AbuseIPDB » 105.163.2.136

Check an IP Address, Domain Name, or Subnet

e.g. 3.239.8.7, microsoft.com, or 5.188.10.0/24

105.163.2.136 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 21%: ?

21%

ISP	Safaricom Limited
Usage Type	Unknown
Domain Name	safaricom.co.ke
Country	Kenya
City	Nairobi, Nairobi City

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 105.163.2.136

Whois 105.163.2.136

IP Abuse Reports for 105.163.2.136:

This IP address has been reported a total of 8 times from 8 distinct sources. 105.163.2.136 was first reported on May 20th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
neverdown.eu	27 May 2023	(XMLRPC) WP XMLPRC Attack 105.163.2.136 (KE/Kenya/-): 1 in the last 3600 secs; Ports: ; Direction: ... show more(XMLRPC) WP XMLPRC Attack 105.163.2.136 (KE/Kenya/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 105.163.2.136 - - [27/May/2023:06:51:01 +0300] "POST /xmlrpc.php HTTP/1.1" 301 707 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Port Scan
Anonymous	26 May 2023	(mod_security) mod_security (id:972687) triggered by 105.163.2.136 (KE/Kenya/-): 2 in the last 3600 ... show more(mod_security) mod_security (id:972687) triggered by 105.163.2.136 (KE/Kenya/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri May 26 09:41:06.428582 2023] [security2:error] [pid 2842503] [client 105.163.2.136:6040] [client 105.163.2.136] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "972687"] [msg "wp-login request blocked, no referrer"] [hostname "marmoresprado.com.br"] [uri "/wp-login.php"] [unique_id "ZHCo4uJd-v8_r45cNMjVvQAAAAQ"] [Fri May 26 09:41:07.966131 2023] [security2:error] [pid 2840569] [client 105.163.2.136:6020] [client 105.163.2.136] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "marmoresprado.com.br"] [uri "/xmlrpc.php"] [unique_id "ZHCo45LsTwk8lOFl9A6wrAAAAAc"] show less	Port Scan
niceshops.com	24 May 2023	Web Attack ([24/May/2023:05:48:55.719] GET /wp-login.php)	Web App Attack
AutoBlockIP	27 Feb 2022	Exploited Host. SMTP botnet attack detected.	Phishing Email Spam Brute-Force Exploited Host
IrisFlower	17 Feb 2022	Unauthorized connection attempt detected from IP address 105.163.2.136 to port 23 [J]	Port Scan Hacking
PT	07 Jan 2022	blacklisted on spamhaus.org	Email Spam
creoline GmbH	23 Sep 2021	E-Mail Spam (RBL) [T614CD2A3L00000000]	Email Spam
fortypoundhead	20 May 2021	Gatekeeper - PHP vuln scan	Web App Attack