City: unknown
Region: unknown
Country: Uganda
Internet Service Provider: National Information Technology Authority Uganda
Hostname: unknown
Organization: unknown
Usage Type: Government
| Type | Details | Datetime |
|---|---|---|
| attackspam | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-12 23:18:45 |
| attack | firewall-block, port(s): 1433/tcp |
2019-11-07 21:37:45 |
| attackspam | Unauthorised access (Oct 14) SRC=154.72.193.254 LEN=40 TTL=239 ID=37336 TCP DPT=1433 WINDOW=1024 SYN |
2019-10-14 19:51:51 |
| attackspam | Unauthorized connection attempt from IP address 154.72.193.254 on Port 445(SMB) |
2019-09-01 16:31:21 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.72.193.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9254
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.72.193.254. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019050101 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu May 02 02:42:50 +08 2019
;; MSG SIZE rcvd: 118
254.193.72.154.in-addr.arpa domain name pointer printer.soliton.co.ug.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
254.193.72.154.in-addr.arpa name = printer.soliton.co.ug.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 171.243.127.144 | attackspam | fail2ban |
2020-09-29 16:55:47 |
| 85.106.182.144 | attackbots | 20/9/28@16:35:30: FAIL: Alarm-Network address from=85.106.182.144 20/9/28@16:35:30: FAIL: Alarm-Network address from=85.106.182.144 ... |
2020-09-29 16:56:18 |
| 43.226.148.212 | attackspam | invalid login attempt (silentheal) |
2020-09-29 16:12:57 |
| 178.62.45.74 | attackbots | Hit honeypot r. |
2020-09-29 16:13:55 |
| 68.183.66.73 | attackspam | Port Scan/VNC login attempt ... |
2020-09-29 16:32:36 |
| 94.57.252.147 | attack | Sep 29 10:56:34 haigwepa sshd[23562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.57.252.147 Sep 29 10:56:37 haigwepa sshd[23562]: Failed password for invalid user vnc from 94.57.252.147 port 54756 ssh2 ... |
2020-09-29 16:57:14 |
| 120.35.26.129 | attackspambots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-29 17:17:24 |
| 80.169.225.123 | attack | $f2bV_matches |
2020-09-29 16:03:01 |
| 89.204.183.196 | attackbots | 1601325310 - 09/28/2020 22:35:10 Host: 89.204.183.196/89.204.183.196 Port: 445 TCP Blocked |
2020-09-29 17:06:37 |
| 49.232.43.192 | attack | (sshd) Failed SSH login from 49.232.43.192 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 02:37:33 idl1-dfw sshd[3347392]: Invalid user deployer from 49.232.43.192 port 36436 Sep 29 02:37:35 idl1-dfw sshd[3347392]: Failed password for invalid user deployer from 49.232.43.192 port 36436 ssh2 Sep 29 02:50:18 idl1-dfw sshd[3356302]: Invalid user robyn from 49.232.43.192 port 41292 Sep 29 02:50:20 idl1-dfw sshd[3356302]: Failed password for invalid user robyn from 49.232.43.192 port 41292 ssh2 Sep 29 02:53:53 idl1-dfw sshd[3358484]: Invalid user hadoop from 49.232.43.192 port 50398 |
2020-09-29 16:14:57 |
| 165.232.47.103 | attackbots | 20 attempts against mh-ssh on soil |
2020-09-29 16:10:34 |
| 111.90.158.145 | attackbotsspam | 2020-09-28T20:35:02.393017morrigan.ad5gb.com sshd[2575]: Disconnected from invalid user cssserver 111.90.158.145 port 52036 [preauth] |
2020-09-29 17:13:18 |
| 193.95.24.114 | attackspambots | $f2bV_matches |
2020-09-29 16:09:40 |
| 42.224.170.12 | attackspambots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-29 17:02:10 |
| 62.234.80.115 | attackbots | $f2bV_matches |
2020-09-29 17:00:49 |