City: Nairobi
Region: Nairobi
Country: Kenya
Internet Service Provider: Airtel
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.6.68.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48345
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.6.68.166. IN A
;; AUTHORITY SECTION:
. 571 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 20:02:33 CST 2023
;; MSG SIZE rcvd: 105Host 166.68.6.102.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 166.68.6.102.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 34.84.103.120 | attack | Automatic report - XMLRPC Attack |
2020-01-14 00:56:17 |
| 216.245.210.54 | attackspambots | Trying ports that it shouldn't be. |
2020-01-14 01:07:20 |
| 222.186.175.151 | attackspam | Jan 13 11:37:44 lanister sshd[6170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Jan 13 11:37:46 lanister sshd[6170]: Failed password for root from 222.186.175.151 port 39476 ssh2 ... |
2020-01-14 00:40:46 |
| 36.71.237.35 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 00:51:47 |
| 187.94.31.10 | attackbots | BR__<177>1578920775 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 187.94.31.10:49304 |
2020-01-14 00:56:49 |
| 209.126.108.37 | attackbotsspam | Jan 13 08:40:12 giraffe sshd[3012]: Invalid user admin from 209.126.108.37 Jan 13 08:40:13 giraffe sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 Jan 13 08:40:15 giraffe sshd[3012]: Failed password for invalid user admin from 209.126.108.37 port 23068 ssh2 Jan 13 08:40:15 giraffe sshd[3012]: Received disconnect from 209.126.108.37 port 23068:11: Bye Bye [preauth] Jan 13 08:40:15 giraffe sshd[3012]: Disconnected from 209.126.108.37 port 23068 [preauth] Jan 13 08:59:40 giraffe sshd[4484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 user=r.r Jan 13 08:59:42 giraffe sshd[4484]: Failed password for r.r from 209.126.108.37 port 33982 ssh2 Jan 13 08:59:42 giraffe sshd[4484]: Received disconnect from 209.126.108.37 port 33982:11: Bye Bye [preauth] Jan 13 08:59:42 giraffe sshd[4484]: Disconnected from 209.126.108.37 port 33982 [preauth] Jan 13 09:05:09 ........ ------------------------------- |
2020-01-14 00:51:20 |
| 185.143.223.81 | attack | Jan 13 17:29:16 h2177944 kernel: \[2131404.386629\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=37660 PROTO=TCP SPT=46592 DPT=15308 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:29:16 h2177944 kernel: \[2131404.386640\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=37660 PROTO=TCP SPT=46592 DPT=15308 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:31:23 h2177944 kernel: \[2131531.045466\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17899 PROTO=TCP SPT=46592 DPT=2856 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:31:23 h2177944 kernel: \[2131531.045485\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17899 PROTO=TCP SPT=46592 DPT=2856 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 13 17:34:04 h2177944 kernel: \[2131691.719376\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.21 |
2020-01-14 01:05:26 |
| 112.85.42.173 | attackbots | Jan 13 21:27:43 gw1 sshd[21604]: Failed password for root from 112.85.42.173 port 42019 ssh2 Jan 13 21:27:58 gw1 sshd[21604]: Failed password for root from 112.85.42.173 port 42019 ssh2 Jan 13 21:27:58 gw1 sshd[21604]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 42019 ssh2 [preauth] ... |
2020-01-14 00:42:20 |
| 124.83.113.101 | attackbots | Honeypot attack, port: 445, PTR: 124.83.113.101.pldt.net. |
2020-01-14 01:04:45 |
| 41.87.150.50 | attack | [Mon Jan 13 08:50:14 2020] Failed password for invalid user user from 41.87.150.50 port 54578 ssh2 [Mon Jan 13 08:50:23 2020] Failed password for invalid user user from 41.87.150.50 port 56305 ssh2 [Mon Jan 13 08:50:49 2020] Failed password for invalid user user from 41.87.150.50 port 61742 ssh2 [Mon Jan 13 08:50:51 2020] Failed password for invalid user user from 41.87.150.50 port 62216 ssh2 [Mon Jan 13 08:51:18 2020] Failed password for invalid user user from 41.87.150.50 port 50985 ssh2 [Mon Jan 13 08:51:22 2020] Failed password for invalid user user from 41.87.150.50 port 51775 ssh2 [Mon Jan 13 08:51:28 2020] Failed password for invalid user user from 41.87.150.50 port 52837 ssh2 [Mon Jan 13 08:52:57 2020] Failed password for invalid user user from 41.87.150.50 port 53891 ssh2 [Mon Jan 13 08:53:03 2020] Failed password for invalid user user from 41.87.150.50 port 55288 ssh2 [Mon Jan 13 08:53:56 2020] Failed password for invalid user user from 41.87.150.50 port 49363........ ------------------------------- |
2020-01-14 00:27:26 |
| 54.39.98.253 | attackspam | Unauthorized connection attempt detected from IP address 54.39.98.253 to port 2220 [J] |
2020-01-14 00:57:33 |
| 105.156.156.56 | attackbots | [Mon Jan 13 08:44:10 2020] Failed password for invalid user user from 105.156.156.56 port 63177 ssh2 [Mon Jan 13 08:44:40 2020] Failed password for invalid user user from 105.156.156.56 port 53088 ssh2 [Mon Jan 13 08:45:09 2020] Failed password for invalid user user from 105.156.156.56 port 59336 ssh2 [Mon Jan 13 08:46:21 2020] Failed password for invalid user user from 105.156.156.56 port 56949 ssh2 [Mon Jan 13 08:47:31 2020] Failed password for invalid user user from 105.156.156.56 port 54830 ssh2 [Mon Jan 13 08:48:41 2020] Failed password for invalid user user from 105.156.156.56 port 52484 ssh2 [Mon Jan 13 08:49:00 2020] Failed password for invalid user user from 105.156.156.56 port 56253 ssh2 [Mon Jan 13 08:49:04 2020] Failed password for invalid user user from 105.156.156.56 port 57044 ssh2 [Mon Jan 13 08:49:50 2020] Failed password for invalid user user from 105.156.156.56 port 49971 ssh2 [Mon Jan 13 08:53:36 2020] Failed password for invalid user user from 105.1........ ------------------------------- |
2020-01-14 00:42:43 |
| 176.8.51.233 | attack | Honeypot attack, port: 445, PTR: 176-8-51-233.broadband.kyivstar.net. |
2020-01-14 00:40:16 |
| 106.0.4.31 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 00:57:11 |
| 189.22.42.2 | attack | 1578920809 - 01/13/2020 14:06:49 Host: 189.22.42.2/189.22.42.2 Port: 445 TCP Blocked |
2020-01-14 00:29:22 |