154.159.99.63 - IPInfo

Basic Info

City: Nairobi

Region: Nairobi Province

Country: Kenya

Internet Service Provider: Airtel

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.159.99.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18417
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.159.99.63.			IN	A

;; AUTHORITY SECTION:
.			330	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092901 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 09:38:13 CST 2020
;; MSG SIZE  rcvd: 117

Host info

63.99.159.154.in-addr.arpa domain name pointer 63-99-159-154.r.airtelkenya.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
63.99.159.154.in-addr.arpa	name = 63-99-159-154.r.airtelkenya.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.72.135.177	attack	Sep 30 00:16:55 shadeyouvpn sshd[15218]: Invalid user cs from 222.72.135.177 Sep 30 00:16:55 shadeyouvpn sshd[15218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.72.135.177 Sep 30 00:16:57 shadeyouvpn sshd[15218]: Failed password for invalid user cs from 222.72.135.177 port 3372 ssh2 Sep 30 00:16:58 shadeyouvpn sshd[15218]: Received disconnect from 222.72.135.177: 11: Bye Bye [preauth] Sep 30 00:26:57 shadeyouvpn sshd[20433]: Invalid user nunes from 222.72.135.177 Sep 30 00:26:57 shadeyouvpn sshd[20433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.72.135.177 Sep 30 00:26:59 shadeyouvpn sshd[20433]: Failed password for invalid user nunes from 222.72.135.177 port 49940 ssh2 Sep 30 00:27:00 shadeyouvpn sshd[20433]: Received disconnect from 222.72.135.177: 11: Bye Bye [preauth] Sep 30 00:29:38 shadeyouvpn sshd[21950]: Invalid user ftpuser1 from 222.72.135.177 Sep 30 00:29:38 sh........ -------------------------------	2019-10-04 18:40:30
177.138.150.55	attackspam	Unauthorised access (Oct 4) SRC=177.138.150.55 LEN=40 TOS=0x10 PREC=0x40 TTL=240 ID=24720 DF TCP DPT=8080 WINDOW=14600 SYN	2019-10-04 18:51:23
222.186.173.180	attackbots	$f2bV_matches	2019-10-04 18:46:16
208.91.197.27	attackspambots	utopia.net Ransomware coming through Comcast EPON equipment. Noticed it communicating VIA SNMP when running a packet capture on Win7 box. Norton caught it at first as Malicious Domain Request 21. Now Norton isn't flagging this anymore!!!	2019-10-04 18:53:42
178.128.194.116	attackspambots	Invalid user bash from 178.128.194.116 port 55944	2019-10-04 18:41:09
51.89.41.85	attackspambots	\[2019-10-04 06:38:33\] NOTICE\[1948\] chan_sip.c: Registration from '"1700" \' failed for '51.89.41.85:5126' - Wrong password \[2019-10-04 06:38:33\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T06:38:33.706-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1700",SessionID="0x7f1e1c2bed58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.41.85/5126",Challenge="47fca69f",ReceivedChallenge="47fca69f",ReceivedHash="5c1966e854fbf5702ea56c2eaaf634e8" \[2019-10-04 06:38:33\] NOTICE\[1948\] chan_sip.c: Registration from '"1700" \' failed for '51.89.41.85:5126' - Wrong password \[2019-10-04 06:38:33\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T06:38:33.831-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1700",SessionID="0x7f1e1c11c748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.8	2019-10-04 18:42:26
123.214.186.186	attackbotsspam	Oct 4 12:11:57 andromeda sshd\[7572\]: Invalid user admin from 123.214.186.186 port 36762 Oct 4 12:11:57 andromeda sshd\[7572\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.214.186.186 Oct 4 12:12:00 andromeda sshd\[7572\]: Failed password for invalid user admin from 123.214.186.186 port 36762 ssh2	2019-10-04 18:26:00
1.203.80.78	attack	Oct 4 10:16:26 microserver sshd[57143]: Invalid user Alaska2017 from 1.203.80.78 port 45827 Oct 4 10:16:26 microserver sshd[57143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.80.78 Oct 4 10:16:28 microserver sshd[57143]: Failed password for invalid user Alaska2017 from 1.203.80.78 port 45827 ssh2 Oct 4 10:22:14 microserver sshd[57868]: Invalid user P@$$word2019 from 1.203.80.78 port 35473 Oct 4 10:22:14 microserver sshd[57868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.80.78 Oct 4 10:33:42 microserver sshd[59293]: Invalid user Wachtwoord@123 from 1.203.80.78 port 43003 Oct 4 10:33:42 microserver sshd[59293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.80.78 Oct 4 10:33:44 microserver sshd[59293]: Failed password for invalid user Wachtwoord@123 from 1.203.80.78 port 43003 ssh2 Oct 4 10:39:31 microserver sshd[60038]: Invalid user Haslo@1234 from 1.203.	2019-10-04 18:52:03
202.62.226.26	attack	firewall-block, port(s): 445/tcp	2019-10-04 18:34:30
134.209.97.228	attack	Oct 4 01:22:01 ny01 sshd[31168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.97.228 Oct 4 01:22:03 ny01 sshd[31168]: Failed password for invalid user P@$$wort12 from 134.209.97.228 port 35230 ssh2 Oct 4 01:27:02 ny01 sshd[32351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.97.228	2019-10-04 19:05:46
200.206.50.66	attackbotsspam	xmlrpc attack	2019-10-04 18:44:47
106.13.49.20	attack	Oct 4 12:22:03 MK-Soft-VM4 sshd[26334]: Failed password for root from 106.13.49.20 port 45700 ssh2 ...	2019-10-04 18:34:48
183.82.36.176	attackspam	Port scan	2019-10-04 18:39:42
123.201.20.30	attack	SSH bruteforce	2019-10-04 19:03:52
116.112.152.233	attackspambots	Unauthorised access (Oct 4) SRC=116.112.152.233 LEN=40 TTL=49 ID=21968 TCP DPT=8080 WINDOW=4911 SYN Unauthorised access (Oct 3) SRC=116.112.152.233 LEN=40 TTL=49 ID=56619 TCP DPT=8080 WINDOW=4911 SYN Unauthorised access (Oct 3) SRC=116.112.152.233 LEN=40 TTL=49 ID=3687 TCP DPT=8080 WINDOW=17319 SYN Unauthorised access (Oct 2) SRC=116.112.152.233 LEN=40 TTL=49 ID=59671 TCP DPT=8080 WINDOW=4911 SYN	2019-10-04 18:35:59

Recently Reported IPs

46.93.120.106	173.171.232.150	203.39.233.130	197.75.197.159
31.34.196.70	5.71.102.36	68.61.151.209	182.208.239.71
93.161.165.13	90.236.90.143	209.129.11.79	72.253.103.79
196.146.111.227	187.56.240.138	107.76.245.181	91.244.21.228
187.4.90.111	223.112.44.225	173.98.157.148	78.99.116.62