105.164.128.138

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
30% Elevated
28 reports
15 reporters · latest 1 day ago
ISP
Safaricom Limited
Usage Type
Fixed Line ISP
ASN
AS37061
Domain Name
safaricom.co.ke
Country
🇰🇪 Kenya
City
Nairobi, Nairobi County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Bad Web Bot 10 Brute-Force 2 Web App Attack 1 Hacking 1 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Jova
Part of a distributed password attack on a mail account (SMTP logins from many IPs).
Brute-Force
Anonymous
Hacking Bad Web Bot
🇳🇱 Mangelot Hosting
(wp_user_enum) srv101 WordPress user enumeration 105.164.128.138 (KE/Kenya/-): 8 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇫🇷 wiredalter
Blocked by fail2ban on o2VPS [22/tcp] Source Port: 31161 TTL: 41 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.93.164.218
🇨🇳 223.73.178.55
🇪🇬 213.131.64.123
🇵🇱 162.158.172.62
🇺🇸 103.144.3.181
🇭🇰 101.36.108.9
🇺🇸 91.230.168.131
🇧🇬 78.128.81.201
🇨🇳 116.179.32.21
🇧🇩 103.96.105.139
🇺🇸 8.229.82.192
🇮🇳 203.145.165.2
🇦🇷 190.122.89.84
🇺🇸 147.185.132.189
🇮🇳 103.207.9.246
🇸🇪 95.155.234.218
feedback