212.49.70.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kenya

Internet Service Provider: Telkom Kenya Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jan 2 21:21:45 ms-srv sshd[2336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.70.12 Jan 2 21:21:47 ms-srv sshd[2336]: Failed password for invalid user vftp from 212.49.70.12 port 46422 ssh2	2020-02-15 22:21:25

Type

Details

Datetime

attack

Jan  2 21:21:45 ms-srv sshd[2336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.49.70.12
Jan  2 21:21:47 ms-srv sshd[2336]: Failed password for invalid user vftp from 212.49.70.12 port 46422 ssh2

2020-02-15 22:21:25

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.49.70.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27509
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.49.70.12.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400

;; Query time: 538 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 22:21:20 CST 2020
;; MSG SIZE  rcvd: 116

Host info

12.70.49.212.in-addr.arpa domain name pointer smtp.jambo.co.ke.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.70.49.212.in-addr.arpa	name = smtp.jambo.co.ke.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.68.123.192	attack	Oct 12 11:23:23 v22019058497090703 sshd[5556]: Failed password for root from 51.68.123.192 port 53930 ssh2 Oct 12 11:27:28 v22019058497090703 sshd[5881]: Failed password for root from 51.68.123.192 port 37212 ssh2 ...	2019-10-12 17:53:19
222.186.175.155	attackbots	Oct 12 05:44:45 debian sshd\[13587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Oct 12 05:44:47 debian sshd\[13587\]: Failed password for root from 222.186.175.155 port 43060 ssh2 Oct 12 05:44:52 debian sshd\[13587\]: Failed password for root from 222.186.175.155 port 43060 ssh2 ...	2019-10-12 17:51:40
121.122.76.102	attackspam	Automatic report - Port Scan Attack	2019-10-12 18:13:26
121.122.141.49	attackbots	2019-10-12T10:04:03.950675abusebot-5.cloudsearch.cf sshd\[21931\]: Invalid user brianboo from 121.122.141.49 port 41783	2019-10-12 18:24:36
96.44.130.246	attackspam	Dovecot Brute-Force	2019-10-12 17:55:37
116.109.103.43	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/116.109.103.43/ VN - 1H : (23) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VN NAME ASN : ASN24086 IP : 116.109.103.43 CIDR : 116.109.96.0/21 PREFIX COUNT : 402 UNIQUE IP COUNT : 742400 WYKRYTE ATAKI Z ASN24086 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-12 07:59:08 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-12 18:10:11
51.15.11.70	attack	Oct 12 10:14:09 venus sshd\[15361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.11.70 user=root Oct 12 10:14:11 venus sshd\[15361\]: Failed password for root from 51.15.11.70 port 50774 ssh2 Oct 12 10:18:30 venus sshd\[15441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.11.70 user=root ...	2019-10-12 18:31:38
175.30.128.42	attackbots	Automatic report - Port Scan	2019-10-12 18:25:24
222.186.190.92	attackspam	SSH bruteforce	2019-10-12 18:16:51
46.146.214.244	attackbots	postfix (unknown user, SPF fail or relay access denied)	2019-10-12 18:19:05
62.165.235.38	attackspambots	Oct 12 08:58:09 site3 sshd\[194981\]: Invalid user pi from 62.165.235.38 Oct 12 08:58:10 site3 sshd\[194982\]: Invalid user pi from 62.165.235.38 Oct 12 08:58:10 site3 sshd\[194981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.165.235.38 Oct 12 08:58:10 site3 sshd\[194982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.165.235.38 Oct 12 08:58:11 site3 sshd\[194981\]: Failed password for invalid user pi from 62.165.235.38 port 6350 ssh2 ...	2019-10-12 18:29:35
240e:f7:4f01:c::3	attackspambots	20000/tcp 993/tcp 1022/tcp... [2019-08-30/10-12]294103pkt,304pt.(tcp),51pt.(udp)	2019-10-12 18:32:46
121.157.82.170	attackspam	Oct 12 10:57:33 MK-Soft-VM5 sshd[14797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.82.170 Oct 12 10:57:35 MK-Soft-VM5 sshd[14797]: Failed password for invalid user a from 121.157.82.170 port 56494 ssh2 ...	2019-10-12 18:19:31
178.48.16.181	attack	Oct 12 08:59:26 * sshd[9165]: Failed password for root from 178.48.16.181 port 34305 ssh2	2019-10-12 18:15:08
220.164.2.118	attackbotsspam	Oct 11 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=220.164.2.118, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=220.164.2.118, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=220.164.2.118, lip=REMOVED, TLS: Disconnected, session=\	2019-10-12 18:26:49

Recently Reported IPs

36.96.213.189	221.126.29.10	118.43.37.69	174.27.3.176
160.44.10.139	64.132.152.70	126.179.148.211	1.77.220.168
46.93.155.239	251.134.191.214	3.54.85.127	76.74.109.54
212.252.182.220	5.178.216.26	212.251.232.194	196.53.110.218
150.109.167.182	118.43.236.12	125.25.213.21	168.232.130.173