City: unknown
Region: unknown
Country: Uganda
Internet Service Provider: Airtel
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.85.68.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49778
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.85.68.92. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 19:28:20 CST 2023
;; MSG SIZE rcvd: 105
92.68.85.102.in-addr.arpa domain name pointer 92-68-85-102.r.airtel.ug.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
92.68.85.102.in-addr.arpa name = 92-68-85-102.r.airtel.ug.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.152.8.84 | attack | Caught in portsentry honeypot |
2019-07-26 13:42:10 |
| 3.86.201.112 | attack | Jul 26 07:20:47 ArkNodeAT sshd\[28775\]: Invalid user mysql from 3.86.201.112 Jul 26 07:20:47 ArkNodeAT sshd\[28775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.86.201.112 Jul 26 07:20:49 ArkNodeAT sshd\[28775\]: Failed password for invalid user mysql from 3.86.201.112 port 46970 ssh2 |
2019-07-26 13:41:06 |
| 104.149.128.114 | attack | Jul 26 01:42:41 vps200512 sshd\[31448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114 user=root Jul 26 01:42:43 vps200512 sshd\[31448\]: Failed password for root from 104.149.128.114 port 52092 ssh2 Jul 26 01:47:07 vps200512 sshd\[31565\]: Invalid user dancer from 104.149.128.114 Jul 26 01:47:07 vps200512 sshd\[31565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114 Jul 26 01:47:09 vps200512 sshd\[31565\]: Failed password for invalid user dancer from 104.149.128.114 port 52092 ssh2 |
2019-07-26 13:55:32 |
| 139.162.109.43 | attack | [portscan] tcp/111 [ONC RPC] [scan/connect: 2 time(s)] *(RWIN=65535)(07260853) |
2019-07-26 14:07:09 |
| 185.254.122.35 | attackspam | Jul 26 05:58:33 h2177944 kernel: \[2437551.655315\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=3596 PROTO=TCP SPT=51581 DPT=6368 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:01:20 h2177944 kernel: \[2437718.526580\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=47488 PROTO=TCP SPT=51581 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:05:28 h2177944 kernel: \[2437966.552959\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=38794 PROTO=TCP SPT=51581 DPT=3509 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:07:38 h2177944 kernel: \[2438096.954542\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61200 PROTO=TCP SPT=51581 DPT=4247 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 06:08:34 h2177944 kernel: \[2438152.744460\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.1 |
2019-07-26 13:39:05 |
| 45.77.124.38 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-26 00:20:02,687 INFO [amun_request_handler] PortScan Detected on Port: 139 (45.77.124.38) |
2019-07-26 13:06:25 |
| 46.44.171.67 | attackbots | Jul 26 07:46:15 rpi sshd[638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.44.171.67 Jul 26 07:46:18 rpi sshd[638]: Failed password for invalid user xyz from 46.44.171.67 port 36226 ssh2 |
2019-07-26 13:56:35 |
| 89.159.67.245 | attackbotsspam | Jul 26 03:23:16 nginx webmin[67628]: Non-existent login as root from 89.159.67.245 Jul 26 03:23:17 nginx webmin[67636]: Non-existent login as root from 89.159.67.245 Jul 26 03:23:20 nginx webmin[67659]: Non-existent login as root from 89.159.67.245 Jul 26 03:23:23 nginx webmin[67662]: Non-existent login as root from 89.159.67.245 Jul 26 03:23:28 nginx webmin[68172]: Non-existent login as root from 89.159.67.245 |
2019-07-26 13:50:31 |
| 5.74.211.217 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-26 01:25:12,583 INFO [amun_request_handler] PortScan Detected on Port: 445 (5.74.211.217) |
2019-07-26 13:55:11 |
| 59.31.163.141 | attackspambots | 37215/tcp 37215/tcp 37215/tcp... [2019-05-27/07-24]38pkt,1pt.(tcp) |
2019-07-26 14:07:37 |
| 94.177.224.127 | attackbots | Jul 26 07:42:01 OPSO sshd\[5951\]: Invalid user emily from 94.177.224.127 port 38934 Jul 26 07:42:01 OPSO sshd\[5951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.224.127 Jul 26 07:42:03 OPSO sshd\[5951\]: Failed password for invalid user emily from 94.177.224.127 port 38934 ssh2 Jul 26 07:46:24 OPSO sshd\[7415\]: Invalid user cosmo from 94.177.224.127 port 34030 Jul 26 07:46:24 OPSO sshd\[7415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.224.127 |
2019-07-26 14:02:36 |
| 118.25.2.63 | attackbots | Jul 26 05:15:39 MK-Soft-VM4 sshd\[7727\]: Invalid user guest from 118.25.2.63 port 51783 Jul 26 05:15:39 MK-Soft-VM4 sshd\[7727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.2.63 Jul 26 05:15:41 MK-Soft-VM4 sshd\[7727\]: Failed password for invalid user guest from 118.25.2.63 port 51783 ssh2 ... |
2019-07-26 14:03:43 |
| 190.5.241.138 | attackbotsspam | 26.07.2019 04:59:00 SSH access blocked by firewall |
2019-07-26 13:07:49 |
| 80.213.255.129 | attack | Jul 26 07:01:44 eventyay sshd[29517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.213.255.129 Jul 26 07:01:46 eventyay sshd[29517]: Failed password for invalid user vsftpd from 80.213.255.129 port 41522 ssh2 Jul 26 07:06:17 eventyay sshd[30632]: Failed password for root from 80.213.255.129 port 37204 ssh2 ... |
2019-07-26 13:22:45 |
| 92.53.65.184 | attackspambots | firewall-block, port(s): 4122/tcp |
2019-07-26 13:27:13 |