City: unknown
Region: unknown
Country: Kenya
Internet Service Provider: Safaricom
Hostname: unknown
Organization: SAFARICOM-LIMITED
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.104.114.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43397
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.104.114.21. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019050200 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu May 02 22:34:17 +08 2019
;; MSG SIZE rcvd: 118
Host 21.114.104.196.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 21.114.104.196.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 184.174.10.74 | attackspam | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2020-08-12 23:31:14 |
| 112.85.42.87 | attack | 2020-08-12T15:30:43.145081shield sshd\[32207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root 2020-08-12T15:30:45.263764shield sshd\[32207\]: Failed password for root from 112.85.42.87 port 34879 ssh2 2020-08-12T15:30:47.668653shield sshd\[32207\]: Failed password for root from 112.85.42.87 port 34879 ssh2 2020-08-12T15:30:50.490917shield sshd\[32207\]: Failed password for root from 112.85.42.87 port 34879 ssh2 2020-08-12T15:31:53.234516shield sshd\[32322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root |
2020-08-12 23:37:02 |
| 180.126.170.42 | attackbots | Aug 12 15:02:20 h2427292 sshd\[25670\]: Invalid user admin from 180.126.170.42 Aug 12 15:02:21 h2427292 sshd\[25670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.170.42 Aug 12 15:02:23 h2427292 sshd\[25670\]: Failed password for invalid user admin from 180.126.170.42 port 37680 ssh2 ... |
2020-08-12 23:29:10 |
| 118.25.49.56 | attackbotsspam | Aug 12 12:41:21 scw-6657dc sshd[16579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.49.56 user=root Aug 12 12:41:21 scw-6657dc sshd[16579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.49.56 user=root Aug 12 12:41:23 scw-6657dc sshd[16579]: Failed password for root from 118.25.49.56 port 49184 ssh2 ... |
2020-08-12 23:33:10 |
| 61.177.172.177 | attackspambots | Aug 12 17:56:51 nextcloud sshd\[18607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root Aug 12 17:56:53 nextcloud sshd\[18607\]: Failed password for root from 61.177.172.177 port 63591 ssh2 Aug 12 17:57:03 nextcloud sshd\[18607\]: Failed password for root from 61.177.172.177 port 63591 ssh2 |
2020-08-13 00:01:16 |
| 218.92.0.165 | attackspam | Aug 12 07:52:57 dignus sshd[16999]: Failed password for root from 218.92.0.165 port 34177 ssh2 Aug 12 07:53:02 dignus sshd[16999]: Failed password for root from 218.92.0.165 port 34177 ssh2 Aug 12 07:53:06 dignus sshd[16999]: Failed password for root from 218.92.0.165 port 34177 ssh2 Aug 12 07:53:09 dignus sshd[16999]: Failed password for root from 218.92.0.165 port 34177 ssh2 Aug 12 07:53:13 dignus sshd[16999]: Failed password for root from 218.92.0.165 port 34177 ssh2 ... |
2020-08-12 23:24:27 |
| 59.127.121.52 | attack | Port probing on unauthorized port 23 |
2020-08-12 23:54:19 |
| 103.142.25.30 | attackspam | SSH/22 MH Probe, BF, Hack - |
2020-08-12 23:57:25 |
| 218.92.0.220 | attackspambots | Aug 12 17:46:51 buvik sshd[29916]: Failed password for root from 218.92.0.220 port 25270 ssh2 Aug 12 17:46:53 buvik sshd[29916]: Failed password for root from 218.92.0.220 port 25270 ssh2 Aug 12 17:46:56 buvik sshd[29916]: Failed password for root from 218.92.0.220 port 25270 ssh2 ... |
2020-08-12 23:54:52 |
| 170.106.33.194 | attackbots | Aug 12 06:12:05 mockhub sshd[32103]: Failed password for root from 170.106.33.194 port 48434 ssh2 ... |
2020-08-13 00:03:15 |
| 159.203.27.146 | attackspam | Aug 12 14:24:23 ns382633 sshd\[19554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.27.146 user=root Aug 12 14:24:25 ns382633 sshd\[19554\]: Failed password for root from 159.203.27.146 port 50070 ssh2 Aug 12 14:37:10 ns382633 sshd\[22035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.27.146 user=root Aug 12 14:37:13 ns382633 sshd\[22035\]: Failed password for root from 159.203.27.146 port 51376 ssh2 Aug 12 14:41:02 ns382633 sshd\[22927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.27.146 user=root |
2020-08-12 23:48:15 |
| 218.25.130.220 | attackspambots | Aug 12 11:01:29 Tower sshd[19833]: Connection from 218.25.130.220 port 7621 on 192.168.10.220 port 22 rdomain "" Aug 12 11:01:36 Tower sshd[19833]: Failed password for root from 218.25.130.220 port 7621 ssh2 Aug 12 11:01:36 Tower sshd[19833]: Received disconnect from 218.25.130.220 port 7621:11: Bye Bye [preauth] Aug 12 11:01:36 Tower sshd[19833]: Disconnected from authenticating user root 218.25.130.220 port 7621 [preauth] |
2020-08-12 23:52:07 |
| 49.83.57.216 | attack | Lines containing failures of 49.83.57.216 Aug 12 14:38:47 games sshd[7833]: Bad protocol version identification '' from 49.83.57.216 port 62185 Aug 12 14:39:20 games sshd[7834]: Invalid user pi from 49.83.57.216 port 62285 Aug 12 14:39:22 games sshd[7834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.57.216 Aug 12 14:39:22 games sshd[7834]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.57.216 user=pi Aug 12 14:39:24 games sshd[7834]: Failed password for invalid user pi from 49.83.57.216 port 62285 ssh2 Aug 12 14:39:26 games sshd[7834]: Connection closed by invalid user pi 49.83.57.216 port 62285 [preauth] Aug 12 14:40:03 games sshd[7901]: Invalid user pi from 49.83.57.216 port 64862 Aug 12 14:40:05 games sshd[7901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.57.216 Aug 12 14:40:05 games sshd[7901]: pam_sss(sshd:auth): authen........ ------------------------------ |
2020-08-12 23:26:23 |
| 51.141.102.180 | attackspam | [portscan] Port scan |
2020-08-12 23:29:54 |
| 138.255.148.35 | attackbots | Aug 12 18:46:47 dhoomketu sshd[2316810]: Failed password for root from 138.255.148.35 port 46620 ssh2 Aug 12 18:47:28 dhoomketu sshd[2316816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 user=root Aug 12 18:47:31 dhoomketu sshd[2316816]: Failed password for root from 138.255.148.35 port 50363 ssh2 Aug 12 18:48:12 dhoomketu sshd[2316826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 user=root Aug 12 18:48:14 dhoomketu sshd[2316826]: Failed password for root from 138.255.148.35 port 54105 ssh2 ... |
2020-08-12 23:36:41 |