | attackbotsspam | $f2bV_matches |
2020-05-03 02:42:13 |
| 104.41.209.131 | attackspambots | Repeated RDP login failures. Last user: mj |
2020-05-03 02:42:42 |
| 83.28.188.58 | attack | Honeypot attack, port: 81, PTR: bku58.neoplus.adsl.tpnet.pl. |
2020-05-03 02:48:27 |
| 200.84.51.197 | attackbots | Honeypot attack, port: 445, PTR: 200.84.51-197.dyn.dsl.cantv.net. |
2020-05-03 02:44:46 |
| 83.30.62.62 | attackspam | May 2 14:08:36 cloud sshd[8101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.30.62.62 May 2 14:08:38 cloud sshd[8101]: Failed password for invalid user siu from 83.30.62.62 port 55076 ssh2 |
2020-05-03 02:31:43 |
| 110.80.142.84 | attack | 2020-05-02T17:45:53.671684vps751288.ovh.net sshd\[26580\]: Invalid user hadoop from 110.80.142.84 port 45078 2020-05-02T17:45:53.680025vps751288.ovh.net sshd\[26580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.142.84 2020-05-02T17:45:55.774664vps751288.ovh.net sshd\[26580\]: Failed password for invalid user hadoop from 110.80.142.84 port 45078 ssh2 2020-05-02T17:49:08.192521vps751288.ovh.net sshd\[26610\]: Invalid user joseph from 110.80.142.84 port 51572 2020-05-02T17:49:08.206321vps751288.ovh.net sshd\[26610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.142.84 |
2020-05-03 02:21:08 |
| 2.95.58.142 | attack | May 2 19:47:35 h1745522 sshd[1023]: Invalid user wuqianhan from 2.95.58.142 port 35628 May 2 19:47:35 h1745522 sshd[1023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.95.58.142 May 2 19:47:35 h1745522 sshd[1023]: Invalid user wuqianhan from 2.95.58.142 port 35628 May 2 19:47:37 h1745522 sshd[1023]: Failed password for invalid user wuqianhan from 2.95.58.142 port 35628 ssh2 May 2 19:49:49 h1745522 sshd[1101]: Invalid user um from 2.95.58.142 port 41912 May 2 19:49:49 h1745522 sshd[1101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.95.58.142 May 2 19:49:49 h1745522 sshd[1101]: Invalid user um from 2.95.58.142 port 41912 May 2 19:49:51 h1745522 sshd[1101]: Failed password for invalid user um from 2.95.58.142 port 41912 ssh2 May 2 19:52:11 h1745522 sshd[1191]: Invalid user zhaokai from 2.95.58.142 port 48188 ... |
2020-05-03 02:10:31 |
| 51.15.49.134 | attackbots | CMS (WordPress or Joomla) login attempt. |
2020-05-03 02:15:30 |
| 123.206.190.82 | attack | May 2 15:15:58 ArkNodeAT sshd\[19060\]: Invalid user bnc from 123.206.190.82 May 2 15:15:58 ArkNodeAT sshd\[19060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.190.82 May 2 15:16:00 ArkNodeAT sshd\[19060\]: Failed password for invalid user bnc from 123.206.190.82 port 60078 ssh2 |
2020-05-03 02:34:07 |
| 3.223.104.32 | attackbotsspam | 3.223.104.32 - - \[02/May/2020:16:52:54 +0200\] "POST /wp-login.php HTTP/1.0" 200 6827 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 3.223.104.32 - - \[02/May/2020:16:52:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 6642 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 3.223.104.32 - - \[02/May/2020:16:52:58 +0200\] "POST /wp-login.php HTTP/1.0" 200 6639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-03 02:34:57 |
| 202.126.208.122 | attackbotsspam | no |
2020-05-03 02:09:29 |
| 139.59.69.76 | attackbots | SSH bruteforce |
2020-05-03 02:28:05 |