JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.210.25.167

102.210.25.167 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 50%: ?

50%

ISP	DANSTED TECH SUPPLIERS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329390
Domain Name	danstedtech.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.210.25.167

Whois 102.210.25.167

IP Abuse Reports for 102.210.25.167:

This IP address has been reported a total of 17 times from 12 distinct sources. 102.210.25.167 was first reported on June 16th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-08-23 09:14:38 (4 days ago)	2026-08-23T11:14:38.159721+02:00 vmi3491693 kernel: [332734.296736] PORTSCAN: IN=eth0 OUT= MAC=00:50 ... show more 2026-08-23T11:14:38.159721+02:00 vmi3491693 kernel: [332734.296736] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=102.210.25.167 DST=169.58.138.2 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=6395 DF PROTO=TCP SPT=58308 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 gui-ying233	2026-08-22 11:06:02 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-22 01:26:20 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-21 12:02:21 (5 days ago)	(mod_security) mod_security (id:220150) triggered by 102.210.25.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:220150) triggered by 102.210.25.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 08:02:12.536382 2026] [security2:error] [pid 1499:tid 1499] [client 102.210.25.167:36556] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:sport. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.sports.grimone.com\|F\|2"] [data "')//and//('qlfphg'='qlfphg'//union//all//select//'lxbfapprngpjypmqpeqxsfzkinsarxlq',null--/*/6sahrz"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.sports.grimone.com"] [uri "/gallery.php"] [unique_id "aog-RC5qjUJZ55ou62Ta9wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-19 20:41:27 (1 week ago)	UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 80/8443 across 165 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 80/8443 across 165 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:41:27 (1 week ago)	UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 80/8443 across 165 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 80/8443 across 165 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 HamSammich	2026-08-16 20:17:26 (1 week ago)	Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-08-16T20:17Z).	Brute-Force SSH
🇱🇺 tdefise	2026-08-16 15:22:00 (1 week ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (10.6 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (10.6 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇩🇪 pltcldvlpr	2026-08-13 12:23:13 (1 week ago)	Bogus Useragent: 102.210.25.167 - - [13/Aug/2026:14:23:12 +0200] "GET /protocol?id=sh_16_118&offset= ... show more Bogus Useragent: 102.210.25.167 - - [13/Aug/2026:14:23:12 +0200] "GET /protocol?id=sh_16_118&offset=0&seq=1075%C2%B6graph%3D3288845 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 ADG/11.0.2566 AOLBUILD/11.0.2566 Safari/537.36" asn=329390 org="DANSTED TECH SUPPLIERS LIMITED" country=KE ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-31 04:38:35 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-02 13:06:24 (1 month ago)	[Askari] \| country=KE \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, URL template abuse, C ... show more [Askari] \| country=KE \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, URL template abuse, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-02 13:06:24 (1 month ago)	ELEVATED_THREAT \| country=KE \| ASN=DANSTED TECH SUPPLIERS LIMITED \| 613 IPs targeting /category/ligh ... show more ELEVATED_THREAT \| country=KE \| ASN=DANSTED TECH SUPPLIERS LIMITED \| 613 IPs targeting /category/light-bulbs.html \| URL template shared by 5 IPs: /category/light-bulbs.html?bulb_base=&bulb_kelvin_temp=&mode=list&price=*- \| Facet request during elevated threat (facet_ratio=0.76, unique_ips=1360) show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-06-29 12:54:05 (1 month ago)	[Askari] \| country=KE \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Targeting s ... show more [Askari] \| country=KE \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-06-29 12:54:05 (1 month ago)	ELEVATED_THREAT \| country=KE \| ASN=DANSTED TECH SUPPLIERS LIMITED \| 642 IPs targeting /category/ligh ... show more ELEVATED_THREAT \| country=KE \| ASN=DANSTED TECH SUPPLIERS LIMITED \| 642 IPs targeting /category/light-bulbs.html \| HTTP/1.1 over TLS (elevated=True) \| Facet request during elevated threat (facet_ratio=0.59, unique_ips=1831) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-06-25 19:41:18 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 2a00:1450:4025:1801::12d

🇦🇷 2800:1e0:1030:204:9999::165

🇭🇰 219.78.63.235

🇲🇽 209.42.29.39

🇧🇷 187.62.204.96

🇫🇷 185.177.72.69

🇰🇿 178.95.1.208

🇩🇴 154.46.23.24

🇺🇸 147.185.132.212

🇺🇦 94.131.246.165

🇱🇹 92.62.139.168

🇫🇷 85.217.140.43

🇵🇰 72.255.5.115

🇳🇱 45.148.10.157

🇬🇧 35.203.211.15

🇧🇪 34.78.20.61

🇺🇸 23.239.4.194

🇨🇳 223.199.160.123

🇵🇪 190.119.63.98

🇦🇷 190.103.220.140