JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.211.216.34

102.211.216.34 was found in our database!

This IP was reported 205 times. Confidence of Abuse is 51%: ?

51%

ISP	Rasmilink
Usage Type	Fixed Line ISP
ASN	AS37129
Domain Name	rasmilink.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.211.216.34

Whois 102.211.216.34

IP Abuse Reports for 102.211.216.34:

This IP address has been reported a total of 205 times from 94 distinct sources. 102.211.216.34 was first reported on October 20th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-09-07 04:00:27 (4 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A319&f%5B1%5D=digest_key_terms%3A495&f%5B2%5D=digest_key_terms%3A522&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-05 17:15:55 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-05 16:24:10 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-02 18:03:38 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-30 22:20:52 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 102.211.216.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 102.211.216.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 18:20:45.363621 2026] [security2:error] [pid 3265:tid 3265] [client 102.211.216.34:55802] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ourodyssey.us\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "apSsvbiLBaN9m1wrBpEUUQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-30 13:34:37 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-30 08:25:42 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 102.211.216.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 102.211.216.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 04:25:34.284324 2026] [security2:error] [pid 14003:tid 14003] [client 102.211.216.34:49904] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/nizagara.com"] [unique_id "apPo_gQGal_B8EZ9n5w_lAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-25 11:20:57 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 stechusa	2026-08-23 16:39:22 (2 weeks ago)	[Askari] \| country=KE \| Behavior: Outdated browser, Targeting specific pages, HTTP/1.1 over TLS, Con ... show more [Askari] \| country=KE \| Behavior: Outdated browser, Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-23 16:39:22 (2 weeks ago)	ELEVATED_THREAT \| country=KE \| ASN=Rasmilink \| AbuseIPDB=48% \| 15 IPs targeting /category.html \| Fac ... show more ELEVATED_THREAT \| country=KE \| ASN=Rasmilink \| AbuseIPDB=48% \| 15 IPs targeting /category.html \| Facet request during elevated threat (facet_ratio=0.80, unique_ips=214) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-08-22 07:17:23 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-08-20 17:05:41 (3 weeks ago)	Bogus Useragent: 102.211.216.34 - - [20/Aug/2026:19:05:40 +0200] "GET /protocol?id=rp_15_79&offset=3 ... show more Bogus Useragent: 102.211.216.34 - - [20/Aug/2026:19:05:40 +0200] "GET /protocol?id=rp_15_79&offset=300&seq=308 HTTP/1.1" 444 0 "-" "Opera/8.39.(Windows CE; ar-LY) Presto/2.9.167 Version/12.00" asn=37129 org="Rasmilink" country=KE ... show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 14:20:01 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-18 12:11:49 (3 weeks ago)	Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineC ... show more Distributed scraper residential proxy pool — www.liquoroutletwinecellars.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-18 09:53:11 (3 weeks ago)	102.211.216.34 (KE/Kenya/-), 10 distributed imapd attacks on account [redacted]	Brute-Force

Showing 1 to 15 of 205 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 84.236.153.81

🇺🇸 70.175.182.42

🇳🇱 68.183.9.16

🇺🇸 67.187.52.186

🇷🇺 5.102.155.175

🇷🇺 195.222.141.127

🇬🇧 195.96.139.211

🇸🇪 171.25.158.24

🇫🇷 91.196.152.39

🇳🇱 91.92.243.223

🇸🇬 47.128.111.74

🇻🇪 201.249.71.251

🇺🇸 172.253.217.29

🇮🇩 163.128.235.62

🇺🇸 70.186.168.67

🇰🇷 61.76.136.25

🇰🇷 1.247.245.61

🇺🇸 216.25.89.131

🇺🇸 195.184.76.62

🇵🇱 176.53.159.197