AbuseIPDB » 154.72.194.207

154.72.194.207 was found in our database!

This IP was reported 33,156 times. Confidence of Abuse is 100%: ?

100%

ISP	National Information Technology Authority Uganda
Usage Type	Government
Hostname(s)	hcf.gou.go.ug
Domain Name	nita.go.ug
Country	Uganda
City	Kampala, Kampala

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 154.72.194.207

Whois 154.72.194.207

IP Abuse Reports for 154.72.194.207:

This IP address has been reported a total of 33,156 times from 1,861 distinct sources. 154.72.194.207 was first reported on March 20th 2021, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
qtland Cloud CEMA	2024-10-13 04:36:53 (17 minutes ago)	2024-10-13T04:36:52.932686+00:00 sa-west-scl1 kernel: [1229388.441090] honeypot: IN=ens4 OUT= MAC=42 ... show more2024-10-13T04:36:52.932686+00:00 sa-west-scl1 kernel: [1229388.441090] honeypot: IN=ens4 OUT= MAC=42:01:0a:c2:00:02:42:01:0a:c2:00:01:08:00 SRC=154.72.194.207 DST=10.194.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22773 DF PROTO=TCP SPT=53360 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
simpeg-adm.bandung.go.id	2024-10-13 04:22:25 (32 minutes ago)	Oct 13 04:19:24 wworkflows sshd[135789]: Invalid user wangxinzhou from 154.72.194.207 port 48070<br ... show moreOct 13 04:19:24 wworkflows sshd[135789]: Invalid user wangxinzhou from 154.72.194.207 port 48070 Oct 13 04:21:33 wworkflows sshd[136526]: Invalid user jahanban from 154.72.194.207 port 56228 Oct 13 04:22:24 wworkflows sshd[136670]: Invalid user taoli from 154.72.194.207 port 47130 ... show less	Brute-Force SSH
agreppin	2024-10-13 04:19:33 (35 minutes ago)	2024-10-13 04:19:33 bullz SSH	Brute-Force SSH
amit177	2024-10-13 03:13:36 (1 hour ago)		Brute-Force SSH
an_original_username	2024-10-13 03:01:04 (1 hour ago)	Oct 13 02:59:44 cloud-server-0 sshd[1949303]: Failed password for root from 154.72.194.207 port 4232 ... show moreOct 13 02:59:44 cloud-server-0 sshd[1949303]: Failed password for root from 154.72.194.207 port 42320 ssh2 Oct 13 03:00:06 cloud-server-0 sshd[1949307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 user=root Oct 13 03:00:08 cloud-server-0 sshd[1949307]: Failed password for root from 154.72.194.207 port 52784 ssh2 Oct 13 03:00:37 cloud-server-0 sshd[1949314]: Invalid user jrodrig from 154.72.194.207 port 46248 Oct 13 03:00:37 cloud-server-0 sshd[1949314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 Oct 13 03:00:40 cloud-server-0 sshd[1949314]: Failed password for invalid user jrodrig from 154.72.194.207 port 46248 ssh2 Oct 13 03:01:01 cloud-server-0 sshd[1949316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 user=root Oct 13 03:01:03 cloud-server-0 sshd[1949316]: Failed password for root from 154.72.194.207 port ... show less	Brute-Force SSH
yzfdude1	2024-10-13 01:35:43 (3 hours ago)	Oct 12 19:35:41 b146-65 sshd[3654835]: Invalid user filip from 154.72.194.207 port 48584 Oct 1 ... show moreOct 12 19:35:41 b146-65 sshd[3654835]: Invalid user filip from 154.72.194.207 port 48584 Oct 12 19:35:41 b146-65 sshd[3654835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 Oct 12 19:35:42 b146-65 sshd[3654835]: Failed password for invalid user filip from 154.72.194.207 port 48584 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-10-13 01:06:34 (3 hours ago)	Oct 13 01:04:57 test-instance sshd[3763858]: Invalid user guest from 154.72.194.207 port 55284 ... show moreOct 13 01:04:57 test-instance sshd[3763858]: Invalid user guest from 154.72.194.207 port 55284 Oct 13 01:05:45 test-instance sshd[3764700]: Invalid user qq from 154.72.194.207 port 42382 Oct 13 01:06:33 test-instance sshd[3765521]: Invalid user zlw from 154.72.194.207 port 48218 ... show less	Brute-Force SSH
MazenHost	2024-10-13 01:06:12 (3 hours ago)	Oct 13 03:05:40 LosAngelesGW sshd[2487652]: pam_unix(sshd:auth): authentication failure; logname= ui ... show moreOct 13 03:05:40 LosAngelesGW sshd[2487652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 Oct 13 03:05:40 LosAngelesGW sshd[2487652]: Invalid user guest from 154.72.194.207 port 51252 Oct 13 03:05:42 LosAngelesGW sshd[2487652]: Failed password for invalid user guest from 154.72.194.207 port 51252 ssh2 Oct 13 03:06:28 LosAngelesGW sshd[2487828]: Invalid user qq from 154.72.194.207 port 45694 ... show less	Brute-Force SSH
diego	2024-10-13 01:05:57 (3 hours ago)	[rede-44-49] (sshd) Failed SSH login from 154.72.194.207 (UG/Uganda/hcf.gou.go.ug): 5 in the last 36 ... show more[rede-44-49] (sshd) Failed SSH login from 154.72.194.207 (UG/Uganda/hcf.gou.go.ug): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 12 22:00:03 sshd[24771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 user=[USERNAME] Oct 12 22:00:05 sshd[24771]: Failed password for [USERNAME] from 154.72.194.207 port 57944 ssh2 Oct 12 22:05:08 sshd[25210]: Invalid user [USERNAME] from 154.72.194.207 port 57676 Oct 12 22:05:10 sshd[25210]: Failed password for invalid user [USERNAME] from 154.72.194.207 port 57676 ssh2 Oct 12 22:05:56 sshd[25322]: Invalid user [USERNAME] from 154. show less	Port Scan
taipei101.xyz	2024-10-13 01:05:10 (3 hours ago)	Oct 12 21:05:01 us1-bms-f7b96252 sshd[493147]: Invalid user guest from 154.72.194.207 port 49960<br ... show moreOct 12 21:05:01 us1-bms-f7b96252 sshd[493147]: Invalid user guest from 154.72.194.207 port 49960 Oct 12 21:05:01 us1-bms-f7b96252 sshd[493147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 Oct 12 21:05:03 us1-bms-f7b96252 sshd[493147]: Failed password for invalid user guest from 154.72.194.207 port 49960 ssh2 ... show less	Brute-Force SSH
guldkage	2024-10-12 23:32:55 (5 hours ago)	Unauthorized connection attempt detected from IP address 154.72.194.207 to port 22 (ger-03) [D]	Brute-Force Exploited Host
SpeedIT Solutions	2024-10-12 23:09:59 (5 hours ago)	154.72.194.207 (UG/Uganda/hcf.gou.go.ug), 9 distributed sshd attacks on account [redacted]	Brute-Force SSH
pr0vieh	2024-10-12 22:55:46 (5 hours ago)	2024-10-12T22:53:17.274325+00:00 Linux101 sshd[954376]: Failed password for invalid user teaspeak fr ... show more2024-10-12T22:53:17.274325+00:00 Linux101 sshd[954376]: Failed password for invalid user teaspeak from 154.72.194.207 port 50758 ssh2 2024-10-12T22:54:04.760482+00:00 Linux101 sshd[963677]: Invalid user sbermejo from 154.72.194.207 port 40282 2024-10-12T22:54:04.762502+00:00 Linux101 sshd[963677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 2024-10-12T22:54:06.598884+00:00 Linux101 sshd[963677]: Failed password for invalid user sbermejo from 154.72.194.207 port 40282 ssh2 2024-10-12T22:54:55.744689+00:00 Linux101 sshd[973612]: Invalid user sadeghi from 154.72.194.207 port 53826 2024-10-12T22:54:55.746967+00:00 Linux101 sshd[973612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 2024-10-12T22:54:57.919365+00:00 Linux101 sshd[973612]: Failed password for invalid user sadeghi from 154.72.194.207 port 53826 ssh2 2024-10-12T22:55:43.141176+00:00 Linux101 sshd[982670]: Invali ... show less	Brute-Force SSH
Hotwire	2024-10-12 21:29:34 (7 hours ago)	Oct 12 23:24:04 h3buntu sshd[2269769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreOct 12 23:24:04 h3buntu sshd[2269769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.194.207 Oct 12 23:24:06 h3buntu sshd[2269769]: Failed password for invalid user shm from 154.72.194.207 port 39820 ssh2 Oct 12 23:29:33 h3buntu sshd[2271287]: Invalid user snehalika from 154.72.194.207 port 59074 ... show less	Hacking Brute-Force SSH
adnscom.com	2024-10-12 21:25:56 (7 hours ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH