City: Nakuru
Region: Nakuru District
Country: Kenya
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.167.218.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17955
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.167.218.146. IN A
;; AUTHORITY SECTION:
. 139 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032100 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 21 17:12:42 CST 2022
;; MSG SIZE rcvd: 108146.218.167.102.in-addr.arpa domain name pointer twiga.telkom.co.ke.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
146.218.167.102.in-addr.arpa name = twiga.telkom.co.ke.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 217.165.96.251 | attack | Sniffing for wp-login |
2020-01-05 18:44:10 |
| 45.125.239.234 | attackspam | Automatic report generated by Wazuh |
2020-01-05 18:13:17 |
| 64.91.7.203 | attackspam | Mar 2 10:02:39 vpn sshd[18180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.91.7.203 Mar 2 10:02:41 vpn sshd[18180]: Failed password for invalid user ftpuser from 64.91.7.203 port 56988 ssh2 Mar 2 10:09:30 vpn sshd[18196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.91.7.203 |
2020-01-05 18:31:56 |
| 46.38.144.146 | attack | Jan 5 11:31:26 relay postfix/smtpd\[14055\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 5 11:31:28 relay postfix/smtpd\[14661\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 5 11:31:56 relay postfix/smtpd\[19287\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 5 11:31:57 relay postfix/smtpd\[18516\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 5 11:32:48 relay postfix/smtpd\[14661\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-01-05 18:41:57 |
| 66.117.12.196 | attack | Mar 20 09:52:12 vpn sshd[29783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.117.12.196 Mar 20 09:52:15 vpn sshd[29783]: Failed password for invalid user www from 66.117.12.196 port 37980 ssh2 Mar 20 10:00:15 vpn sshd[29834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.117.12.196 |
2020-01-05 18:22:01 |
| 188.163.109.153 | attack | 0,34-11/22 [bc01/m21] PostRequest-Spammer scoring: Lusaka01 |
2020-01-05 18:22:16 |
| 188.131.170.119 | attackbots | Unauthorized connection attempt detected from IP address 188.131.170.119 to port 2220 [J] |
2020-01-05 18:13:42 |
| 66.168.202.221 | attackspam | Dec 20 11:35:23 vpn sshd[13728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.168.202.221 Dec 20 11:35:25 vpn sshd[13728]: Failed password for invalid user sysadmin from 66.168.202.221 port 37024 ssh2 Dec 20 11:43:35 vpn sshd[13781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.168.202.221 |
2020-01-05 18:15:38 |
| 64.15.146.16 | attackspam | Mar 7 23:22:22 vpn sshd[13686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.15.146.16 Mar 7 23:22:24 vpn sshd[13686]: Failed password for invalid user confluence from 64.15.146.16 port 54574 ssh2 Mar 7 23:28:14 vpn sshd[13704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.15.146.16 |
2020-01-05 18:46:17 |
| 51.77.157.78 | attackbots | $f2bV_matches |
2020-01-05 18:25:08 |
| 103.114.107.149 | attack | Jan 5 11:54:36 lcl-usvr-02 sshd[32547]: Invalid user support from 103.114.107.149 port 65285 ... |
2020-01-05 18:17:37 |
| 66.70.130.151 | attack | Mar 1 06:14:19 vpn sshd[10265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.130.151 Mar 1 06:14:21 vpn sshd[10265]: Failed password for invalid user kunakorn from 66.70.130.151 port 38742 ssh2 Mar 1 06:20:17 vpn sshd[10305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.130.151 |
2020-01-05 18:06:25 |
| 185.156.73.52 | attackspambots | 01/05/2020-04:49:43.547748 185.156.73.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-01-05 18:35:40 |
| 66.187.72.146 | attack | Dec 22 17:17:34 vpn sshd[11057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.187.72.146 Dec 22 17:17:37 vpn sshd[11057]: Failed password for invalid user testuser from 66.187.72.146 port 51913 ssh2 Dec 22 17:20:49 vpn sshd[11089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.187.72.146 |
2020-01-05 18:12:12 |
| 64.190.91.141 | attackbotsspam | Nov 23 12:14:23 vpn sshd[19693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.190.91.141 Nov 23 12:14:25 vpn sshd[19693]: Failed password for invalid user astrojoust from 64.190.91.141 port 43168 ssh2 Nov 23 12:23:35 vpn sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.190.91.141 |
2020-01-05 18:42:44 |