城市(city): Kampala
省份(region): Central Region
国家(country): Uganda
运营商(isp): National Information Technology Authority Uganda
主机名(hostname): unknown
机构(organization): NITA
使用类型(Usage Type): Government
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | Jun 18 13:30:42 vps10825 sshd[6841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Jun 18 13:30:44 vps10825 sshd[6841]: Failed password for invalid user user1 from 154.72.195.154 port 39126 ssh2 ... |
2020-06-18 19:44:15 |
| attackbotsspam | fail2ban |
2020-03-29 05:49:15 |
| attackspam | Aug 20 01:06:30 ms-srv sshd[56053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Aug 20 01:06:32 ms-srv sshd[56053]: Failed password for invalid user opendkim from 154.72.195.154 port 16136 ssh2 |
2020-02-02 23:00:31 |
| attackbots | Sep 8 07:50:54 yabzik sshd[16782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Sep 8 07:50:56 yabzik sshd[16782]: Failed password for invalid user 123456 from 154.72.195.154 port 58182 ssh2 Sep 8 07:55:42 yabzik sshd[18445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 |
2019-09-08 13:39:10 |
| attackbotsspam | Sep 7 04:33:50 sachi sshd\[19485\]: Invalid user teamspeak3 from 154.72.195.154 Sep 7 04:33:50 sachi sshd\[19485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.ec.or.ug Sep 7 04:33:52 sachi sshd\[19485\]: Failed password for invalid user teamspeak3 from 154.72.195.154 port 1353 ssh2 Sep 7 04:38:54 sachi sshd\[20073\]: Invalid user 1 from 154.72.195.154 Sep 7 04:38:54 sachi sshd\[20073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.ec.or.ug |
2019-09-07 22:54:26 |
| attackbots | k+ssh-bruteforce |
2019-09-05 12:32:01 |
| attackbots | Aug 30 02:31:09 aat-srv002 sshd[4202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Aug 30 02:31:11 aat-srv002 sshd[4202]: Failed password for invalid user jira from 154.72.195.154 port 36837 ssh2 Aug 30 02:36:09 aat-srv002 sshd[4330]: Failed password for root from 154.72.195.154 port 50383 ssh2 ... |
2019-08-30 15:43:57 |
| attack | Automatic report - Banned IP Access |
2019-08-30 11:16:34 |
| attackspambots | Aug 28 13:22:26 server sshd[55172]: Failed password for invalid user jiao from 154.72.195.154 port 4435 ssh2 Aug 28 13:27:51 server sshd[57192]: Failed password for invalid user ctopup from 154.72.195.154 port 32027 ssh2 Aug 28 13:32:47 server sshd[59139]: Failed password for invalid user guinness from 154.72.195.154 port 40714 ssh2 |
2019-08-28 20:49:01 |
| attack | Aug 25 04:24:09 plusreed sshd[9609]: Invalid user dorin from 154.72.195.154 ... |
2019-08-25 16:25:07 |
| attackbotsspam | Aug 22 16:32:04 webhost01 sshd[4820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Aug 22 16:32:06 webhost01 sshd[4820]: Failed password for invalid user jmartin from 154.72.195.154 port 26321 ssh2 ... |
2019-08-23 01:12:46 |
| attack | $f2bV_matches |
2019-08-21 05:11:31 |
| attack | Aug 19 11:54:38 ns315508 sshd[13761]: Invalid user qhsupport from 154.72.195.154 port 22230 Aug 19 11:54:38 ns315508 sshd[13761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 Aug 19 11:54:38 ns315508 sshd[13761]: Invalid user qhsupport from 154.72.195.154 port 22230 Aug 19 11:54:40 ns315508 sshd[13761]: Failed password for invalid user qhsupport from 154.72.195.154 port 22230 ssh2 Aug 19 11:59:43 ns315508 sshd[13792]: Invalid user polycom from 154.72.195.154 port 51622 ... |
2019-08-19 21:20:34 |
| attack | Aug 18 22:06:46 host sshd\[55712\]: Invalid user smtp from 154.72.195.154 port 3421 Aug 18 22:06:48 host sshd\[55712\]: Failed password for invalid user smtp from 154.72.195.154 port 3421 ssh2 ... |
2019-08-19 04:20:25 |
| attack | Aug 17 22:24:12 mail sshd\[21780\]: Failed password for invalid user kass from 154.72.195.154 port 55214 ssh2 Aug 17 22:39:52 mail sshd\[22078\]: Invalid user hou from 154.72.195.154 port 39610 Aug 17 22:39:52 mail sshd\[22078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.195.154 ... |
2019-08-18 05:52:42 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.72.195.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42887
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.72.195.154. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081701 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 05:52:36 CST 2019
;; MSG SIZE rcvd: 118
154.195.72.154.in-addr.arpa domain name pointer mail.ec.or.ug.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
154.195.72.154.in-addr.arpa name = mail.ec.or.ug.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.133.99.7 | attackspambots | Apr 7 07:19:24 relay postfix/smtpd\[20064\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 07:19:45 relay postfix/smtpd\[23606\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 07:21:21 relay postfix/smtpd\[20065\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 07:21:42 relay postfix/smtpd\[23606\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 07:27:15 relay postfix/smtpd\[14371\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-07 13:41:28 |
| 51.38.235.200 | attackspambots | Apr 7 07:37:43 www sshd\[28610\]: Invalid user ins from 51.38.235.200Apr 7 07:37:45 www sshd\[28610\]: Failed password for invalid user ins from 51.38.235.200 port 49908 ssh2Apr 7 07:41:37 www sshd\[28748\]: Invalid user ts3user from 51.38.235.200 ... |
2020-04-07 13:11:46 |
| 14.162.148.64 | attackspambots | 20/4/6@23:53:47: FAIL: Alarm-Intrusion address from=14.162.148.64 ... |
2020-04-07 13:23:28 |
| 165.22.84.3 | attackspambots | 165.22.84.3 - - [06/Apr/2020:21:54:15 -0700] "GET /phpmyadmin/scripts/setup.php HTTP/1.0" 404 165.22.84.3 - - [06/Apr/2020:21:54:43 -0700] "GET /scripts/setup.php HTTP/1.0" 404 165.22.84.3 - - [06/Apr/2020:21:55:11 -0700] "GET /db/scripts/setup.php HTTP/1.0" 404 |
2020-04-07 13:36:27 |
| 218.92.0.178 | attackspambots | Apr 6 19:04:37 web1 sshd\[720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.178 user=root Apr 6 19:04:39 web1 sshd\[720\]: Failed password for root from 218.92.0.178 port 12992 ssh2 Apr 6 19:04:42 web1 sshd\[720\]: Failed password for root from 218.92.0.178 port 12992 ssh2 Apr 6 19:04:52 web1 sshd\[720\]: Failed password for root from 218.92.0.178 port 12992 ssh2 Apr 6 19:05:01 web1 sshd\[761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.178 user=root |
2020-04-07 13:15:16 |
| 94.73.238.150 | attackbotsspam | Wordpress malicious attack:[sshd] |
2020-04-07 13:17:52 |
| 46.105.31.249 | attackbots | Apr 15 19:39:33 meumeu sshd[30317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.31.249 Apr 15 19:39:35 meumeu sshd[30317]: Failed password for invalid user ts3 from 46.105.31.249 port 37240 ssh2 Apr 15 19:42:45 meumeu sshd[30712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.31.249 ... |
2020-04-07 13:07:36 |
| 155.94.156.83 | attack | SpamScore above: 10.0 |
2020-04-07 13:24:03 |
| 63.135.25.71 | attack | Unauthorized connection attempt detected from IP address 63.135.25.71 to port 5555 |
2020-04-07 13:09:41 |
| 217.112.142.221 | attack | Apr 7 07:00:03 mail.srvfarm.net postfix/smtpd[933992]: NOQUEUE: reject: RCPT from unknown[217.112.142.221]: 450 4.1.8 |
2020-04-07 13:33:49 |
| 35.203.40.39 | attackspam | Apr 7 07:05:20 minden010 sshd[25268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.203.40.39 Apr 7 07:05:21 minden010 sshd[25268]: Failed password for invalid user castis from 35.203.40.39 port 34276 ssh2 Apr 7 07:07:12 minden010 sshd[25783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.203.40.39 ... |
2020-04-07 13:12:03 |
| 148.251.195.14 | attack | 20 attempts against mh-misbehave-ban on flare |
2020-04-07 13:11:06 |
| 116.2.6.92 | attack | Apr 7 05:58:28 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[anonymous\] Apr 7 05:58:44 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\] Apr 7 05:59:01 web1 pure-ftpd: \(\?@116.2.6.92\) \[WARNING\] Authentication failed for user \[www\] |
2020-04-07 13:37:02 |
| 185.234.219.82 | attackbots | Apr 7 06:45:20 web01.agentur-b-2.de postfix/smtpd[80981]: warning: unknown[185.234.219.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 06:45:20 web01.agentur-b-2.de postfix/smtpd[80981]: lost connection after AUTH from unknown[185.234.219.82] Apr 7 06:47:02 web01.agentur-b-2.de postfix/smtpd[79610]: warning: unknown[185.234.219.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 7 06:47:02 web01.agentur-b-2.de postfix/smtpd[79610]: lost connection after AUTH from unknown[185.234.219.82] Apr 7 06:49:31 web01.agentur-b-2.de postfix/smtpd[83563]: warning: unknown[185.234.219.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-04-07 13:35:20 |
| 88.26.205.199 | attack | Automatic report - Port Scan Attack |
2020-04-07 13:19:10 |