City: unknown
Region: unknown
Country: Uganda
Internet Service Provider: Research and Education Network for Uganda
Hostname: unknown
Organization: RENU
Usage Type: University/College/School
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Aug 15 02:34:14 sshgateway sshd\[26038\]: Invalid user furukawa from 137.63.199.2 Aug 15 02:34:14 sshgateway sshd\[26038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Aug 15 02:34:17 sshgateway sshd\[26038\]: Failed password for invalid user furukawa from 137.63.199.2 port 49908 ssh2 |
2019-08-15 11:48:51 |
| attack | Jul 29 21:28:08 meumeu sshd[23295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Jul 29 21:28:09 meumeu sshd[23295]: Failed password for invalid user haggle from 137.63.199.2 port 41406 ssh2 Jul 29 21:34:01 meumeu sshd[23932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 ... |
2019-07-30 09:17:46 |
| attackspambots | Jul 25 02:24:25 localhost sshd\[88317\]: Invalid user nvidia from 137.63.199.2 port 48248 Jul 25 02:24:25 localhost sshd\[88317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Jul 25 02:24:27 localhost sshd\[88317\]: Failed password for invalid user nvidia from 137.63.199.2 port 48248 ssh2 Jul 25 02:30:05 localhost sshd\[88528\]: Invalid user postgres from 137.63.199.2 port 42044 Jul 25 02:30:05 localhost sshd\[88528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 ... |
2019-07-25 12:54:34 |
| attackbotsspam | Jul 24 18:58:32 localhost sshd\[66616\]: Invalid user ec2-user from 137.63.199.2 port 36640 Jul 24 18:58:32 localhost sshd\[66616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Jul 24 18:58:34 localhost sshd\[66616\]: Failed password for invalid user ec2-user from 137.63.199.2 port 36640 ssh2 Jul 24 19:04:14 localhost sshd\[66964\]: Invalid user kai from 137.63.199.2 port 58654 Jul 24 19:04:14 localhost sshd\[66964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 ... |
2019-07-25 03:16:53 |
| attackspam | 2019-07-24T12:04:27.978539abusebot-6.cloudsearch.cf sshd\[8003\]: Invalid user ubuntu from 137.63.199.2 port 56718 |
2019-07-24 20:33:00 |
| attackbotsspam | Jul 17 20:50:49 h2177944 sshd\[15441\]: Invalid user jira from 137.63.199.2 port 40770 Jul 17 20:50:49 h2177944 sshd\[15441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Jul 17 20:50:51 h2177944 sshd\[15441\]: Failed password for invalid user jira from 137.63.199.2 port 40770 ssh2 Jul 17 20:57:19 h2177944 sshd\[15626\]: Invalid user japon from 137.63.199.2 port 39922 ... |
2019-07-18 03:36:50 |
| attackspam | Jul 10 16:36:26 gcems sshd\[9299\]: Invalid user portal from 137.63.199.2 port 60926 Jul 10 16:36:26 gcems sshd\[9299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 Jul 10 16:36:28 gcems sshd\[9299\]: Failed password for invalid user portal from 137.63.199.2 port 60926 ssh2 Jul 10 16:39:22 gcems sshd\[9486\]: Invalid user mmm from 137.63.199.2 port 58298 Jul 10 16:39:22 gcems sshd\[9486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.199.2 ... |
2019-07-11 08:57:16 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.63.199.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61014
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;137.63.199.2. IN A
;; AUTHORITY SECTION:
. 3469 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019041400 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 14 16:10:40 +08 2019
;; MSG SIZE rcvd: 116
Host 2.199.63.137.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 2.199.63.137.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.39.21.187 | attackspambots | Unauthorized connection attempt detected from IP address 46.39.21.187 to port 445 [T] |
2020-03-24 18:33:52 |
| 114.242.245.32 | attackspam | (sshd) Failed SSH login from 114.242.245.32 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 24 12:32:49 s1 sshd[11929]: Invalid user nate from 114.242.245.32 port 48170 Mar 24 12:32:51 s1 sshd[11929]: Failed password for invalid user nate from 114.242.245.32 port 48170 ssh2 Mar 24 12:40:28 s1 sshd[12130]: Invalid user dolly from 114.242.245.32 port 29374 Mar 24 12:40:30 s1 sshd[12130]: Failed password for invalid user dolly from 114.242.245.32 port 29374 ssh2 Mar 24 12:44:23 s1 sshd[12196]: Invalid user losavio from 114.242.245.32 port 55410 |
2020-03-24 19:00:43 |
| 14.6.101.76 | attackbotsspam | Unauthorized connection attempt detected from IP address 14.6.101.76 to port 2222 [T] |
2020-03-24 18:38:29 |
| 27.188.211.98 | attackspam | Unauthorized connection attempt detected from IP address 27.188.211.98 to port 23 [T] |
2020-03-24 18:37:43 |
| 222.187.173.44 | attackspam | Unauthorized connection attempt detected from IP address 222.187.173.44 to port 5555 [T] |
2020-03-24 18:40:50 |
| 111.20.101.84 | attackspam | Unauthorized connection attempt detected from IP address 111.20.101.84 to port 8080 [T] |
2020-03-24 19:03:17 |
| 42.116.55.37 | attackspambots | Unauthorized connection attempt detected from IP address 42.116.55.37 to port 23 [T] |
2020-03-24 18:36:09 |
| 45.76.203.148 | attackspam | Unauthorized connection attempt detected from IP address 45.76.203.148 to port 80 [T] |
2020-03-24 18:34:37 |
| 116.234.172.212 | attackbotsspam | Unauthorized connection attempt detected from IP address 116.234.172.212 to port 445 [T] |
2020-03-24 18:58:54 |
| 106.75.64.59 | attackbots | Unauthorized connection attempt detected from IP address 106.75.64.59 to port 7779 [T] |
2020-03-24 19:04:23 |
| 223.207.230.78 | attackspambots | Unauthorized connection attempt detected from IP address 223.207.230.78 to port 445 [T] |
2020-03-24 18:40:01 |
| 80.73.73.107 | attack | Unauthorized connection attempt detected from IP address 80.73.73.107 to port 445 [T] |
2020-03-24 18:31:57 |
| 2.95.194.211 | attackspam | Mar 24 10:43:20 meumeu sshd[32450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.95.194.211 Mar 24 10:43:22 meumeu sshd[32450]: Failed password for invalid user deploy from 2.95.194.211 port 56664 ssh2 Mar 24 10:47:39 meumeu sshd[501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.95.194.211 ... |
2020-03-24 18:38:52 |
| 182.151.172.112 | attack | Unauthorized connection attempt detected from IP address 182.151.172.112 to port 23 [T] |
2020-03-24 18:47:56 |
| 106.1.113.43 | attackbotsspam | Unauthorized connection attempt detected from IP address 106.1.113.43 to port 23 [T] |
2020-03-24 18:29:19 |