AbuseIPDB » 102.216.68.56

102.216.68.56 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 18%: ?

18%

ISP	Mobile_Broadband_4G
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	56-68.216.102.r.airtelkenya.com
Domain Name	rework.network
Country	Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 102.216.68.56

Whois 102.216.68.56

IP Abuse Reports for 102.216.68.56:

This IP address has been reported a total of 49 times from 27 distinct sources. 102.216.68.56 was first reported on July 20th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Nicolmn	2025-06-16 23:44:48 (3 weeks ago)	Web form spam ( id lmn.l )	Web Spam
Anonymous	2025-06-15 07:54:32 (3 weeks ago)	Spamming registration page	Web Spam
Nicolmn	2025-06-15 01:02:13 (3 weeks ago)	Web form spam ( id mmltz.l )	Web Spam
Anonymous	2025-06-08 14:09:46 (4 weeks ago)	Spamming registration page	Web Spam
nowyouknow	2025-06-02 17:23:32 (1 month ago)	(From [email protected])	Phishing Web Spam
el-brujo	2025-05-12 07:51:47 (1 month ago)	05/12/2025-09:51:47.593551 102.216.68.56 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
ThreatBook.io	2025-05-05 22:50:14 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.216.68.56	Brute-Force
Anonymous	2025-05-01 19:14:44 (2 months ago)	Spamming registration page	Web Spam
nowyouknow	2025-04-30 05:39:04 (2 months ago)	(From [email protected])	Phishing Web Spam
paissangroup	2025-04-21 11:58:40 (2 months ago)	Multiple WAF Violations	Web App Attack
unhfree.net	2025-04-18 17:50:16 (2 months ago)	Apr 18 19:34:53 canopus postfix/smtpd[838898]: NOQUEUE: reject: RCPT from unknown[102.216.68.56]: 55 ... show moreApr 18 19:34:53 canopus postfix/smtpd[838898]: NOQUEUE: reject: RCPT from unknown[102.216.68.56]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<unhfree.net> Apr 18 19:50:15 canopus postfix/smtpd[840001]: NOQUEUE: reject: RCPT from unknown[102.216.68.56]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 18 19:50:15 canopus postfix/smtpd[840001]: NOQUEUE: reject: RCPT from unknown[102.216.68.56]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 18 19:50:15 canopus postfix/smtpd[840001]: NOQUEUE: reject: RCPT from unknown[102.216.68.5 ... show less	Brute-Force Exploited Host
ThreatBook.io	2025-04-15 22:54:04 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.216.68.56	Brute-Force
Anonymous	2025-04-12 10:03:36 (2 months ago)	ZUOBDE WEBFORM SPAM 102.216.68.56 (56-68.216.102.r.airtelkenya.com)	Web Spam
TPI-Abuse	2025-04-10 19:37:52 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 102.216.68.56 (56-68.216.102.r.airtelkenya.com) ... show more(mod_security) mod_security (id:225170) triggered by 102.216.68.56 (56-68.216.102.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 10 15:37:47.540977 2025] [security2:error] [pid 27074:tid 27074] [client 102.216.68.56:39459] [client 102.216.68.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z_geC1sf8MiLKmP-gaKaTAAAAAc"], referer: https://manaplas.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Mangelot Hosting	2025-04-10 13:51:51 (2 months ago)	(WPLOGIN) WP Login Attack 102.216.68.56 (KE/Kenya/56-68.216.102.r.airtelkenya.com): 5 in the last 36 ... show more(WPLOGIN) WP Login Attack 102.216.68.56 (KE/Kenya/56-68.216.102.r.airtelkenya.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩