JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.0.21.44

102.0.21.44 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 71%: ?

71%

ISP	Allocated to Airtel Kenya Mobile Broadband and Fixed internet
Usage Type	Fixed Line ISP
ASN	AS36926
Hostname(s)	44-21-0-102.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Juja, Kiambu County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.0.21.44

Whois 102.0.21.44

IP Abuse Reports for 102.0.21.44:

This IP address has been reported a total of 75 times from 45 distinct sources. 102.0.21.44 was first reported on July 18th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 17:26:56 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 102.0.21.44 (44-21-0-102.r.airtelkenya.com): 1 ... show more (mod_security) mod_security (id:210730) triggered by 102.0.21.44 (44-21-0-102.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 13:26:51.615018 2026] [security2:error] [pid 1791:tid 1802] [client 102.0.21.44:36600] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.us"] [uri "/http/charteredfinancialmanager.com"] [unique_id "apcK24jpw_Vr_KElH69WxwAAAQk"], referer: https://aafm.us show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-08-29 05:29:11 (3 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.21.4 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.0.21.44 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-27 02:48:05 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 03:53:55 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-20 19:10:36 (1 week ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS36926) sent ~2202 packets (0.13 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-08-20 13:59:12 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:29:22 (1 week ago)	UDP flood (DDoS) vs AS215599: 3324 pkts / 4.75 MB to UDP 80/8443 across 589 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 3324 pkts / 4.75 MB to UDP 80/8443 across 589 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:22 (1 week ago)	UDP flood (DDoS) vs AS215599: 3324 pkts / 4.75 MB to UDP 80/8443 across 589 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 3324 pkts / 4.75 MB to UDP 80/8443 across 589 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 MPL	2026-08-19 15:44:53 (1 week ago)	tcp ports: 22,23 (10 or more attempts)	Port Scan
🇪🇸 librebit	2026-08-19 00:06:34 (1 week ago)	Brute force	Brute-Force
Anonymous	2026-08-16 22:28:44 (2 weeks ago)	6205/udp (1 or more attempts)	Port Scan
🇱🇺 tdefise	2026-08-16 15:22:00 (2 weeks ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (11.5 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (11.5 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇫🇷 Zkillu	2026-08-15 17:59:21 (2 weeks ago)	DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS2 ... show more DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS215599. This IP (AS36926) sent ~1173 packets (1.56 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇩🇪 Vegascosmetics	2026-08-13 23:54:11 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack
🇫🇷 Sklurk	2026-08-12 02:57:50 (2 weeks ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.92.56

🇺🇸 216.25.89.124

🇹🇼 198.235.24.59

🇺🇸 170.124.107.213

🇩🇪 130.12.182.197

🇹🇼 35.221.153.171

🇩🇪 135.125.199.17

🇸🇳 41.83.46.226

🇨🇳 222.88.225.195

🇰🇷 211.56.131.187

🇧🇷 205.210.31.249

🇧🇷 205.210.31.232

🇧🇷 205.210.31.226

🇬🇧 35.203.210.80

🇺🇸 216.180.246.78

🇺🇸 205.210.31.10

🇧🇷 187.110.238.50

🇷🇴 92.118.39.77

🇧🇬 79.124.62.230

🇺🇸 52.24.112.111