41.139.248.137

Basic Info

City: unknown

Region: unknown

Country: Kenya

Internet Service Provider: Safaricom Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	(smtpauth) Failed SMTP AUTH login from 41.139.248.137 (KE/Kenya/41-139-248-137.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-17 03:06:45 plain authenticator failed for ([127.0.0.1]) [41.139.248.137]: 535 Incorrect authentication data (set_id=info)	2020-03-17 09:27:37

Type

Details

Datetime

attackbots

(smtpauth) Failed SMTP AUTH login from 41.139.248.137 (KE/Kenya/41-139-248-137.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-17 03:06:45 plain authenticator failed for ([127.0.0.1]) [41.139.248.137]: 535 Incorrect authentication data (set_id=info)

2020-03-17 09:27:37

Comments on same subnet:

IP	Type	Details	Datetime
41.139.248.205	attack	2020-05-13T21:52:15.578368linuxbox-skyline sshd[157372]: Invalid user dircreate from 41.139.248.205 port 54691 ...	2020-05-14 14:17:37
41.139.248.45	attackbotsspam	Invalid user admin from 41.139.248.45 port 46145	2020-04-04 01:43:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.248.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51478
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.248.137.			IN	A

;; AUTHORITY SECTION:
.			438	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031602 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 17 09:27:29 CST 2020
;; MSG SIZE  rcvd: 118

Host info

137.248.139.41.in-addr.arpa domain name pointer 41-139-248-137.safaricombusiness.co.ke.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
137.248.139.41.in-addr.arpa	name = 41-139-248-137.safaricombusiness.co.ke.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.125.21.125	attackspam	Sep 3 22:30:52 minden010 sshd[14981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.21.125 Sep 3 22:30:54 minden010 sshd[14981]: Failed password for invalid user jader from 123.125.21.125 port 48226 ssh2 Sep 3 22:34:14 minden010 sshd[15297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.21.125 ...	2020-09-04 04:35:04
178.91.83.129	attackspambots	Automatic report - Port Scan Attack	2020-09-04 04:32:46
185.189.211.234	attackspam	TCP (SYN) 185.189.211.234:55237 -> port 5900, len 52	2020-09-04 04:09:41
111.93.41.206	attack	1599151869 - 09/03/2020 18:51:09 Host: 111.93.41.206/111.93.41.206 Port: 445 TCP Blocked	2020-09-04 04:36:45
213.108.161.64	attackspambots	Attempted Brute Force (dovecot)	2020-09-04 04:45:25
107.172.211.29	attack	2020-09-03 11:48:11.817564-0500 localhost smtpd[18583]: NOQUEUE: reject: RCPT from unknown[107.172.211.29]: 554 5.7.1 Service unavailable; Client host [107.172.211.29] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00fd88a8.healthyprodu.co>	2020-09-04 04:41:57
220.135.63.171	attackbots	23/tcp 23/tcp [2020-08-31/09-01]2pkt	2020-09-04 04:08:37
222.186.42.7	attackspam	Sep 3 20:34:02 rush sshd[21594]: Failed password for root from 222.186.42.7 port 32774 ssh2 Sep 3 20:34:11 rush sshd[21596]: Failed password for root from 222.186.42.7 port 56973 ssh2 Sep 3 20:34:13 rush sshd[21596]: Failed password for root from 222.186.42.7 port 56973 ssh2 ...	2020-09-04 04:41:42
178.165.72.177	attack	Sep 3 15:27:44 main sshd[6603]: Failed password for invalid user admin from 178.165.72.177 port 57658 ssh2	2020-09-04 04:38:01
157.44.221.0	attackbots	TCP (SYN) 157.44.221.0:50574 -> port 445, len 52	2020-09-04 04:28:21
86.96.197.226	attack	"fail2ban match"	2020-09-04 04:40:32
220.134.158.14	attackspambots	TCP (SYN) 220.134.158.14:14049 -> port 23, len 40	2020-09-04 04:13:05
153.232.29.168	attack	Automatic report - Banned IP Access	2020-09-04 04:16:38
156.96.128.222	attack	2020-09-03T22:11:54.649185+02:00 lumpi kernel: [24453468.021623] INPUT:DROP:SPAMHAUS_DROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=156.96.128.222 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=59040 PROTO=TCP SPT=43865 DPT=443 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-09-04 04:28:43
85.106.190.46	attackbots	TCP (SYN) 85.106.190.46:49953 -> port 445, len 52	2020-09-04 04:12:17

Recently Reported IPs

82.81.16.24	54.88.74.128	162.243.131.94	185.81.238.65
183.107.196.132	80.210.34.145	165.22.193.53	120.201.137.138
196.217.240.243	88.250.219.234	52.96.10.149	201.132.92.135
189.50.42.132	23.89.49.123	144.44.30.59	61.93.192.46
93.80.18.17	58.84.165.12	2.44.168.59	109.73.176.34