104.248.92.131

Blocked by UFW (TCP on 8883) Source port: 61004 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 104.248.92.131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

denied traffic to a honeypot network. destination port 8899.

Web attack/malicious scanning detected

Blocked by UFW (TCP on 1000) Source port: 61004 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 104.248.92.131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.131 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)

tcp/993

Apr 23 20:24:04 kernel: [444850.808843] [UFW BLOCK] IN=ens160 OUT= SRC=104.248.92.131 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=50432 PROTO=TCP SPT=61014 DPT=7000 WINDOW=1025 RES=0x00 SYN URGP=0 ...

Port connection indicating compromised host

Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.

list.rtbh.com.tr report: tcp/0

Feb 14 12:41:29 VPS sshd[433623]: Invalid user test from 104.248.92.131 port 38588 Feb 14 12:41:29 VPS sshd[433623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 Feb 14 12:41:29 VPS sshd[4336 ... show more Feb 14 12:41:29 VPS sshd[433623]: Invalid user test from 104.248.92.131 port 38588 Feb 14 12:41:29 VPS sshd[433623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 Feb 14 12:41:29 VPS sshd[433623]: Invalid user test from 104.248.92.131 port 38588 Feb 14 12:41:31 VPS sshd[433623]: Failed password for invalid user test from 104.248.92.131 port 38588 ssh2 Feb 14 12:41:57 VPS sshd[433652]: Invalid user test from 104.248.92.131 port 49682 ... show less

2026-02-14T12:33:35.580161+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306270]: Invalid user server from 104.248.92.131 port 51196 2026-02-14T12:34:05.921621+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306316]: Invalid user server from 104. ... show more 2026-02-14T12:33:35.580161+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306270]: Invalid user server from 104.248.92.131 port 51196 2026-02-14T12:34:05.921621+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306316]: Invalid user server from 104.248.92.131 port 50142 2026-02-14T12:34:37.260358+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306362]: Invalid user server from 104.248.92.131 port 50054 2026-02-14T12:35:06.226673+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306409]: Invalid user server from 104.248.92.131 port 36358 2026-02-14T12:35:35.499136+00:00 a98d764b-9513-4a69-8d79-3b12c386575b sshd[3306453]: Invalid user server from 104.248.92.131 port 55420 ... show less

Feb 15 01:27:01 felt sshd[899866]: Invalid user postgres from 104.248.92.131 port 49284 Feb 15 01:33:59 felt sshd[900510]: Invalid user server from 104.248.92.131 port 53022 Feb 15 01:34:29 felt sshd[900540]: Invalid user server from 104.248.92.131 p ... show more Feb 15 01:27:01 felt sshd[899866]: Invalid user postgres from 104.248.92.131 port 49284 Feb 15 01:33:59 felt sshd[900510]: Invalid user server from 104.248.92.131 port 53022 Feb 15 01:34:29 felt sshd[900540]: Invalid user server from 104.248.92.131 port 47270 Feb 15 01:34:59 felt sshd[900547]: Invalid user server from 104.248.92.131 port 57688 Feb 15 01:35:29 felt sshd[900959]: Invalid user server from 104.248.92.131 port 48006 ... show less

2026-02-14T12:33:40.304814+00:00 ubuntu sshd[1631462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 2026-02-14T12:33:42.051105+00:00 ubuntu sshd[1631462]: Failed password for invalid user ser ... show more 2026-02-14T12:33:40.304814+00:00 ubuntu sshd[1631462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 2026-02-14T12:33:42.051105+00:00 ubuntu sshd[1631462]: Failed password for invalid user server from 104.248.92.131 port 49176 ssh2 2026-02-14T12:34:11.143194+00:00 ubuntu sshd[1631467]: Invalid user server from 104.248.92.131 port 60164 ... show less

Feb 14 12:18:39 VPS sshd[430813]: Invalid user oracle from 104.248.92.131 port 35780 Feb 14 12:18:39 VPS sshd[430813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 Feb 14 12:18:39 VPS sshd[43 ... show more Feb 14 12:18:39 VPS sshd[430813]: Invalid user oracle from 104.248.92.131 port 35780 Feb 14 12:18:39 VPS sshd[430813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.131 Feb 14 12:18:39 VPS sshd[430813]: Invalid user oracle from 104.248.92.131 port 35780 Feb 14 12:18:41 VPS sshd[430813]: Failed password for invalid user oracle from 104.248.92.131 port 35780 ssh2 Feb 14 12:19:09 VPS sshd[430822]: Invalid user oracle from 104.248.92.131 port 59916 ... show less