102.166.237.119

Basic Info

City: Nairobi

Region: Nairobi Province

Country: Kenya

Internet Service Provider: Telkom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.166.237.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.166.237.119.		IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012401 1800 900 604800 86400

;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 04:06:33 CST 2020
;; MSG SIZE  rcvd: 119

Host info

119.237.166.102.in-addr.arpa domain name pointer twiga.telkom.co.ke.

Nslookup info:

Server:		100.100.2.136
Address:	100.100.2.136#53

Non-authoritative answer:
119.237.166.102.in-addr.arpa	name = twiga.telkom.co.ke.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.248.35.239	attackbotsspam	Invalid user ts3server from 104.248.35.239 port 49282	2020-03-13 16:54:36
134.209.71.245	attackbots	Invalid user student from 134.209.71.245 port 49698	2020-03-13 16:50:28
193.112.174.37	attack	Mar 13 01:53:55 vps46666688 sshd[10422]: Failed password for root from 193.112.174.37 port 55894 ssh2 ...	2020-03-13 16:59:06
222.184.233.222	attackbots	Fail2Ban - SSH Bruteforce Attempt	2020-03-13 16:16:17
103.129.222.207	attackspam	Invalid user testftp from 103.129.222.207 port 33608	2020-03-13 16:31:32
147.135.211.59	attack	Mar 13 10:12:15 ift sshd\[29623\]: Invalid user pharmtox-j.org from 147.135.211.59Mar 13 10:12:17 ift sshd\[29623\]: Failed password for invalid user pharmtox-j.org from 147.135.211.59 port 36536 ssh2Mar 13 10:15:59 ift sshd\[30228\]: Invalid user test from 147.135.211.59Mar 13 10:16:01 ift sshd\[30228\]: Failed password for invalid user test from 147.135.211.59 port 34480 ssh2Mar 13 10:19:45 ift sshd\[30531\]: Invalid user pharmtox-j from 147.135.211.59 ...	2020-03-13 16:44:50
218.92.0.210	attackspambots	2020-03-13T09:28:59.766845scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2 2020-03-13T09:29:02.113793scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2 2020-03-13T09:29:04.069108scmdmz1 sshd[19366]: Failed password for root from 218.92.0.210 port 26812 ssh2 ...	2020-03-13 16:40:57
60.30.98.194	attackspambots	Invalid user rahul from 60.30.98.194 port 51819	2020-03-13 16:38:38
125.237.148.29	attackspam	Trolling for resource vulnerabilities	2020-03-13 16:41:15
217.112.142.170	attackbots	Mar 13 05:47:19 mail.srvfarm.net postfix/smtpd[2289178]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 05:49:14 mail.srvfarm.net postfix/smtpd[2288929]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 05:49:39 mail.srvfarm.net postfix/smtpd[2291523]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 13 05:50:10 mail.srvfarm.net postfix/smtpd[2288924]: NOQUEUE: reject: RCPT	2020-03-13 16:33:07
93.174.93.171	attackspam	Mar 13 05:58:07 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Mar 13 05:59:39 pop3-login: Info: Aborted login $auth failed, 1 attempts in 3 secs$: user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Mar 13 06:31:12 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\<4qXwxrWgxABdrl2r\>\ Mar 13 06:39:48 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\<0r205bWg3gBdrl2r\>\ Mar 13 06:51:32 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\	2020-03-13 16:24:44
192.3.177.219	attackspam	Invalid user ftptest from 192.3.177.219 port 47010	2020-03-13 16:39:07
78.29.9.25	attack	[Fri Mar 13 10:51:23.181766 2020] [:error] [pid 19104:tid 140633108891392] [client 78.29.9.25:47956] [client 78.29.9.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmsDOznvAYRVVxFGAY6ByQAAAOA"] ...	2020-03-13 16:55:25
192.3.67.107	attack	2020-03-13T05:38:22.781179ionos.janbro.de sshd[36468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.67.107 user=root 2020-03-13T05:38:24.707749ionos.janbro.de sshd[36468]: Failed password for root from 192.3.67.107 port 39418 ssh2 2020-03-13T05:46:08.285271ionos.janbro.de sshd[36502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.67.107 user=root 2020-03-13T05:46:10.522250ionos.janbro.de sshd[36502]: Failed password for root from 192.3.67.107 port 46234 ssh2 2020-03-13T05:52:04.925342ionos.janbro.de sshd[36541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.67.107 user=root 2020-03-13T05:52:06.884279ionos.janbro.de sshd[36541]: Failed password for root from 192.3.67.107 port 53048 ssh2 2020-03-13T05:58:11.564643ionos.janbro.de sshd[36582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.67.107 ...	2020-03-13 16:39:37
114.67.93.108	attackbotsspam	Mar 13 06:10:39 meumeu sshd[8746]: Failed password for root from 114.67.93.108 port 50720 ssh2 Mar 13 06:14:35 meumeu sshd[9219]: Failed password for root from 114.67.93.108 port 41634 ssh2 ...	2020-03-13 16:31:09

Recently Reported IPs

186.121.247.82	65.212.69.92	58.33.31.177	129.148.233.180
107.178.68.218	113.247.216.89	171.220.241.115	122.100.164.1
12.33.244.28	114.199.42.159	134.3.212.88	183.82.114.216
219.13.101.140	58.212.110.151	3.56.238.15	46.252.208.125
167.154.233.234	73.121.138.120	106.218.228.39	106.12.23.223