City: unknown
Region: unknown
Country: Kenya
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 197.248.52.46 | attack | Attempted connection to port 23. |
2020-09-08 04:10:12 |
| 197.248.52.46 | attack | Attempted connection to port 23. |
2020-09-07 19:46:23 |
| 197.248.51.74 | attackspambots | Unauthorized connection attempt detected from IP address 197.248.51.74 to port 23 |
2020-03-17 22:24:43 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.248.5.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22793
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;197.248.5.13. IN A
;; AUTHORITY SECTION:
. 336 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:43:30 CST 2022
;; MSG SIZE rcvd: 10513.5.248.197.in-addr.arpa domain name pointer host13.safaricombusiness.co.ke.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
13.5.248.197.in-addr.arpa name = host13.safaricombusiness.co.ke.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.15.1.221 | attackspambots | Aug 18 00:31:15 km20725 sshd\[27185\]: Invalid user telecomadmin from 51.15.1.221Aug 18 00:31:17 km20725 sshd\[27185\]: Failed password for invalid user telecomadmin from 51.15.1.221 port 43408 ssh2Aug 18 00:31:23 km20725 sshd\[27189\]: Invalid user test from 51.15.1.221Aug 18 00:31:26 km20725 sshd\[27189\]: Failed password for invalid user test from 51.15.1.221 port 47132 ssh2 ... |
2019-08-18 07:59:47 |
| 190.202.124.186 | attackspambots | xmlrpc attack |
2019-08-18 08:18:14 |
| 37.187.181.182 | attackbotsspam | Invalid user cod from 37.187.181.182 port 43382 |
2019-08-18 08:11:24 |
| 222.223.41.92 | attackbotsspam | SSH invalid-user multiple login try |
2019-08-18 08:04:16 |
| 93.148.163.172 | attackbots | Automatic report - Port Scan Attack |
2019-08-18 07:34:34 |
| 148.70.202.114 | attackspambots | 2019-08-18T01:06:05.171977 sshd[32646]: Invalid user dspace from 148.70.202.114 port 56696 2019-08-18T01:06:05.181883 sshd[32646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.202.114 2019-08-18T01:06:05.171977 sshd[32646]: Invalid user dspace from 148.70.202.114 port 56696 2019-08-18T01:06:07.782676 sshd[32646]: Failed password for invalid user dspace from 148.70.202.114 port 56696 ssh2 2019-08-18T01:12:22.883553 sshd[32706]: Invalid user appuser from 148.70.202.114 port 41590 ... |
2019-08-18 08:02:06 |
| 180.250.183.154 | attack | Invalid user www from 180.250.183.154 port 44870 |
2019-08-18 08:20:49 |
| 125.227.130.5 | attackbots | Invalid user yash from 125.227.130.5 port 53401 |
2019-08-18 07:55:46 |
| 159.65.164.133 | attack | Aug 17 14:04:11 auw2 sshd\[7833\]: Invalid user xbox from 159.65.164.133 Aug 17 14:04:11 auw2 sshd\[7833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.133 Aug 17 14:04:13 auw2 sshd\[7833\]: Failed password for invalid user xbox from 159.65.164.133 port 52634 ssh2 Aug 17 14:08:52 auw2 sshd\[8251\]: Invalid user lii from 159.65.164.133 Aug 17 14:08:52 auw2 sshd\[8251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.164.133 |
2019-08-18 08:10:30 |
| 193.112.58.212 | attack | Aug 18 00:19:10 pornomens sshd\[22336\]: Invalid user mathew from 193.112.58.212 port 44442 Aug 18 00:19:10 pornomens sshd\[22336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.58.212 Aug 18 00:19:12 pornomens sshd\[22336\]: Failed password for invalid user mathew from 193.112.58.212 port 44442 ssh2 ... |
2019-08-18 07:53:46 |
| 222.186.30.165 | attackspam | Aug 18 01:32:51 debian64 sshd\[11803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.165 user=root Aug 18 01:32:53 debian64 sshd\[11803\]: Failed password for root from 222.186.30.165 port 35542 ssh2 Aug 18 01:32:55 debian64 sshd\[11803\]: Failed password for root from 222.186.30.165 port 35542 ssh2 ... |
2019-08-18 07:34:56 |
| 115.200.124.172 | attackbotsspam | Aug 18 00:34:02 master sshd[15817]: Failed password for root from 115.200.124.172 port 32066 ssh2 Aug 18 00:34:05 master sshd[15817]: Failed password for root from 115.200.124.172 port 32066 ssh2 Aug 18 00:34:09 master sshd[15817]: Failed password for root from 115.200.124.172 port 32066 ssh2 |
2019-08-18 08:00:30 |
| 103.208.220.226 | attackspam | Aug 18 01:41:32 arianus sshd\[5929\]: Unable to negotiate with 103.208.220.226 port 46610: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-08-18 08:04:32 |
| 149.56.100.237 | attack | Aug 18 01:02:39 SilenceServices sshd[3354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.100.237 Aug 18 01:02:41 SilenceServices sshd[3354]: Failed password for invalid user globus from 149.56.100.237 port 48528 ssh2 Aug 18 01:06:46 SilenceServices sshd[5810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.100.237 |
2019-08-18 07:57:01 |
| 37.59.104.76 | attackbots | Invalid user applmgr from 37.59.104.76 port 57260 |
2019-08-18 08:16:01 |