Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nairobi

Region: Nairobi Province

Country: Kenya

Internet Service Provider: For Converged Services Western Region

Hostname: unknown

Organization: Safaricom

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Dovecot Invalid User Login Attempt.
2020-07-28 03:40:41
attackspam
Dovecot Invalid User Login Attempt.
2020-06-28 13:13:09
attackbots
Dovecot Invalid User Login Attempt.
2020-05-14 17:54:39
attack
Brute force attempt
2019-11-13 15:08:08
attackbots
2 failed emails per dmarc_support@corp.mail.ru [Fri Jul 19 00:00:00 2019 GMT thru Sat Jul 20 00:00:00 2019 GMT]
2019-07-21 02:05:46
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.217.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37175
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.217.254.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 02:05:36 CST 2019
;; MSG SIZE  rcvd: 118
Host info
254.217.139.41.in-addr.arpa domain name pointer 41-139-217-254.safaricombusiness.co.ke.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
254.217.139.41.in-addr.arpa	name = 41-139-217-254.safaricombusiness.co.ke.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
165.22.143.247 attackbotsspam
2019-08-01 18:14:10 H=(nationalgeographic.com) [165.22.143.247]:57335 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-08-01 18:14:10 H=(nationalgeographic.com) [165.22.143.247]:57335 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-08-01 18:14:10 H=(nationalgeographic.com) [165.22.143.247]:57335 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-08-01 18:14:10 H=(nationalgeographic.com) [165.22.143.247]:57335 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...
2019-08-02 15:15:03
170.79.89.154 attackbots
proto=tcp  .  spt=42070  .  dpt=25  .     (listed on Blocklist de  Aug 01)     (34)
2019-08-02 14:22:38
5.181.108.165 attack
Invalid user tester from 5.181.108.165 port 48304
2019-08-02 15:09:27
119.146.145.104 attackbots
Invalid user usbmuxd from 119.146.145.104 port 2569
2019-08-02 14:27:44
81.30.208.30 attackspam
proto=tcp  .  spt=56033  .  dpt=25  .     (listed on Blocklist de  Aug 01)     (24)
2019-08-02 14:44:45
173.12.157.141 attackbots
Aug  2 07:22:09 mail sshd\[19066\]: Failed password for invalid user hastings from 173.12.157.141 port 51590 ssh2
Aug  2 07:42:03 mail sshd\[19323\]: Invalid user henry from 173.12.157.141 port 40958
Aug  2 07:42:03 mail sshd\[19323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.12.157.141
...
2019-08-02 14:42:57
35.0.127.52 attackspam
[ssh] SSH attack
2019-08-02 14:23:45
185.106.29.70 attack
3389BruteforceIDS
2019-08-02 14:39:49
82.142.147.174 attackbotsspam
email spam
2019-08-02 15:18:36
144.217.80.80 attackbotsspam
Automatic report - Banned IP Access
2019-08-02 15:17:58
186.211.185.106 attackbotsspam
proto=tcp  .  spt=46980  .  dpt=25  .     (listed on Blocklist de  Aug 01)     (25)
2019-08-02 14:42:34
1.203.80.78 attackbots
Aug  2 08:36:04 www5 sshd\[44346\]: Invalid user academic from 1.203.80.78
Aug  2 08:36:04 www5 sshd\[44346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.80.78
Aug  2 08:36:07 www5 sshd\[44346\]: Failed password for invalid user academic from 1.203.80.78 port 52417 ssh2
Aug  2 08:40:11 www5 sshd\[44751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.80.78  user=root
Aug  2 08:40:13 www5 sshd\[44751\]: Failed password for root from 1.203.80.78 port 42026 ssh2
...
2019-08-02 14:36:53
197.227.101.100 attack
Aug  1 23:53:31 em3 sshd[2561]: Invalid user pi from 197.227.101.100
Aug  1 23:53:31 em3 sshd[2563]: Invalid user pi from 197.227.101.100
Aug  1 23:53:31 em3 sshd[2561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.227.101.100 
Aug  1 23:53:31 em3 sshd[2563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.227.101.100 
Aug  1 23:53:33 em3 sshd[2561]: Failed password for invalid user pi from 197.227.101.100 port 44666 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.227.101.100
2019-08-02 14:19:48
209.17.96.242 attackbots
Automatic report - Banned IP Access
2019-08-02 14:50:32
124.113.218.175 attack
Brute force SMTP login attempts.
2019-08-02 14:15:22

Recently Reported IPs

152.13.134.110 212.105.115.77 37.151.23.90 122.224.252.48
85.132.158.91 5.141.81.219 197.170.208.141 164.230.195.205
51.197.100.165 174.212.70.28 219.252.223.108 216.91.241.208
217.128.128.60 217.187.123.203 3.31.79.178 68.73.93.36
138.238.214.202 189.93.223.227 212.220.56.185 27.109.195.95