City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.94.159 | attack | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-05-23 14:19:28 |
| 104.248.94.159 | attack | May 22 17:22:45 xeon sshd[25949]: Failed password for invalid user wit from 104.248.94.159 port 46482 ssh2 |
2020-05-23 01:12:29 |
| 104.248.94.159 | attackbots | 5x Failed Password |
2020-05-15 22:27:33 |
| 104.248.94.159 | attackspam | " " |
2020-05-06 14:04:24 |
| 104.248.94.159 | attackspam | Apr 24 07:57:07 debian-2gb-nbg1-2 kernel: \[9966772.924980\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.94.159 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=37616 PROTO=TCP SPT=52994 DPT=23654 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-24 14:49:55 |
| 104.248.94.159 | attack | Apr 15 15:14:57 srv206 sshd[12053]: Invalid user york from 104.248.94.159 Apr 15 15:14:57 srv206 sshd[12053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.94.159 Apr 15 15:14:57 srv206 sshd[12053]: Invalid user york from 104.248.94.159 Apr 15 15:14:58 srv206 sshd[12053]: Failed password for invalid user york from 104.248.94.159 port 43826 ssh2 ... |
2020-04-15 21:55:15 |
| 104.248.94.159 | attack | Invalid user bike from 104.248.94.159 port 54104 |
2020-04-15 07:05:11 |
| 104.248.94.159 | attack | Invalid user bike from 104.248.94.159 port 54104 |
2020-04-14 16:16:46 |
| 104.248.94.159 | attack | Apr 13 09:19:38 server sshd[17894]: Failed password for root from 104.248.94.159 port 53698 ssh2 Apr 13 10:00:18 server sshd[28994]: Failed password for invalid user st1lesha from 104.248.94.159 port 46312 ssh2 Apr 13 10:03:40 server sshd[30054]: Failed password for root from 104.248.94.159 port 54064 ssh2 |
2020-04-13 16:11:30 |
| 104.248.94.159 | attackbots | Apr 9 22:45:29 cvbnet sshd[15739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.94.159 Apr 9 22:45:31 cvbnet sshd[15739]: Failed password for invalid user odoo from 104.248.94.159 port 38072 ssh2 ... |
2020-04-10 05:43:50 |
| 104.248.94.159 | attackbots | Apr 7 15:27:53 legacy sshd[30365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.94.159 Apr 7 15:27:55 legacy sshd[30365]: Failed password for invalid user confa from 104.248.94.159 port 38782 ssh2 Apr 7 15:31:38 legacy sshd[30490]: Failed password for root from 104.248.94.159 port 49110 ssh2 ... |
2020-04-07 21:38:49 |
| 104.248.94.159 | attackbots | k+ssh-bruteforce |
2020-04-07 09:59:29 |
| 104.248.94.159 | attackspambots | Mar 26 00:26:53 ks10 sshd[670657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.94.159 Mar 26 00:26:55 ks10 sshd[670657]: Failed password for invalid user sysbackup from 104.248.94.159 port 35330 ssh2 ... |
2020-03-26 07:33:46 |
| 104.248.94.159 | attack | Mar 22 17:14:50 plex sshd[25493]: Invalid user btf from 104.248.94.159 port 59384 |
2020-03-23 01:14:21 |
| 104.248.94.159 | attack | Feb 13 14:50:11 v22018076622670303 sshd\[32333\]: Invalid user gustavo from 104.248.94.159 port 33806 Feb 13 14:50:11 v22018076622670303 sshd\[32333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.94.159 Feb 13 14:50:13 v22018076622670303 sshd\[32333\]: Failed password for invalid user gustavo from 104.248.94.159 port 33806 ssh2 ... |
2020-02-13 22:18:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.94.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.248.94.204. IN A
;; AUTHORITY SECTION:
. 357 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 13:04:03 CST 2022
;; MSG SIZE rcvd: 107Host 204.94.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 204.94.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.42.7 | attackbots | Sep 30 15:59:56 PorscheCustomer sshd[29941]: Failed password for root from 222.186.42.7 port 31068 ssh2 Sep 30 15:59:59 PorscheCustomer sshd[29941]: Failed password for root from 222.186.42.7 port 31068 ssh2 Sep 30 16:00:02 PorscheCustomer sshd[29941]: Failed password for root from 222.186.42.7 port 31068 ssh2 ... |
2020-09-30 22:05:59 |
| 3.19.72.50 | attackspam | RDP Brute-Force (Grieskirchen RZ2) |
2020-09-30 21:58:07 |
| 69.163.169.133 | attackspambots | 69.163.169.133 - - [30/Sep/2020:06:25:29 +1000] "POST /wp-login.php HTTP/1.0" 200 8055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.163.169.133 - - [30/Sep/2020:07:13:46 +1000] "POST /wp-login.php HTTP/1.0" 200 8136 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.163.169.133 - - [30/Sep/2020:11:24:43 +1000] "POST /wp-login.php HTTP/1.0" 200 8564 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.163.169.133 - - [30/Sep/2020:12:09:34 +1000] "POST /wp-login.php HTTP/1.0" 200 8136 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.163.169.133 - - [30/Sep/2020:13:35:31 +1000] "POST /wp-login.php HTTP/1.0" 200 8564 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-30 22:07:08 |
| 49.231.238.162 | attack | Sep 30 13:21:56 IngegnereFirenze sshd[29036]: Failed password for invalid user informix from 49.231.238.162 port 39092 ssh2 ... |
2020-09-30 21:43:18 |
| 152.172.69.181 | attack | [H1.VM7] Blocked by UFW |
2020-09-30 21:58:23 |
| 51.68.123.192 | attackbotsspam | Multiple SSH authentication failures from 51.68.123.192 |
2020-09-30 21:37:00 |
| 142.93.126.181 | attackspambots | 142.93.126.181 - - [30/Sep/2020:14:26:47 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:49 +0200] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-09-30 21:40:41 |
| 128.199.110.139 | attackspambots | Brute forcing email accounts |
2020-09-30 21:41:59 |
| 134.122.130.15 | attackbotsspam | Sep 30 15:06:50 vpn01 sshd[16009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.130.15 Sep 30 15:06:52 vpn01 sshd[16009]: Failed password for invalid user kate from 134.122.130.15 port 50188 ssh2 ... |
2020-09-30 21:39:22 |
| 45.141.84.99 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 1011 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-30 21:49:02 |
| 115.97.19.238 | attack | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-09-30 21:44:32 |
| 65.52.179.163 | attackspambots | uvcm 65.52.179.163 [29/Sep/2020:08:34:16 "-" "POST /wp-login.php 200 6728 65.52.179.163 [29/Sep/2020:08:34:17 "-" "GET /wp-login.php 200 6619 65.52.179.163 [29/Sep/2020:08:34:18 "-" "POST /wp-login.php 200 6726 |
2020-09-30 21:35:15 |
| 80.82.65.60 | attack | Vogel |
2020-09-30 22:02:44 |
| 27.76.123.212 | attack | Unauthorized IMAP connection attempt |
2020-09-30 21:32:41 |
| 41.184.36.6 | attackspam | Sep 30 15:19:05 vm1 sshd[22991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.184.36.6 Sep 30 15:19:07 vm1 sshd[22991]: Failed password for invalid user student from 41.184.36.6 port 51626 ssh2 ... |
2020-09-30 22:04:05 |