City: Nairobi
Region: Nairobi Province
Country: Kenya
Internet Service Provider: Telkom
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.49.66.132 | attackspambots | Unauthorized connection attempt detected from IP address 212.49.66.132 to port 8080 |
2020-03-17 19:37:18 |
| 212.49.66.132 | attackbotsspam | Unauthorized connection attempt detected from IP address 212.49.66.132 to port 8080 [J] |
2020-03-01 02:29:18 |
| 212.49.66.235 | attackbotsspam | Aug 30 21:41:48 debian sshd\[19981\]: Invalid user pumch from 212.49.66.235 port 58876 Aug 30 21:41:48 debian sshd\[19981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.66.235 Aug 30 21:41:50 debian sshd\[19981\]: Failed password for invalid user pumch from 212.49.66.235 port 58876 ssh2 ... |
2019-08-31 09:59:33 |
| 212.49.66.235 | attackbots | Automatic report - Banned IP Access |
2019-08-15 03:41:38 |
| 212.49.66.235 | attackbots | Aug 8 16:33:53 yabzik sshd[30089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.66.235 Aug 8 16:33:55 yabzik sshd[30089]: Failed password for invalid user jbkim from 212.49.66.235 port 54518 ssh2 Aug 8 16:36:32 yabzik sshd[30970]: Failed password for root from 212.49.66.235 port 47222 ssh2 |
2019-08-09 01:28:32 |
| 212.49.66.235 | attackbots | Aug 1 14:18:04 localhost sshd\[64356\]: Invalid user richard from 212.49.66.235 port 37924 Aug 1 14:18:04 localhost sshd\[64356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.66.235 ... |
2019-08-02 04:11:11 |
| 212.49.66.235 | attackbots | Jul 25 14:34:34 mail sshd\[28809\]: Invalid user ricky from 212.49.66.235 Jul 25 14:34:34 mail sshd\[28809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.66.235 Jul 25 14:34:36 mail sshd\[28809\]: Failed password for invalid user ricky from 212.49.66.235 port 54220 ssh2 |
2019-07-26 01:54:30 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.49.66.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.49.66.201. IN A
;; AUTHORITY SECTION:
. 160 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021123001 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 31 08:54:20 CST 2021
;; MSG SIZE rcvd: 106201.66.49.212.in-addr.arpa domain name pointer simba.telkom.co.ke.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
201.66.49.212.in-addr.arpa name = simba.telkom.co.ke.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.62.248.12 | attack | 2019-12-11T08:37:57.023859abusebot-8.cloudsearch.cf sshd\[25197\]: Invalid user sk from 181.62.248.12 port 36816 |
2019-12-11 19:59:46 |
| 92.50.249.92 | attackspambots | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-11 20:03:26 |
| 71.6.232.5 | attack | 12/11/2019-05:31:01.984539 71.6.232.5 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
2019-12-11 19:34:56 |
| 89.248.168.202 | attack | Dec 11 12:45:59 debian-2gb-nbg1-2 kernel: \[24346303.882181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.202 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57907 PROTO=TCP SPT=41918 DPT=9719 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-11 20:03:48 |
| 85.136.114.4 | attackbotsspam | Invalid user zu from 85.136.114.4 port 60592 |
2019-12-11 19:47:47 |
| 182.150.28.144 | attackbotsspam | Dec 10 23:08:07 kapalua sshd\[12704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.28.144 user=root Dec 10 23:08:10 kapalua sshd\[12704\]: Failed password for root from 182.150.28.144 port 44417 ssh2 Dec 10 23:15:16 kapalua sshd\[13575\]: Invalid user faucher from 182.150.28.144 Dec 10 23:15:16 kapalua sshd\[13575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.28.144 Dec 10 23:15:18 kapalua sshd\[13575\]: Failed password for invalid user faucher from 182.150.28.144 port 44481 ssh2 |
2019-12-11 20:07:12 |
| 36.89.248.125 | attackbotsspam | Dec 11 06:17:03 hcbbdb sshd\[18947\]: Invalid user cinda from 36.89.248.125 Dec 11 06:17:03 hcbbdb sshd\[18947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.248.125 Dec 11 06:17:04 hcbbdb sshd\[18947\]: Failed password for invalid user cinda from 36.89.248.125 port 45009 ssh2 Dec 11 06:26:17 hcbbdb sshd\[20841\]: Invalid user cybernetic from 36.89.248.125 Dec 11 06:26:17 hcbbdb sshd\[20841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.89.248.125 |
2019-12-11 19:31:55 |
| 93.81.192.188 | attack | 12/11/2019-01:26:16.851307 93.81.192.188 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-12-11 19:34:01 |
| 159.203.177.49 | attack | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-12-11 19:40:52 |
| 192.227.144.220 | attackspam | 192.227.144.220 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 8, 25 |
2019-12-11 20:00:38 |
| 79.134.4.11 | attackspambots | Unauthorized connection attempt detected from IP address 79.134.4.11 to port 445 |
2019-12-11 19:44:36 |
| 67.166.254.205 | attack | Dec 11 10:39:57 server sshd\[14762\]: Invalid user aurore from 67.166.254.205 Dec 11 10:39:57 server sshd\[14762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-67-166-254-205.hsd1.ga.comcast.net Dec 11 10:39:58 server sshd\[14762\]: Failed password for invalid user aurore from 67.166.254.205 port 56202 ssh2 Dec 11 11:24:36 server sshd\[27705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-67-166-254-205.hsd1.ga.comcast.net user=root Dec 11 11:24:38 server sshd\[27705\]: Failed password for root from 67.166.254.205 port 49384 ssh2 ... |
2019-12-11 19:30:23 |
| 83.27.28.163 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/83.27.28.163/ PL - 1H : (105) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN5617 IP : 83.27.28.163 CIDR : 83.24.0.0/13 PREFIX COUNT : 183 UNIQUE IP COUNT : 5363456 ATTACKS DETECTED ASN5617 : 1H - 5 3H - 11 6H - 25 12H - 46 24H - 86 DateTime : 2019-12-11 09:16:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-12-11 19:57:11 |
| 106.13.57.216 | attack | 2019-12-11T08:30:07.126703abusebot-2.cloudsearch.cf sshd\[18727\]: Invalid user ignagni from 106.13.57.216 port 45680 |
2019-12-11 20:10:51 |
| 118.179.216.44 | attack | Unauthorized connection attempt detected from IP address 118.179.216.44 to port 445 |
2019-12-11 19:49:56 |