Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Kenya

Internet Service Provider: Safaricom Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Jan 10 13:52:22 grey postfix/smtpd\[26125\]: NOQUEUE: reject: RCPT from unknown\[197.248.80.2\]: 554 5.7.1 Service unavailable\; Client host \[197.248.80.2\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[197.248.80.2\]\; from=\ to=\ proto=ESMTP helo=\<197-248-80-2.safaricombusiness.co.ke\>
...
2020-01-11 04:09:13
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.248.80.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.248.80.2.			IN	A

;; AUTHORITY SECTION:
.			226	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011001 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 04:09:09 CST 2020
;; MSG SIZE  rcvd: 116
Host info
2.80.248.197.in-addr.arpa domain name pointer 197-248-80-2.safaricombusiness.co.ke.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.80.248.197.in-addr.arpa	name = 197-248-80-2.safaricombusiness.co.ke.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
122.246.134.48 attack
Nov1007:17:07server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:17:11server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:01:39server4pure-ftpd:\(\?@122.246.134.48\)[WARNING]Authenticationfailedforuser[www]Nov1007:16:41server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:40:59server4pure-ftpd:\(\?@125.71.164.73\)[WARNING]Authenticationfailedforuser[www]Nov1007:01:32server4pure-ftpd:\(\?@122.246.134.48\)[WARNING]Authenticationfailedforuser[www]Nov1007:16:52server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:16:56server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:17:24server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]Nov1007:17:18server4pure-ftpd:\(\?@82.147.220.206\)[WARNING]Authenticationfailedforuser[www]IPAddressesBlocked:82.147.220.206\(SA/SaudiArabia/-\)
2019-11-10 15:15:34
188.165.173.149 attack
Automatic report - SQL Injection Attempts
2019-11-10 15:28:48
189.112.109.189 attackbots
Nov 10 06:42:13 *** sshd[19626]: User root from 189.112.109.189 not allowed because not listed in AllowUsers
2019-11-10 15:19:01
193.32.160.152 attack
Nov 10 07:31:44 relay postfix/smtpd\[5754\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov 10 07:31:44 relay postfix/smtpd\[5754\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov 10 07:31:44 relay postfix/smtpd\[5754\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov 10 07:31:44 relay postfix/smtpd\[5754\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\
2019-11-10 15:41:30
182.61.190.228 attack
Nov 10 07:52:17 meumeu sshd[381]: Failed password for root from 182.61.190.228 port 57862 ssh2
Nov 10 07:56:14 meumeu sshd[5572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.190.228 
Nov 10 07:56:15 meumeu sshd[5572]: Failed password for invalid user elsearch from 182.61.190.228 port 39654 ssh2
...
2019-11-10 15:03:44
115.217.236.100 attack
115.217.236.100 was recorded 5 times by 1 hosts attempting to connect to the following ports: 46143. Incident counter (4h, 24h, all-time): 5, 5, 5
2019-11-10 15:46:25
118.25.96.30 attackspam
Nov 10 08:21:04 localhost sshd\[23255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.96.30  user=root
Nov 10 08:21:06 localhost sshd\[23255\]: Failed password for root from 118.25.96.30 port 48779 ssh2
Nov 10 08:26:38 localhost sshd\[23827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.96.30  user=root
2019-11-10 15:35:16
45.82.153.76 attackbotsspam
Nov 10 08:10:42 relay postfix/smtpd\[23855\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 10 08:11:02 relay postfix/smtpd\[31331\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 10 08:12:07 relay postfix/smtpd\[31331\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 10 08:12:29 relay postfix/smtpd\[23909\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 10 08:12:58 relay postfix/smtpd\[23909\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-11-10 15:17:13
67.166.76.199 attackspam
3389BruteforceFW21
2019-11-10 15:23:01
118.24.242.239 attackspambots
Nov  9 20:25:33 auw2 sshd\[23579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.242.239  user=root
Nov  9 20:25:35 auw2 sshd\[23579\]: Failed password for root from 118.24.242.239 port 33154 ssh2
Nov  9 20:30:54 auw2 sshd\[24025\]: Invalid user mp from 118.24.242.239
Nov  9 20:30:54 auw2 sshd\[24025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.242.239
Nov  9 20:30:56 auw2 sshd\[24025\]: Failed password for invalid user mp from 118.24.242.239 port 40062 ssh2
2019-11-10 15:45:10
178.162.216.53 attack
(From raphaeCemo@gmail.com) Good day!  miamilakesfamilychiropractic.com 
 
Have you ever heard that you can send a message through the feedback form? 
These forms are located on many sites. We sent you our message in the same way, and the fact that you received and read it shows the effectiveness of this method of sending messages. 
Since people in any case will read the message received through the contact form. 
Our database includes more than 35 million websites from all over the world. 
The price of sending one million messages 49 USD. 
There is a discount program for large orders. 
 
Free test mailing of 50,000 messages to any country of your choice. 
 
This offer is created automatically. Please use the contact details below to contact us. 
 
Contact us. 
Telegram - @FeedbackFormEU 
Skype  FeedbackForm2019 
Email - feedbackform@make-success.com
2019-11-10 15:19:34
144.217.192.18 attack
Unauthorised access (Nov 10) SRC=144.217.192.18 LEN=40 TOS=0x14 TTL=239 ID=54892 TCP DPT=1433 WINDOW=1024 SYN
2019-11-10 15:06:37
201.244.36.148 attackbots
2019-11-10T07:23:56.454128abusebot.cloudsearch.cf sshd\[27503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-201-244-36-148.static.etb.net.co  user=root
2019-11-10 15:26:46
77.40.62.196 attack
11/10/2019-08:22:00.150179 77.40.62.196 Protocol: 6 SURICATA SMTP tls rejected
2019-11-10 15:22:27
159.65.62.216 attack
Nov 10 07:55:26 srv01 sshd[18032]: Invalid user leoncio from 159.65.62.216
Nov 10 07:55:26 srv01 sshd[18032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216
Nov 10 07:55:26 srv01 sshd[18032]: Invalid user leoncio from 159.65.62.216
Nov 10 07:55:27 srv01 sshd[18032]: Failed password for invalid user leoncio from 159.65.62.216 port 33846 ssh2
Nov 10 07:58:49 srv01 sshd[18139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216  user=root
Nov 10 07:58:51 srv01 sshd[18139]: Failed password for root from 159.65.62.216 port 42648 ssh2
...
2019-11-10 15:05:51

Recently Reported IPs

105.85.171.213 90.125.226.185 80.173.174.218 79.234.14.254
13.227.60.118 86.151.201.54 72.118.193.215 187.248.72.34
128.118.121.115 60.109.135.64 132.212.15.172 176.217.137.132
23.158.224.196 31.210.248.78 102.69.171.124 180.172.192.52
173.105.50.167 2.174.79.89 197.173.10.26 60.157.143.203