AbuseIPDB » 102.67.154.6

102.67.154.6 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 42%: ?

42%

ISP	SKY TREND NETWORKS LIMITED
Usage Type	Fixed Line ISP
Domain Name	skytrendnetworks.com
Country	Kenya
City	Nairobi, Nairobi County

Report 102.67.154.6

Whois 102.67.154.6

IP Abuse Reports for 102.67.154.6:

This IP address has been reported a total of 117 times from 73 distinct sources. 102.67.154.6 was first reported on December 25th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
spaceduck	2024-02-16 18:13:32 (9 months ago)	102.67.154.6 - - [06/Jan/2024:23:22:26 -0800] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 404 ... show more102.67.154.6 - - [06/Jan/2024:23:22:26 -0800] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 102.67.154.6 - - [06/Jan/2024:23:22:27 -0800] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" show less	Bad Web Bot Web App Attack
stroytrest	2024-02-16 16:05:35 (9 months ago)	2024-02-16T19:05:34.302076+03:00 debian kernel: [366902.111110] nftables: SCAN-SQL IN=ens1 OUT= MAC= ... show more2024-02-16T19:05:34.302076+03:00 debian kernel: [366902.111110] nftables: SCAN-SQL IN=ens1 OUT= MAC= SRC=102.67.154.6 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=23224 DF PROTO=TCP SPT=50998 DPT=3306 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
security.rdmc.fr	2024-02-13 14:49:35 (9 months ago)	Port Scan Attack proto:TCP src:36400 dst:3306	Port Scan
Herrminator	2024-02-02 12:16:29 (10 months ago)	85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:23 +0100] "GET /phpmyadmin2018/index.php?lang=en ... show more85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:23 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:24 +0100] "GET /phpMyAdmin_/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:24 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:24 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 85.215.157.225 102.67.154.6 - - [02/Feb/2024:13:16:2 ... show less	Brute-Force Web App Attack
Beta	2024-02-02 11:45:06 (10 months ago)	access non open port: 80	Port Scan
QUADEMU Abuse Dpt	2024-01-30 18:13:02 (10 months ago)	[New] Noxious/Nuisible/вредоносный Host.	Port Scan Exploited Host
urmarcht	2024-01-20 17:28:48 (10 months ago)	Bot attack detected : webscan vurnerability	Web App Attack
urmarcht	2024-01-15 03:44:00 (10 months ago)	Bot attack detected : webscan vurnerability	Web App Attack
RoboSOC	2024-01-10 18:25:35 (10 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
spaceduck	2024-01-07 07:22:28 (10 months ago)	102.67.154.6 - - [06/Jan/2024:23:22:26 -0800] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 404 ... show more102.67.154.6 - - [06/Jan/2024:23:22:26 -0800] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" 102.67.154.6 - - [06/Jan/2024:23:22:27 -0800] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" show less	Bad Web Bot Web App Attack
Anonymous	2024-01-05 06:59:10 (10 months ago)	102.67.154.6 - - [05/Jan/2024:07:59:09 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 403 344 "-" ... show more102.67.154.6 - - [05/Jan/2024:07:59:09 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 102.67.154.6 - - [05/Jan/2024:07:59:09 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Web App Attack
Cynar & Cinny	2023-12-25 16:20:10 (11 months ago)	ufw_block_log	Port Scan