JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.135.172.136

102.135.172.136 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 66%: ?

66%

ISP	POA INTERNET KENYA LIMITED
Usage Type	Fixed Line ISP
ASN	AS328331
Domain Name	poainternet.net
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.135.172.136

Whois 102.135.172.136

IP Abuse Reports for 102.135.172.136:

This IP address has been reported a total of 29 times from 14 distinct sources. 102.135.172.136 was first reported on August 27th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-09-23 05:31:17 (5 hours ago)	Autoban IP(2): 102.135.172.136 - Hostname: POA INTERNET KENYA LIMITED - City: Nairobi - Country: Ken ... show more Autoban IP(2): 102.135.172.136 - Hostname: POA INTERNET KENYA LIMITED - City: Nairobi - Country: Kenya - Organization: poa! Internet - Reason: GET /?o=ekcc82znnzz5740rreecalxl HTTP/1.1 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 12:37:22 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:37:17.068301 2026] [security2:error] [pid 19798:tid 19899] [client 102.135.172.136:39348] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|emehache.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emehache.com"] [uri "/"] [unique_id "aqve_dYvbzONyL5caX4B-AAAAEI"], referer: https://padacheckerfree.website/dir/trusted-link-building-64419 show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 bmino.pl	2026-09-16 23:04:26 (6 days ago)	Autoban IP(2): 102.135.172.136 - Hostname: POA INTERNET KENYA LIMITED - City: Nairobi - Country: Ken ... show more Autoban IP(2): 102.135.172.136 - Hostname: POA INTERNET KENYA LIMITED - City: Nairobi - Country: Kenya - Organization: poa! Internet - Reason: GET /?o=ekcc82znnzz5740rreecalxl HTTP/1.1 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 19:25:38 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:25:31.991283 2026] [security2:error] [pid 4330:tid 4434] [client 102.135.172.136:42642] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kettleofgold.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kettleofgold.com"] [uri "/"] [unique_id "aqrtK1wCOLkmKVcdhkxrSQAAAg0"], referer: https://daandpachecker.online/dir/quality-link-building-113009 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 14:59:01 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.135.172.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:58:53.410408 2026] [security2:error] [pid 10350:tid 10350] [client 102.135.172.136:47897] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ngmweb.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ngmweb.com"] [uri "/"] [unique_id "aqqurZyyoj6ytX7n8DFLMAAAAAM"], referer: https://dapacheckerseo.space/dir/custom-seo-backlinks-148055 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-15 20:22:28 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 ALPHANET	2026-09-15 09:30:02 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-09-13 17:22:34 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-12 11:00:51 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 FireGuard Server	2026-09-12 06:05:08 (1 week ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇵🇱 MatStef132	2026-09-12 01:07:54 (1 week ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 gui-ying233	2026-09-11 00:15:44 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 RAP	2026-09-10 06:58:45 (1 week ago)	2026-09-10 06:58:45 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 gui-ying233	2026-09-09 22:17:28 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-09 05:37:53 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.88.76.27

🇳🇱 213.177.179.160

🇹🇷 194.124.37.234

🇺🇸 162.215.1.45

🇵🇰 154.57.216.142

🇸🇬 43.153.205.159

🇦🇺 35.197.184.73

🇯🇵 8.209.208.8

🇫🇷 2001:41d0:33a:a00::408

🇩🇪 213.209.159.11

🇪🇬 197.44.15.210

🇺🇸 170.106.153.232

🇲🇾 115.133.32.126

🇧🇩 103.138.31.134

🇮🇩 103.46.186.120

🇳🇱 89.42.231.200

🇨🇦 85.217.149.74

🇳🇱 85.11.167.48

🇱🇹 77.90.185.46

🇮🇳 2401:4900:d169:d28e:40cc:ae14:a44f:ad9a