Report for IP: 197.248.159.55

Threat LevelMEDIUM45/1001 rule type
1 incident on record · last seen 14d ago
PTR 197-248-159-55.safaricombusiness.co.ke
Org / ASN Safaricom Limited
Country 🇰🇪 Kenya
City Nairobi, Nairobi County
Timezone Africa/Nairobi

Attack Analysis

IDS: Database Port Scan
Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Reports (1)

Date Severity Description
22 Oct 2026 - 14:39 high IDS: Database port scan