104.248.91.100

Honeypot Finding: repeated TCP service probing on TCP/8047 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.

Connection to port 8049 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172 Connection: keep-alive sec-ch-ua: "Google Chrome";v="153", "N

Blocked by UFW on Jellyfin [3790/tcp] Source port: 61000 TTL: 246 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

FW-PortScan: Traffic Blocked srcport=40544 dstport=22

list.rtbh.com.tr report: tcp/0

tcp/80 (2 or more attempts)

Unauthorized attempt on git [8090/tcp] Source port: 61006 TTL: 244 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Reported by Fail2Ban: 2025-12-09 19:46:20,362 fail2ban.filter [858]: INFO [sshd] Found 104.248.91.100 - 2025-12-09 19:46:19

2025-12-09T18:18:24.470667-03:00 dns1 sshd[18024]: Failed password for invalid user test from 104.248.91.100 port 45488 ssh2 2025-12-09T18:18:25.851464-03:00 dns1 sshd[18024]: Connection closed by invalid user test 104.248.91.100 port 45488 [preauth] ... show more 2025-12-09T18:18:24.470667-03:00 dns1 sshd[18024]: Failed password for invalid user test from 104.248.91.100 port 45488 ssh2 2025-12-09T18:18:25.851464-03:00 dns1 sshd[18024]: Connection closed by invalid user test 104.248.91.100 port 45488 [preauth] 2025-12-09T18:18:50.753121-03:00 dns1 sshd[18077]: Invalid user test1 from 104.248.91.100 port 50412 2025-12-09T18:18:51.601068-03:00 dns1 sshd[18077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.91.100 2025-12-09T18:18:53.841992-03:00 dns1 sshd[18077]: Failed password for invalid user test1 from 104.248.91.100 port 50412 ssh2 show less

2025-12-09T23:15:32.488629+02:00 topah03 sshd[1574492]: Invalid user test from 104.248.91.100 port 46014 2025-12-09T23:16:02.281352+02:00 topah03 sshd[1575428]: Invalid user test from 104.248.91.100 port 59744 2025-12-09T23:16:30.621631+02:00 topah03 ... show more 2025-12-09T23:15:32.488629+02:00 topah03 sshd[1574492]: Invalid user test from 104.248.91.100 port 46014 2025-12-09T23:16:02.281352+02:00 topah03 sshd[1575428]: Invalid user test from 104.248.91.100 port 59744 2025-12-09T23:16:30.621631+02:00 topah03 sshd[1576598]: Invalid user test from 104.248.91.100 port 47884 2025-12-09T23:16:57.507802+02:00 topah03 sshd[1577602]: Invalid user test from 104.248.91.100 port 32906 2025-12-09T23:17:27.337099+02:00 topah03 sshd[1578737]: Invalid user test from 104.248.91.100 port 47422 ... show less

Dec 9 22:09:33 MinerPL sshd[3594180]: Invalid user server from 104.248.91.100 port 57390 Dec 9 22:10:03 MinerPL sshd[3606863]: Invalid user server from 104.248.91.100 port 56742 Dec 9 22:10:32 MinerPL sshd[3618820]: Invalid user server from 104.24 ... show more Dec 9 22:09:33 MinerPL sshd[3594180]: Invalid user server from 104.248.91.100 port 57390 Dec 9 22:10:03 MinerPL sshd[3606863]: Invalid user server from 104.248.91.100 port 56742 Dec 9 22:10:32 MinerPL sshd[3618820]: Invalid user server from 104.248.91.100 port 49452 Dec 9 22:11:01 MinerPL sshd[3630158]: Invalid user test from 104.248.91.100 port 36970 Dec 9 22:11:29 MinerPL sshd[3643016]: Invalid user test from 104.248.91.100 port 46810 show less

2025-12-09T21:08:02.718105+00:00 instance-20250416-2307 sshd-session[1771095]: Invalid user server from 104.248.91.100 port 36342 2025-12-09T21:08:32.831177+00:00 instance-20250416-2307 sshd-session[1771099]: Invalid user server from 104.248.91.100 p ... show more 2025-12-09T21:08:02.718105+00:00 instance-20250416-2307 sshd-session[1771095]: Invalid user server from 104.248.91.100 port 36342 2025-12-09T21:08:32.831177+00:00 instance-20250416-2307 sshd-session[1771099]: Invalid user server from 104.248.91.100 port 59660 2025-12-09T21:09:03.194586+00:00 instance-20250416-2307 sshd-session[1771102]: Invalid user server from 104.248.91.100 port 37008 2025-12-09T21:09:32.675518+00:00 instance-20250416-2307 sshd-session[1771104]: Invalid user server from 104.248.91.100 port 45226 2025-12-09T21:10:01.666477+00:00 instance-20250416-2307 sshd-session[1771106]: Invalid user server from 104.248.91.100 port 50732 ... show less

2025-12-09T22:07:47.997427+01:00 orome sshd[457631]: Invalid user server from 104.248.91.100 port 45428 2025-12-09T22:08:18.036899+01:00 orome sshd[457782]: Invalid user server from 104.248.91.100 port 58512 2025-12-09T22:08:48.653974+01:00 orome ssh ... show more 2025-12-09T22:07:47.997427+01:00 orome sshd[457631]: Invalid user server from 104.248.91.100 port 45428 2025-12-09T22:08:18.036899+01:00 orome sshd[457782]: Invalid user server from 104.248.91.100 port 58512 2025-12-09T22:08:48.653974+01:00 orome sshd[457814]: Invalid user server from 104.248.91.100 port 47978 2025-12-09T22:09:18.342101+01:00 orome sshd[458028]: Invalid user server from 104.248.91.100 port 52602 2025-12-09T22:09:47.430200+01:00 orome sshd[458061]: Invalid user server from 104.248.91.100 port 39972 ... show less

Dec 9 21:07:19 internal-mail-rafled-com sshd[788010]: Invalid user server from 104.248.91.100 port 58122 ...

2025-12-09T22:05:14.420723+01:00 meow sshd[1975303]: Invalid user server from 104.248.91.100 port 42168 2025-12-09T22:05:43.711998+01:00 meow sshd[1975305]: Invalid user server from 104.248.91.100 port 54412 2025-12-09T22:06:11.501350+01:00 meow sshd ... show more 2025-12-09T22:05:14.420723+01:00 meow sshd[1975303]: Invalid user server from 104.248.91.100 port 42168 2025-12-09T22:05:43.711998+01:00 meow sshd[1975305]: Invalid user server from 104.248.91.100 port 54412 2025-12-09T22:06:11.501350+01:00 meow sshd[1975307]: Invalid user server from 104.248.91.100 port 55900 2025-12-09T22:06:40.602424+01:00 meow sshd[1975316]: Invalid user server from 104.248.91.100 port 56698 2025-12-09T22:07:11.101755+01:00 meow sshd[1975321]: Invalid user server from 104.248.91.100 port 40228 ... show less