City: Nairobi
Region: Nairobi Province
Country: Kenya
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.21.41.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;105.21.41.70. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 09:34:50 CST 2022
;; MSG SIZE rcvd: 105Host 70.41.21.105.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 70.41.21.105.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.22.45.250 | attackspam | Dec 20 16:16:16 mc1 kernel: \[1013789.785658\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=50707 PROTO=TCP SPT=57664 DPT=6129 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 16:18:28 mc1 kernel: \[1013921.619036\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16706 PROTO=TCP SPT=57664 DPT=16000 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 20 16:25:44 mc1 kernel: \[1014357.686044\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42138 PROTO=TCP SPT=57664 DPT=6636 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-20 23:26:37 |
| 222.186.175.140 | attack | Dec 20 05:48:23 kapalua sshd\[32222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 20 05:48:25 kapalua sshd\[32222\]: Failed password for root from 222.186.175.140 port 24662 ssh2 Dec 20 05:48:41 kapalua sshd\[32231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 20 05:48:43 kapalua sshd\[32231\]: Failed password for root from 222.186.175.140 port 59690 ssh2 Dec 20 05:48:48 kapalua sshd\[32231\]: Failed password for root from 222.186.175.140 port 59690 ssh2 |
2019-12-21 00:02:25 |
| 176.115.192.130 | attackbotsspam | " " |
2019-12-21 00:00:40 |
| 192.99.32.86 | attack | Dec 20 05:06:35 php1 sshd\[20903\]: Invalid user site4 from 192.99.32.86 Dec 20 05:06:35 php1 sshd\[20903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.32.86 Dec 20 05:06:37 php1 sshd\[20903\]: Failed password for invalid user site4 from 192.99.32.86 port 39394 ssh2 Dec 20 05:12:30 php1 sshd\[21608\]: Invalid user harben from 192.99.32.86 Dec 20 05:12:30 php1 sshd\[21608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.32.86 |
2019-12-20 23:25:27 |
| 91.215.142.134 | attackbotsspam | Unauthorized connection attempt detected from IP address 91.215.142.134 to port 445 |
2019-12-20 23:32:17 |
| 104.175.32.206 | attack | Dec 20 16:38:10 sd-53420 sshd\[18075\]: Invalid user kulseth from 104.175.32.206 Dec 20 16:38:10 sd-53420 sshd\[18075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.175.32.206 Dec 20 16:38:12 sd-53420 sshd\[18075\]: Failed password for invalid user kulseth from 104.175.32.206 port 48064 ssh2 Dec 20 16:43:34 sd-53420 sshd\[20013\]: Invalid user mahmud from 104.175.32.206 Dec 20 16:43:34 sd-53420 sshd\[20013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.175.32.206 ... |
2019-12-20 23:51:18 |
| 87.242.64.31 | attackbots | Sql/code injection probe |
2019-12-20 23:39:26 |
| 167.99.75.141 | attack | Dec 20 05:39:37 tdfoods sshd\[13905\]: Invalid user nanchan from 167.99.75.141 Dec 20 05:39:37 tdfoods sshd\[13905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.141 Dec 20 05:39:38 tdfoods sshd\[13905\]: Failed password for invalid user nanchan from 167.99.75.141 port 54610 ssh2 Dec 20 05:45:56 tdfoods sshd\[14466\]: Invalid user gabang7210 from 167.99.75.141 Dec 20 05:45:56 tdfoods sshd\[14466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.141 |
2019-12-20 23:55:44 |
| 51.38.186.47 | attackbots | Dec 20 16:12:54 vpn01 sshd[3131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.47 Dec 20 16:12:56 vpn01 sshd[3131]: Failed password for invalid user tuy from 51.38.186.47 port 51272 ssh2 ... |
2019-12-20 23:20:09 |
| 27.128.164.82 | attack | Dec 20 05:08:56 auw2 sshd\[5425\]: Invalid user mortini from 27.128.164.82 Dec 20 05:08:56 auw2 sshd\[5425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.164.82 Dec 20 05:08:58 auw2 sshd\[5425\]: Failed password for invalid user mortini from 27.128.164.82 port 34246 ssh2 Dec 20 05:15:59 auw2 sshd\[6184\]: Invalid user aleena from 27.128.164.82 Dec 20 05:15:59 auw2 sshd\[6184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.164.82 |
2019-12-20 23:33:37 |
| 5.152.159.31 | attackspambots | Dec 20 16:30:05 ns41 sshd[20350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31 Dec 20 16:30:05 ns41 sshd[20350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31 |
2019-12-20 23:45:22 |
| 222.186.173.154 | attackbotsspam | Dec 20 15:24:57 ip-172-31-62-245 sshd\[1557\]: Failed password for root from 222.186.173.154 port 22888 ssh2\ Dec 20 15:25:00 ip-172-31-62-245 sshd\[1557\]: Failed password for root from 222.186.173.154 port 22888 ssh2\ Dec 20 15:25:03 ip-172-31-62-245 sshd\[1557\]: Failed password for root from 222.186.173.154 port 22888 ssh2\ Dec 20 15:25:08 ip-172-31-62-245 sshd\[1557\]: Failed password for root from 222.186.173.154 port 22888 ssh2\ Dec 20 15:25:11 ip-172-31-62-245 sshd\[1557\]: Failed password for root from 222.186.173.154 port 22888 ssh2\ |
2019-12-20 23:28:52 |
| 218.92.0.173 | attack | Dec 20 10:25:22 plusreed sshd[5577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Dec 20 10:25:24 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 Dec 20 10:25:33 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 Dec 20 10:25:22 plusreed sshd[5577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Dec 20 10:25:24 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 Dec 20 10:25:33 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 Dec 20 10:25:22 plusreed sshd[5577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Dec 20 10:25:24 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 Dec 20 10:25:33 plusreed sshd[5577]: Failed password for root from 218.92.0.173 port 60677 ssh2 D |
2019-12-21 00:05:20 |
| 183.82.140.136 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:55:10. |
2019-12-20 23:22:59 |
| 159.203.88.222 | attackspambots | Dec 20 15:54:51 [host] sshd[28868]: Invalid user bogart from 159.203.88.222 Dec 20 15:54:51 [host] sshd[28868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.88.222 Dec 20 15:54:53 [host] sshd[28868]: Failed password for invalid user bogart from 159.203.88.222 port 51176 ssh2 |
2019-12-20 23:46:42 |