102.167.206.248

Basic Info

City: unknown

Region: unknown

Country: Kenya

Internet Service Provider: Telkom Kenya Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	ssh failed login	2019-11-29 00:21:24

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.167.206.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20197
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.167.206.248.		IN	A

;; AUTHORITY SECTION:
.			259	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112800 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 29 00:21:14 CST 2019
;; MSG SIZE  rcvd: 119

Host info

248.206.167.102.in-addr.arpa domain name pointer twiga.telkom.co.ke.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
248.206.167.102.in-addr.arpa	name = twiga.telkom.co.ke.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.33.196.127	attackbots	TCP (SYN) 114.33.196.127:36727 -> port 23, len 40	2020-09-24 21:58:26
185.220.101.215	attack	$f2bV_matches	2020-09-24 21:43:49
172.105.104.115	attack	SSH Scan	2020-09-24 22:01:41
113.31.107.34	attackspambots	$f2bV_matches	2020-09-24 21:45:55
91.201.244.169	attackspambots	Sep 23 09:09:39 roki-contabo sshd\[29128\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.244.169 user=root Sep 23 09:09:39 roki-contabo sshd\[29132\]: Invalid user user from 91.201.244.169 Sep 23 09:09:39 roki-contabo sshd\[29130\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.244.169 user=root Sep 23 09:09:40 roki-contabo sshd\[29132\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.244.169 Sep 23 09:09:42 roki-contabo sshd\[29128\]: Failed password for root from 91.201.244.169 port 28501 ssh2 Sep 23 09:09:39 roki-contabo sshd\[29128\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.244.169 user=root Sep 23 09:09:39 roki-contabo sshd\[29132\]: Invalid user user from 91.201.244.169 Sep 23 09:09:39 roki-contabo sshd\[29130\]: pam_unix$sshd:auth$: authentication failure\; lognam ...	2020-09-24 21:39:19
51.75.24.200	attackspam	Invalid user juan from 51.75.24.200 port 39876	2020-09-24 21:35:10
41.188.169.250	attack	Invalid user steam from 41.188.169.250 port 44367	2020-09-24 21:29:15
13.94.229.227	attackbots	Sep 24 15:19:02 icecube sshd[85851]: Failed password for root from 13.94.229.227 port 23555 ssh2	2020-09-24 21:45:08
188.247.220.182	attackspam	Sep 24 13:04:12 scw-focused-cartwright sshd[25310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.247.220.182 Sep 24 13:04:14 scw-focused-cartwright sshd[25310]: Failed password for invalid user admin from 188.247.220.182 port 41304 ssh2	2020-09-24 21:49:34
187.72.167.232	attack	frenzy	2020-09-24 22:00:11
52.255.200.70	attackspam	Sep 24 15:33:48 rancher-0 sshd[261903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.255.200.70 user=root Sep 24 15:33:50 rancher-0 sshd[261903]: Failed password for root from 52.255.200.70 port 63376 ssh2 ...	2020-09-24 21:57:24
190.13.130.242	attackspam	TCP (SYN) 190.13.130.242:59583 -> port 139, len 44	2020-09-24 21:27:52
119.45.208.92	attackbotsspam	Total attacks: 2	2020-09-24 22:05:15
135.181.25.2	attackbotsspam	fail2ban	2020-09-24 21:45:41
178.62.37.78	attack	Sep 24 14:45:03 prod4 sshd\[10575\]: Invalid user setup from 178.62.37.78 Sep 24 14:45:05 prod4 sshd\[10575\]: Failed password for invalid user setup from 178.62.37.78 port 40896 ssh2 Sep 24 14:53:16 prod4 sshd\[13774\]: Invalid user internet from 178.62.37.78 ...	2020-09-24 21:50:49

Recently Reported IPs

83.57.194.228	182.74.195.238	240.204.204.76	67.82.195.71
223.165.40.215	211.101.16.232	166.140.212.232	107.148.185.93
183.196.91.232	213.77.86.250	119.3.222.183	177.98.159.170
141.135.30.150	175.119.91.146	207.12.123.103	5.19.252.194
34.202.78.251	103.79.143.210	184.176.73.105	35.55.36.211