JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.217.126.106

102.217.126.106 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 34%: ?

34%

ISP	SMARTCLOUD AFRICA LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS328989
Domain Name	smartcloud.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.217.126.106

Whois 102.217.126.106

IP Abuse Reports for 102.217.126.106:

This IP address has been reported a total of 94 times from 20 distinct sources. 102.217.126.106 was first reported on December 11th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-10-20 08:22:01 (2 days ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 NetVexor	2026-10-17 19:43:25 (5 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-10-14 22:16:05 (1 week ago)	[TCP/23] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-09-24 04:24:40 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.217.126.106 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.217.126.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:24:34.901816 2026] [security2:error] [pid 17417:tid 17417] [client 102.217.126.106:45894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|brianchancemusic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brianchancemusic.com"] [uri "/"] [unique_id "arSmArR4PbGnbPZGgCSG1AAAAAQ"], referer: https://drjack.world/report/30814 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-23 11:28:46 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 09:52:51 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-15 17:14:44 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-12 11:00:02 (1 month ago)	denied traffic to a honeypot network. destination port 59600.	Port Scan Hacking
🇺🇸 鬼影233	2026-08-29 04:10:36 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-27 14:23:04 (1 month ago)	denied traffic to a honeypot network. destination port 24378.	Port Scan Hacking
🇺🇸 kosada.com	2026-08-26 19:53:44 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-08-13 06:42:03 (2 months ago)	block ruleset 39D9DF3582BC0B50B0A9559A2D05D44391E672DC	Bad Web Bot
Anonymous	2026-08-12 00:30:18 (2 months ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/241/form_key/4iLVT5n6fyAWjxr7/ \| UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 11.0; Trident/4.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-08-07 15:00:53 (2 months ago)	Zimbra: Login failures from malicious IP: 102.217.126.106. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 102.217.126.106. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-06 00:01:32 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 154.41.126.47

🇮🇹 151.33.39.15

🇭🇰 114.111.53.214

🇩🇪 109.160.32.170

🇺🇸 20.169.84.230

🇧🇷 177.8.134.180

🇺🇸 173.255.214.62

🇳🇱 77.239.124.49

🇮🇳 45.79.123.180

🇨🇴 38.191.211.75

🇺🇸 23.95.186.183

🇰🇷 218.149.157.240

🇳🇱 195.178.110.227

🇺🇸 185.118.133.8

🇯🇵 172.104.83.195

🇬🇧 165.154.128.199

🇿🇦 156.155.17.12

🇸🇬 152.42.220.29

🇨🇳 150.139.201.247

🇹🇭 118.194.251.144