City: unknown
Region: unknown
Country: Kenya
Internet Service Provider: Airtel
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.5.243.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23513
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.5.243.38. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025072302 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 24 13:14:57 CST 2025
;; MSG SIZE rcvd: 105Host 38.243.5.102.in-addr.arpa. not found: 3(NXDOMAIN)server can't find 102.5.243.38.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.219.121 | attackspambots | SSH-BruteForce |
2019-07-07 11:16:14 |
| 185.65.43.4 | attack | [Sun Jul 07 00:08:44.705941 2019] [access_compat:error] [pid 15689] [client 185.65.43.4:34886] AH01797: client denied by server configuration: /var/www/html/luke/wp-admin/js/.h..php, referer: http://site.ru ... |
2019-07-07 11:18:50 |
| 178.124.178.196 | attack | Jul 7 01:08:45 mail sshd\[26595\]: Invalid user admin from 178.124.178.196 Jul 7 01:08:45 mail sshd\[26595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.124.178.196 Jul 7 01:08:46 mail sshd\[26595\]: Failed password for invalid user admin from 178.124.178.196 port 39880 ssh2 ... |
2019-07-07 11:16:41 |
| 104.156.255.106 | attackbotsspam | Jul 6 21:39:16 www sshd[21278]: Address 104.156.255.106 maps to 104.156.255.106.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 6 21:39:18 www sshd[21278]: Failed password for r.r from 104.156.255.106 port 53820 ssh2 Jul 6 21:39:19 www sshd[21280]: Address 104.156.255.106 maps to 104.156.255.106.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 6 21:39:19 www sshd[21280]: Invalid user admin from 104.156.255.106 Jul 6 21:39:22 www sshd[21280]: Failed password for invalid user admin from 104.156.255.106 port 58924 ssh2 Jul 6 21:39:23 www sshd[21282]: Address 104.156.255.106 maps to 104.156.255.106.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 6 21:39:25 www sshd[21282]: Failed password for r.r from 104.156.255.106 port 34906 ssh2 Jul 6 21:39:26 www sshd[21284]: Address 104.156.255.106 maps to 104.156.255.106.vultr.com, but this does not map back to the ........ ------------------------------ |
2019-07-07 10:58:13 |
| 66.249.75.25 | attack | Automatic report - Web App Attack |
2019-07-07 11:19:24 |
| 128.134.187.155 | attackspam | ssh failed login |
2019-07-07 11:26:43 |
| 183.131.82.99 | attack | 2019-07-07T01:45:38.270078abusebot-2.cloudsearch.cf sshd\[9336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99 user=root |
2019-07-07 10:57:07 |
| 168.228.150.147 | attackspambots | Brute force attempt |
2019-07-07 11:33:33 |
| 139.59.59.187 | attackbots | Jul 7 05:08:00 jane sshd\[835\]: Invalid user anita from 139.59.59.187 port 47488 Jul 7 05:08:00 jane sshd\[835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.187 Jul 7 05:08:03 jane sshd\[835\]: Failed password for invalid user anita from 139.59.59.187 port 47488 ssh2 ... |
2019-07-07 11:20:12 |
| 185.240.242.34 | attackbotsspam | Jul 6 20:29:50 web01 sshd[53513]: Connection from 185.240.242.34 port 49030 on 188.40.110.85 port 22 Jul 6 20:29:50 web01 sshd[53513]: Did not receive identification string from 185.240.242.34 port 49030 Jul 6 20:32:09 web01 sshd[55160]: Connection from 185.240.242.34 port 46742 on 188.40.110.85 port 22 Jul 6 20:32:09 web01 sshd[55160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.242.34 user=r.r Jul 6 20:32:11 web01 sshd[55160]: Failed password for r.r from 185.240.242.34 port 46742 ssh2 Jul 6 20:32:11 web01 sshd[55160]: Received disconnect from 185.240.242.34 port 46742:11: Normal Shutdown, Thank you for playing [preauth] Jul 6 20:32:11 web01 sshd[55160]: Disconnected from 185.240.242.34 port 46742 [preauth] Jul 6 20:32:39 web01 sshd[55318]: Connection from 185.240.242.34 port 35904 on 188.40.110.85 port 22 Jul 6 20:32:39 web01 sshd[55318]: Invalid user tomcat from 185.240.242.34 port 35904 Jul 6 20:32:39 w........ ------------------------------- |
2019-07-07 11:35:47 |
| 168.228.148.156 | attackspam | failed_logins |
2019-07-07 11:36:42 |
| 151.80.144.39 | attackbots | Jul 7 03:01:52 ip-172-31-1-72 sshd\[5944\]: Invalid user git from 151.80.144.39 Jul 7 03:01:52 ip-172-31-1-72 sshd\[5944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.144.39 Jul 7 03:01:54 ip-172-31-1-72 sshd\[5944\]: Failed password for invalid user git from 151.80.144.39 port 43784 ssh2 Jul 7 03:05:41 ip-172-31-1-72 sshd\[6058\]: Invalid user mc3 from 151.80.144.39 Jul 7 03:05:41 ip-172-31-1-72 sshd\[6058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.144.39 |
2019-07-07 11:14:47 |
| 134.175.176.160 | attack | SSH invalid-user multiple login attempts |
2019-07-07 11:00:28 |
| 128.76.133.62 | attack | Jul 6 19:08:11 debian sshd\[27145\]: Invalid user mythtv from 128.76.133.62 port 55892 Jul 6 19:08:11 debian sshd\[27145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.76.133.62 Jul 6 19:08:13 debian sshd\[27145\]: Failed password for invalid user mythtv from 128.76.133.62 port 55892 ssh2 ... |
2019-07-07 11:34:07 |
| 42.200.208.158 | attackbots | ssh failed login |
2019-07-07 11:17:47 |