JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.248.22.171

197.248.22.171 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Safaricom Limited
Usage Type	Fixed Line ISP
ASN	AS37061
Hostname(s)	197-248-22-171.safaricombusiness.co.ke
Domain Name	safaricom.co.ke
Country	🇰🇪 Kenya
City	Ruiru, Kiambu County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.248.22.171

Whois 197.248.22.171

IP Abuse Reports for 197.248.22.171:

This IP address has been reported a total of 24 times from 22 distinct sources. 197.248.22.171 was first reported on December 10th 2021, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-09-27 04:23:57 (3 years ago)	197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 10 distributed imapd attacks on ac ... show more 197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 10 distributed imapd attacks on account [redacted] show less	Brute-Force
🇩🇪 EIC	2022-09-25 09:04:41 (3 years ago)	197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 50 distributed imapd attacks on ac ... show more 197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 50 distributed imapd attacks on account [redacted] show less	Brute-Force
🇨🇦 Mediashaker	2022-09-20 05:30:42 (3 years ago)	197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 5 distributed pop3d attacks on acc ... show more 197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 5 distributed pop3d attacks on account [redacted] show less	Brute-Force
🇳🇱 wlt-blocker	2022-09-12 08:56:34 (3 years ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
Anonymous	2022-09-09 06:56:06 (3 years ago)	Sep 9 12:56:05 ns3130050 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): use ... show more Sep 9 12:56:05 ns3130050 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=197.248.22.171, lip=51.210.137.70, session=<UstHZDzoAeDF+Bar> ... show less	Brute-Force Web App Attack
🇩🇪 mapik	2022-09-04 08:46:19 (3 years ago)	2022-09-04T14:46:03.839067multi.mapik.cz auth[1513539]: pam_unix(dovecot:auth): authentication failu ... show more 2022-09-04T14:46:03.839067multi.mapik.cz auth[1513539]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=197.248.22.171 ... show less	Brute-Force
🇨🇭 unifr	2022-09-03 20:13:14 (3 years ago)	Unauthorized IMAP connection attempt	Brute-Force
🇲🇾 syokadmin	2022-08-31 07:43:30 (3 years ago)	197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 2 distributed imapd attacks on acc ... show more 197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇫🇷 SimonSays	2022-08-17 08:05:45 (3 years ago)	User rick failed to logged in	VPN IP Port Scan Brute-Force Web App Attack
🇲🇾 syokadmin	2022-08-11 06:58:24 (3 years ago)	197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 2 distributed smtpauth attacks on ... show more 197.248.22.171 (KE/Kenya/197-248-22-171.safaricombusiness.co.ke), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2022-07-25 13:14:20 (3 years ago)	Message meets Alert condition The following critical firewall event was detected: SSL VPN login fai ... show more Message meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2022-07-22 time=09:54:33 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=197.248.22.171 user="qsadmin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	VPN IP
🇺🇸 HyperSpeed	2022-07-21 08:02:53 (3 years ago)	Jul 21 13:02:51 NY2 sshd[2478407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 21 13:02:51 NY2 sshd[2478407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.22.171 user=root Jul 21 13:02:53 NY2 sshd[2478407]: Failed password for root from 197.248.22.171 port 59849 ssh2 ... show less	Brute-Force SSH
🇫🇷 dsl	2022-07-18 04:58:01 (4 years ago)	Jul 18 10:57:57 controldedominiosdg sshd[17031]: Invalid user 1234 from 197.248.22.171 port 45261 Ju ... show more Jul 18 10:57:57 controldedominiosdg sshd[17031]: Invalid user 1234 from 197.248.22.171 port 45261 Jul 18 10:57:57 controldedominiosdg sshd[17031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.22.171 Jul 18 10:58:00 controldedominiosdg sshd[17031]: Failed password for invalid user 1234 from 197.248.22.171 port 45261 ssh2 ... show less	Brute-Force SSH
Anonymous	2022-07-14 03:45:27 (4 years ago)	Multiple VPN SSL Login attempts	VPN IP Brute-Force
🇦🇷 svp	2022-07-06 11:18:53 (4 years ago)	spam web	Web Spam

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.81.251

🇬🇧 213.166.84.41

🇧🇷 205.210.31.151

🇷🇺 178.176.87.193

🇵🇱 104.164.171.230

🇧🇬 91.92.47.90

🇰🇿 46.255.234.75

🇳🇱 45.156.87.253

🇺🇸 216.244.66.232

🇹🇼 211.22.131.70

🇦🇴 193.163.125.101

🇷🇺 188.242.3.190

🇩🇪 130.12.180.134

🇨🇳 117.50.130.195

🇫🇷 85.217.140.51

🇨🇳 59.174.248.10

🇻🇳 58.186.8.60

🇺🇸 45.194.67.27

🇲🇩 45.15.226.187

🇧🇪 34.14.86.81