City: Nakuru
Region: Nakuru
Country: Kenya
Internet Service Provider: Safaricom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.248.194.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37972
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;197.248.194.128. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023091802 1800 900 604800 86400
;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 19 05:26:03 CST 2023
;; MSG SIZE rcvd: 108128.194.248.197.in-addr.arpa domain name pointer 197-248-194-128.safaricombusiness.co.ke.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
128.194.248.197.in-addr.arpa name = 197-248-194-128.safaricombusiness.co.ke.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.17.166.244 | attackspambots | Aug 8 07:19:43 server2 sshd[773]: reveeclipse mapping checking getaddrinfo for sky-78-17-166-244.bas512.cwt.btireland.net [78.17.166.244] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 8 07:19:43 server2 sshd[773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.17.166.244 user=r.r Aug 8 07:19:45 server2 sshd[773]: Failed password for r.r from 78.17.166.244 port 60206 ssh2 Aug 8 07:19:45 server2 sshd[773]: Received disconnect from 78.17.166.244: 11: Bye Bye [preauth] Aug 8 07:33:44 server2 sshd[1766]: reveeclipse mapping checking getaddrinfo for sky-78-17-166-244.bas512.cwt.btireland.net [78.17.166.244] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 8 07:33:44 server2 sshd[1766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.17.166.244 user=r.r Aug 8 07:33:46 server2 sshd[1766]: Failed password for r.r from 78.17.166.244 port 38696 ssh2 Aug 8 07:33:46 server2 sshd[1766]: Received disconn........ ------------------------------- |
2020-08-08 23:33:52 |
| 116.104.137.107 | attack | Unauthorized connection attempt from IP address 116.104.137.107 on Port 445(SMB) |
2020-08-08 23:12:34 |
| 188.251.142.85 | attack | Aug 8 11:49:15 mout sshd[18128]: Connection closed by authenticating user pi 188.251.142.85 port 59188 [preauth] Aug 8 16:25:13 mout sshd[9240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.251.142.85 user=pi Aug 8 16:25:15 mout sshd[9240]: Failed password for pi from 188.251.142.85 port 56814 ssh2 |
2020-08-08 23:01:26 |
| 5.156.34.246 | attackbotsspam | residential ip service |
2020-08-08 23:31:09 |
| 196.52.43.54 | attackspam | Aug 8 14:15:07 debian-2gb-nbg1-2 kernel: \[19147354.056417\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=196.52.43.54 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=49720 PROTO=TCP SPT=63396 DPT=5800 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-08 23:18:27 |
| 45.118.157.206 | attackbotsspam | (From Webrank04@gmail.com) Hello And Good Day I am Max (Jitesh Chauhan), a Marketing Manager with a reputable online marketing company based in India. We can fairly quickly promote your website to the top of the search rankings with no long term contracts! We can place your website on top of the Natural Listings on Google, Yahoo, and MSN. Our Search Engine Optimization team delivers more top rankings than anyone else, and we can prove it. We do not use "link farms" or "black hat" methods that Google and the other search engines frown upon and can use to de-list or ban your site. The techniques are proprietary, involving some valuable closely held trade secrets. Our prices are less than half of what other companies charge. We would be happy to send you a proposal using the top search phrases for your area of expertise. Please contact me at your convenience so we can start saving you some money. In order for us to respond to your request for information, please include your company’s website address (mandatory) |
2020-08-08 23:19:31 |
| 115.221.245.55 | attack | MAIL: User Login Brute Force Attempt |
2020-08-08 22:50:51 |
| 62.210.27.183 | attack | 62.210.27.183 - - [08/Aug/2020:16:06:53 +0100] "POST /wp-login.php HTTP/1.1" 200 1792 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.27.183 - - [08/Aug/2020:16:06:54 +0100] "POST /wp-login.php HTTP/1.1" 200 1768 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 62.210.27.183 - - [08/Aug/2020:16:06:54 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-08 23:21:17 |
| 211.137.254.221 | attackbots | Aug 8 17:15:56 ip106 sshd[31810]: Failed password for root from 211.137.254.221 port 34332 ssh2 ... |
2020-08-08 23:23:31 |
| 13.81.248.153 | attackspam | Multiple SSH authentication failures from 13.81.248.153 |
2020-08-08 23:16:12 |
| 134.175.130.52 | attackspam | Aug 8 14:48:00 vps639187 sshd\[8123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.130.52 user=root Aug 8 14:48:02 vps639187 sshd\[8123\]: Failed password for root from 134.175.130.52 port 38750 ssh2 Aug 8 14:53:40 vps639187 sshd\[8220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.130.52 user=root ... |
2020-08-08 23:32:35 |
| 129.204.205.125 | attackspambots | Aug 8 10:19:12 vps46666688 sshd[21483]: Failed password for root from 129.204.205.125 port 58410 ssh2 ... |
2020-08-08 22:52:09 |
| 168.205.43.235 | attackspam | Unauthorized connection attempt from IP address 168.205.43.235 on Port 445(SMB) |
2020-08-08 23:13:27 |
| 60.50.99.134 | attackbots | Aug 8 17:11:22 ns382633 sshd\[1720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.99.134 user=root Aug 8 17:11:24 ns382633 sshd\[1720\]: Failed password for root from 60.50.99.134 port 44767 ssh2 Aug 8 17:13:29 ns382633 sshd\[1849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.99.134 user=root Aug 8 17:13:31 ns382633 sshd\[1849\]: Failed password for root from 60.50.99.134 port 56099 ssh2 Aug 8 17:14:28 ns382633 sshd\[1924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.99.134 user=root |
2020-08-08 23:18:48 |
| 144.160.112.15 | attackspambots | AT&T says my account 262863093 has been created and they will be out to setup my DirectTV. Funny I never signed up with AT&T. I guess they are so hard up for business they are just randomly choosing people to give DirectTV to. Lord knows no one in their right mind would purchase it. Whoever the idiot is who is getting DirectTV is paying $180.31 promo a month for it. Hasn't he heard of Sling? |
2020-08-08 22:54:22 |