104.248.89.2

Web attack/malicious scanning detected

tcp/8081 (2 or more attempts)

list.rtbh.com.tr report: tcp/0

ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/104.248.89.2

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

tcp/22 (2 or more attempts)

Unauthorized connection attempt detected, SSH Brute-Force

SSH bruteforce [BY]

SSH Brute force: 1 attempts were recorded from 104.248.89.2 2026-03-16T12:27:46+01:00 Connection closed by authenticating user root 104.248.89.2 port 42306 [preauth]

SSH brute force attack detected: 5 failed attempts

2026-03-16T11:29:56.428024+00:00 xproot sshd[3047318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 2026-03-16T11:29:58.325962+00:00 xproot sshd[3047318]: Failed password for invalid user steam ... show more 2026-03-16T11:29:56.428024+00:00 xproot sshd[3047318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 2026-03-16T11:29:58.325962+00:00 xproot sshd[3047318]: Failed password for invalid user steam from 104.248.89.2 port 41620 ssh2 2026-03-16T11:30:05.312978+00:00 xproot sshd[3047369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 user=root 2026-03-16T11:30:07.446801+00:00 xproot sshd[3047369]: Failed password for root from 104.248.89.2 port 39902 ssh2 2026-03-16T11:30:08.446456+00:00 xproot sshd[3047415]: Invalid user oracle from 104.248.89.2 port 50878 ... show less

2026-03-16T12:27:49.819515+01:00 tytan sshd-session[629308]: Connection closed by authenticating user root 104.248.89.2 port 56216 [preauth] 2026-03-16T12:29:55.561622+01:00 tytan sshd-session[630496]: Invalid user steam from 104.248.89.2 port 33034 ... show more 2026-03-16T12:27:49.819515+01:00 tytan sshd-session[629308]: Connection closed by authenticating user root 104.248.89.2 port 56216 [preauth] 2026-03-16T12:29:55.561622+01:00 tytan sshd-session[630496]: Invalid user steam from 104.248.89.2 port 33034 2026-03-16T12:29:56.288589+01:00 tytan sshd-session[630496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 2026-03-16T12:29:58.473984+01:00 tytan sshd-session[630496]: Failed password for invalid user steam from 104.248.89.2 port 33034 ssh2 2026-03-16T12:30:00.989087+01:00 tytan sshd-session[630496]: Connection closed by invalid user steam 104.248.89.2 port 33034 [preauth] ... show less

Mar 16 05:27:47 setebos sshd[136675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 user=root Mar 16 05:27:49 setebos sshd[136675]: Failed password for root from 104.248.89.2 port 45792 ssh2 Mar ... show more Mar 16 05:27:47 setebos sshd[136675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 user=root Mar 16 05:27:49 setebos sshd[136675]: Failed password for root from 104.248.89.2 port 45792 ssh2 Mar 16 05:29:56 setebos sshd[136694]: Invalid user steam from 104.248.89.2 port 48038 Mar 16 05:29:56 setebos sshd[136694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.2 Mar 16 05:29:58 setebos sshd[136694]: Failed password for invalid user steam from 104.248.89.2 port 48038 ssh2 ... show less

list.rtbh.com.tr report: tcp/0

tcp ports: 8080,8082 (2 or more attempts)