City: Nairobi
Region: Nairobi
Country: Kenya
Internet Service Provider: Safaricom
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to the following terms of Use. See https://afrinic.net/whois/terms
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '41.90.0.0 - 41.90.127.255'
% No abuse contact registered for 41.90.0.0 - 41.90.127.255
inetnum: 41.90.0.0 - 41.90.127.255
netname: SFC-GPRS-EDGE-3G-SERVICE-POOL1
descr: Safaricom Limited
country: KE
admin-c: DA1485-AFRINIC
tech-c: DA1485-AFRINIC
status: ASSIGNED PA
remarks: Our PS core GGSN pool
mnt-by: MNT-SAF2004
source: AFRINIC # Filtered
parent: 41.90.0.0 - 41.90.255.255
person: Domain Admin
address: Safaricom Limited
address: Safaricom House
address: POBox 46350-00100 Nairobi
address: Kenya
address: Nairobi
address: Kenya
phone: tel:+254-020427
nic-hdl: DA1485-AFRINIC
mnt-by: MNT-SAF2004
source: AFRINIC # Filtered
% Information related to '41.90.0.0/16AS33771'
route: 41.90.0.0/16
descr: Safaricom Limited
origin: AS33771
mnt-by: MNT-SAF2004
source: AFRINIC # Filtered; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.90.70.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.90.70.12. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025112902 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 30 03:31:00 CST 2025
;; MSG SIZE rcvd: 104Host 12.70.90.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.70.90.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.244.73.178 | attack | Portscan or hack attempt detected by psad/fwsnort |
2020-03-18 16:47:29 |
| 37.252.188.130 | attackbots | $f2bV_matches |
2020-03-18 17:14:42 |
| 45.133.99.130 | attackspam | 2020-03-18 10:06:53 dovecot_login authenticator failed for \(\[45.133.99.130\]\) \[45.133.99.130\]: 535 Incorrect authentication data \(set_id=mail@yt.gl\) 2020-03-18 10:07:01 dovecot_login authenticator failed for \(\[45.133.99.130\]\) \[45.133.99.130\]: 535 Incorrect authentication data 2020-03-18 10:07:10 dovecot_login authenticator failed for \(\[45.133.99.130\]\) \[45.133.99.130\]: 535 Incorrect authentication data 2020-03-18 10:07:15 dovecot_login authenticator failed for \(\[45.133.99.130\]\) \[45.133.99.130\]: 535 Incorrect authentication data 2020-03-18 10:07:28 dovecot_login authenticator failed for \(\[45.133.99.130\]\) \[45.133.99.130\]: 535 Incorrect authentication data ... |
2020-03-18 17:24:56 |
| 212.95.137.183 | attackspambots | SSH auth scanning - multiple failed logins |
2020-03-18 17:00:36 |
| 110.6.30.109 | attackspambots | firewall-block, port(s): 23/tcp |
2020-03-18 16:45:33 |
| 159.89.48.237 | attack | 159.89.48.237 - - [18/Mar/2020:10:19:48 +0100] "GET /wp-login.php HTTP/1.1" 200 5844 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.48.237 - - [18/Mar/2020:10:19:56 +0100] "POST /wp-login.php HTTP/1.1" 200 6743 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.48.237 - - [18/Mar/2020:10:20:02 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-03-18 17:29:19 |
| 95.179.153.77 | attackbotsspam | Mar 18 07:55:50 raspberrypi sshd\[3162\]: Invalid user upload from 95.179.153.77 ... |
2020-03-18 17:11:05 |
| 209.94.195.212 | attackspambots | Mar 17 23:02:00 web1 sshd\[3299\]: Invalid user wusifan from 209.94.195.212 Mar 17 23:02:00 web1 sshd\[3299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.94.195.212 Mar 17 23:02:02 web1 sshd\[3299\]: Failed password for invalid user wusifan from 209.94.195.212 port 5421 ssh2 Mar 17 23:06:32 web1 sshd\[3750\]: Invalid user dn from 209.94.195.212 Mar 17 23:06:32 web1 sshd\[3750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.94.195.212 |
2020-03-18 17:16:43 |
| 68.183.183.21 | attackbots | SSH Brute-Force Attack |
2020-03-18 17:11:35 |
| 192.241.237.187 | attackspambots | Unauthorized connection attempt detected from IP address 192.241.237.187 to port 13784 |
2020-03-18 17:06:25 |
| 159.192.98.3 | attackspam | Mar 18 08:01:32 SilenceServices sshd[14761]: Failed password for root from 159.192.98.3 port 54130 ssh2 Mar 18 08:05:35 SilenceServices sshd[15963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.98.3 Mar 18 08:05:36 SilenceServices sshd[15963]: Failed password for invalid user test from 159.192.98.3 port 49420 ssh2 |
2020-03-18 17:15:37 |
| 212.113.234.251 | attackspambots | Mar 18 04:39:16 xeon postfix/smtpd[12409]: warning: unknown[212.113.234.251]: SASL PLAIN authentication failed: authentication failure |
2020-03-18 16:56:12 |
| 49.234.38.219 | attackspam | Mar 18 11:35:08 server sshd\[29844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.38.219 user=root Mar 18 11:35:10 server sshd\[29844\]: Failed password for root from 49.234.38.219 port 53146 ssh2 Mar 18 11:46:05 server sshd\[32763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.38.219 user=root Mar 18 11:46:06 server sshd\[32763\]: Failed password for root from 49.234.38.219 port 56704 ssh2 Mar 18 11:47:55 server sshd\[614\]: Invalid user work from 49.234.38.219 Mar 18 11:47:55 server sshd\[614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.38.219 ... |
2020-03-18 17:05:49 |
| 171.240.31.115 | attackbotsspam | SpamScore above: 10.0 |
2020-03-18 17:00:53 |
| 92.118.160.17 | attack | Mar 18 08:44:08 debian-2gb-nbg1-2 kernel: \[6776560.395662\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.160.17 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=8404 PROTO=TCP SPT=54351 DPT=9418 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-18 16:49:17 |