165.245.212.104

Excessive crawling : exceed crawl-delay defined in robots.txt

Confirmed malicious by STILWaters CTI platform (score=100, sources=1)

4 incidents: malicious activity. First: 2026-06-18 15:30, Last: 2026-06-25 16:30 UTC. Triggers: ufw-repeater.

3 incidents: malicious activity. First: 2026-06-11 14:30, Last: 2026-06-25 16:30 UTC. Triggers: ufw-repeater.

SSH brute force

4 incidents: malicious activity. First: 2026-06-04 14:15, Last: 2026-06-11 14:30 UTC. Triggers: ufw-repeater.

rooted: SSH Brute Force from 165.245.212.104 at 2026-06-10 06:35:57 IST

rooted: SSH Brute Force from 165.245.212.104 at 2026-06-09 06:30:52 IST

3 incidents: SSH brute-force. First: 2026-05-28 11:06, Last: 2026-06-04 14:15 UTC. Triggers: sshd-aggressive,ufw-repeater.

Blocked by UFW (TCP on 443) Source port: 61013 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 165.245.212.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

rooted: SSH Brute Force from 165.245.212.104 at 2026-06-03 06:52:32 IST

2026-06-03 01:08:13 UTC Unauthorized activity to TCP port 8088. Web App

May 30 05:00:41 c2 sshd[3820020]: Failed password for root from 165.245.212.104 port 44412 ssh2 May 30 05:02:03 c2 sshd[3820024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root May 3 ... show more May 30 05:00:41 c2 sshd[3820020]: Failed password for root from 165.245.212.104 port 44412 ssh2 May 30 05:02:03 c2 sshd[3820024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root May 30 05:02:05 c2 sshd[3820024]: Failed password for root from 165.245.212.104 port 36488 ssh2 May 30 05:03:27 c2 sshd[3820044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root May 30 05:03:29 c2 sshd[3820044]: Failed password for root from 165.245.212.104 port 48824 ssh2 ... show less

(sshd) Failed SSH login from 165.245.212.104 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 30 00:00:36 15448 sshd[8603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more (sshd) Failed SSH login from 165.245.212.104 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 30 00:00:36 15448 sshd[8603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root May 30 00:00:38 15448 sshd[8603]: Failed password for root from 165.245.212.104 port 36704 ssh2 May 30 00:01:59 15448 sshd[9313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root May 30 00:02:01 15448 sshd[9313]: Failed password for root from 165.245.212.104 port 39150 ssh2 May 30 00:03:24 15448 sshd[10260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root show less

2026-05-29T22:00:07.047768-07:00 pixelmemory sshd-session[1384350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root 2026-05-29T22:00:08.299772-07:00 pixelmemory sshd-session[1384350]: ... show more 2026-05-29T22:00:07.047768-07:00 pixelmemory sshd-session[1384350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root 2026-05-29T22:00:08.299772-07:00 pixelmemory sshd-session[1384350]: Failed password for root from 165.245.212.104 port 57576 ssh2 2026-05-29T22:01:30.235490-07:00 pixelmemory sshd-session[1384436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.245.212.104 user=root 2026-05-29T22:01:32.271700-07:00 pixelmemory sshd-session[1384436]: Failed password for root from 165.245.212.104 port 51254 ssh2 ... show less