City: Kigali
Region: Kigali
Country: Rwanda
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '105.178.0.0 - 105.178.127.255'
% No abuse contact registered for 105.178.0.0 - 105.178.127.255
inetnum: 105.178.0.0 - 105.178.127.255
netname: orn_Network
descr: KT RWANDA NETWORK Ltd
country: RW
org: ORG-ORN1-AFRINIC
admin-c: EI6-AFRINIC
tech-c: BN32-AFRINIC
tech-c: EI6-AFRINIC
tech-c: PH14-AFRINIC
tech-c: RM124-AFRINIC
tech-c: CDN1-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: ORNL-MNT
mnt-domains: ORNL-MNT
source: AFRINIC # Filtered
parent: 105.0.0.0 - 105.255.255.255
organisation: ORG-ORN1-AFRINIC
org-name: KT RWANDA NETWORK Ltd
org-type: LIR
country: RW
address: KTRN, Korea Telecom Rwanda Networks
address: KG 9 Ave. 17, Nyarutarama
address: Kigali
phone: tel:+250-783-000-309
phone: tel:+250-783-000-309
phone: tel:+250-788-506-261
phone: tel:+250-785-197-329
phone: tel:+250-788-612-260
phone: tel:+250-788-299-218
admin-c: EI6-AFRINIC
tech-c: RM124-AFRINIC
tech-c: BN32-AFRINIC
tech-c: PH14-AFRINIC
tech-c: EI6-AFRINIC
tech-c: CDN1-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: ORNL-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered
person: Bernard Nganahe
address: KG7 Avenue, Kigali Heights, 7th Floor,
address: Kigali
address: Rwanda
phone: tel:+250-788-612-260
nic-hdl: BN32-AFRINIC
source: AFRINIC # Filtered
mnt-by: GENERATED-EWXGFEC6B86AB6GGRZPV8OLWTE82GHEM-MNT
person: Christian Desire Nkinzingabo
address: KTRN, Korea Telecom Rwanda Networks
address: KG 9 Ave. 17, Nyarutarama
address: Kigali
address: Rwanda
phone: tel:+250-786-155-733
nic-hdl: CDN1-AFRINIC
source: AFRINIC # Filtered
mnt-by: GENERATED-GFSHXLUX7WZIAGTAB1BUFLKJDQFUELON-MNT
person: Elijah IRAGABA
nic-hdl: EI6-AFRINIC
address: Kigali 250
address: RW
address: Kigali
address: Rwanda
phone: tel:+250-783-000-309
mnt-by: GENERATED-P8IE8LDN43T8SMATEK0CSFFML1WVJTLO-MNT
source: AFRINIC # Filtered
person: Perpetue Haberisoni
nic-hdl: PH14-AFRINIC
address: KK 72 Street
address: Kigali 5440
address: Rwanda
phone: tel:+250-788-299-218
mnt-by: GENERATED-BDHA8IVRWQKNIPAFRDDVHEUREQOHCX3S-MNT
source: AFRINIC # Filtered
person: Rogers Muganga
address: KTRN, Korea Telecom Rwanda Networks
address: KG 9 Ave. 17, Nyarutarama
address: Kigali
address: Rwanda
phone: tel:+250-771-000-582
phone: tel:+250-784-465-929
nic-hdl: RM124-AFRINIC
source: AFRINIC # Filtered
mnt-by: GENERATED-ZLRVUFNOCMDVUP1OBPQQ8XJMC6TFJPTX-MNT
% Information related to '105.178.0.0/17AS37228'
route: 105.178.0.0/17
descr: KTRN-4GLTE-NETWORK
origin: AS37228
mnt-by: ORNL-MNT
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.178.23.65
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23738
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.178.23.65. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025092100 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 21 19:59:11 CST 2025
;; MSG SIZE rcvd: 106Host 65.23.178.105.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 65.23.178.105.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.91.110.170 | attackspambots | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-04-08 05:43:48 |
| 212.129.28.80 | attackbotsspam | Apr 7 07:49:54 www sshd[29884]: Invalid user dspace from 212.129.28.80 Apr 7 07:49:56 www sshd[29884]: Failed password for invalid user dspace from 212.129.28.80 port 34834 ssh2 Apr 7 07:49:56 www sshd[29884]: Received disconnect from 212.129.28.80: 11: Bye Bye [preauth] Apr 7 07:57:05 www sshd[30014]: Invalid user rakhi from 212.129.28.80 Apr 7 07:57:08 www sshd[30014]: Failed password for invalid user rakhi from 212.129.28.80 port 58914 ssh2 Apr 7 07:57:08 www sshd[30014]: Received disconnect from 212.129.28.80: 11: Bye Bye [preauth] Apr 7 08:01:08 www sshd[30146]: Invalid user web from 212.129.28.80 Apr 7 08:01:10 www sshd[30146]: Failed password for invalid user web from 212.129.28.80 port 43076 ssh2 Apr 7 08:01:10 www sshd[30146]: Received disconnect from 212.129.28.80: 11: Bye Bye [preauth] Apr 7 08:04:31 www sshd[30231]: Invalid user hl2dm from 212.129.28.80 Apr 7 08:04:33 www sshd[30231]: Failed password for invalid user hl2dm from 212.129.28.80 port ........ ------------------------------- |
2020-04-08 06:08:11 |
| 5.34.176.2 | attackbotsspam | SSH Brute Force |
2020-04-08 05:41:34 |
| 208.113.171.192 | attack | 208.113.171.192 - - [08/Apr/2020:00:07:00 +0200] "POST /wp-login.php HTTP/1.0" 200 2504 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.113.171.192 - - [08/Apr/2020:00:07:01 +0200] "POST /wp-login.php HTTP/1.0" 200 2508 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-04-08 06:12:40 |
| 52.246.161.60 | attackbots | 5x Failed Password |
2020-04-08 06:01:30 |
| 193.112.19.133 | attackspam | Apr 7 22:39:24 cloud sshd[5322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.19.133 Apr 7 22:39:26 cloud sshd[5322]: Failed password for invalid user leonard from 193.112.19.133 port 36020 ssh2 |
2020-04-08 05:42:56 |
| 180.108.64.71 | attackspambots | 2020-04-07 12:52:43 server sshd[97116]: Failed password for invalid user root from 180.108.64.71 port 35468 ssh2 |
2020-04-08 05:39:37 |
| 180.76.121.28 | attackbotsspam | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-04-08 05:35:48 |
| 89.248.174.216 | attackbots | EXPLOIT Remote Command Execution via Shell Script -2 |
2020-04-08 05:45:50 |
| 209.97.160.105 | attackbotsspam | Apr 7 23:31:46 host01 sshd[6766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.160.105 Apr 7 23:31:48 host01 sshd[6766]: Failed password for invalid user user from 209.97.160.105 port 34500 ssh2 Apr 7 23:35:10 host01 sshd[7566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.160.105 ... |
2020-04-08 05:37:45 |
| 141.101.247.253 | attackbotsspam | Apr 7 17:42:18 ny01 sshd[13995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.247.253 Apr 7 17:42:20 ny01 sshd[13995]: Failed password for invalid user deploy from 141.101.247.253 port 54320 ssh2 Apr 7 17:46:24 ny01 sshd[14527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.247.253 |
2020-04-08 06:00:29 |
| 46.101.232.76 | attackspambots | $f2bV_matches |
2020-04-08 05:46:18 |
| 51.75.207.61 | attackspambots | $f2bV_matches |
2020-04-08 05:37:59 |
| 162.243.158.198 | attackbots | Apr 7 23:41:03 markkoudstaal sshd[1164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 Apr 7 23:41:06 markkoudstaal sshd[1164]: Failed password for invalid user jeremy from 162.243.158.198 port 40578 ssh2 Apr 7 23:46:25 markkoudstaal sshd[1962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.198 |
2020-04-08 05:58:09 |
| 106.12.145.126 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-04-08 06:04:19 |