City: unknown
Region: unknown
Country: Tanzania, United Republic of
Internet Service Provider: Simply Computers Tanzania Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Unauthorized connection attempt from IP address 169.239.2.22 on Port 445(SMB) |
2020-01-23 23:52:48 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 169.239.213.9 | attackbotsspam | Automatic report - Port Scan Attack |
2020-08-22 12:18:33 |
| 169.239.236.101 | attackbots | srvr1: (mod_security) mod_security (id:942100) triggered by 169.239.236.101 (NG/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:06:03 [error] 482759#0: *840602 [client 169.239.236.101] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801156315.457822"] [ref ""], client: 169.239.236.101, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29%29%29+OR+++%28%28%288824%3D0 HTTP/1.1" [redacted] |
2020-08-21 22:20:08 |
| 169.239.248.122 | attack | firewall-block, port(s): 445/tcp |
2020-07-05 00:58:05 |
| 169.239.212.22 | attackspam | Feb 18 23:02:57 cp sshd[22467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.239.212.22 Feb 18 23:02:57 cp sshd[22467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.239.212.22 |
2020-02-19 06:09:14 |
| 169.239.212.22 | attackbots | Invalid user web1 from 169.239.212.22 port 36452 |
2020-02-15 02:19:10 |
| 169.239.220.35 | attack | Brute force attempt |
2020-02-08 14:10:07 |
| 169.239.212.22 | attackbots | Feb 1 12:12:45 web9 sshd\[21793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.239.212.22 user=root Feb 1 12:12:48 web9 sshd\[21793\]: Failed password for root from 169.239.212.22 port 34002 ssh2 Feb 1 12:17:15 web9 sshd\[22132\]: Invalid user tom from 169.239.212.22 Feb 1 12:17:15 web9 sshd\[22132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.239.212.22 Feb 1 12:17:17 web9 sshd\[22132\]: Failed password for invalid user tom from 169.239.212.22 port 34626 ssh2 |
2020-02-02 06:21:49 |
| 169.239.222.251 | attackspam | 1580460271 - 01/31/2020 09:44:31 Host: 169.239.222.251/169.239.222.251 Port: 445 TCP Blocked |
2020-01-31 22:15:02 |
| 169.239.212.75 | attackspam | Unauthorized connection attempt detected from IP address 169.239.212.75 to port 80 [J] |
2020-01-21 14:25:34 |
| 169.239.252.86 | attack | 2020-01-04T03:47:56.024297-07:00 suse-nuc sshd[16139]: Invalid user test3 from 169.239.252.86 port 33274 ... |
2020-01-04 21:03:33 |
| 169.239.220.35 | attackspam | Autoban 169.239.220.35 ABORTED AUTH |
2019-11-18 21:18:57 |
| 169.239.220.35 | attackbotsspam | Oct 25 20:18:22 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user= |
2019-10-26 06:13:02 |
| 169.239.223.106 | attack | Brute force RDP, port 3389 |
2019-10-13 17:36:34 |
| 169.239.236.102 | attack | 169.239.236.102 has been banned for [spam] ... |
2019-08-27 13:15:23 |
| 169.239.218.24 | attackbots | 243"or(1,2)=(select*from(selectname_const(CHAR(111,108,111,108,111,115,104,101,114),1),name_const(CHAR(111,108,111,108,111,115,104,101,114),1))a)--"x"="x |
2019-07-26 06:03:22 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 169.239.2.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58552
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;169.239.2.22. IN A
;; AUTHORITY SECTION:
. 243 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012300 1800 900 604800 86400
;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 23:52:39 CST 2020
;; MSG SIZE rcvd: 116
Host 22.2.239.169.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 22.2.239.169.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.39.5.65 | attackbots | Unauthorized connection attempt detected from IP address 14.39.5.65 to port 81 [J] |
2020-01-19 17:37:26 |
| 42.200.198.101 | attackbotsspam | Unauthorized connection attempt detected from IP address 42.200.198.101 to port 23 [J] |
2020-01-19 17:36:08 |
| 2.135.8.205 | attack | Unauthorized connection attempt detected from IP address 2.135.8.205 to port 23 [J] |
2020-01-19 18:04:14 |
| 49.213.172.103 | attackbots | Unauthorized connection attempt detected from IP address 49.213.172.103 to port 81 [J] |
2020-01-19 18:00:33 |
| 119.29.53.107 | attack | Unauthorized connection attempt detected from IP address 119.29.53.107 to port 2220 [J] |
2020-01-19 17:47:14 |
| 58.51.100.20 | attackbots | Unauthorized connection attempt detected from IP address 58.51.100.20 to port 8088 [J] |
2020-01-19 17:33:26 |
| 188.251.82.69 | attackbots | Unauthorized connection attempt detected from IP address 188.251.82.69 to port 23 [J] |
2020-01-19 17:41:18 |
| 45.180.250.10 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.180.250.10 to port 83 [J] |
2020-01-19 18:01:36 |
| 42.188.24.121 | attack | Unauthorized connection attempt detected from IP address 42.188.24.121 to port 23 [J] |
2020-01-19 17:36:24 |
| 60.49.38.34 | attackspambots | Unauthorized connection attempt detected from IP address 60.49.38.34 to port 80 [J] |
2020-01-19 17:59:09 |
| 178.93.14.190 | attackbots | Unauthorized connection attempt detected from IP address 178.93.14.190 to port 8080 [J] |
2020-01-19 18:09:44 |
| 36.230.44.3 | attack | Unauthorized connection attempt detected from IP address 36.230.44.3 to port 23 [J] |
2020-01-19 18:02:37 |
| 88.129.67.38 | attackspam | Unauthorized connection attempt detected from IP address 88.129.67.38 to port 23 [J] |
2020-01-19 17:53:28 |
| 189.1.22.116 | attack | Unauthorized connection attempt detected from IP address 189.1.22.116 to port 80 [J] |
2020-01-19 17:41:05 |
| 200.69.252.65 | attackspam | Unauthorized connection attempt detected from IP address 200.69.252.65 to port 1433 [J] |
2020-01-19 17:39:40 |