JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.201.110.11

102.201.110.11 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 54%: ?

54%

ISP	SPEEDMAXNET BROADBAND LIMITED
Usage Type	Unknown
ASN	AS329804
Domain Name	speedmaxnet.co.ke
Country	🇰🇪 Kenya
City	Kerugoya, Kirinyaga County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.201.110.11

Whois 102.201.110.11

IP Abuse Reports for 102.201.110.11:

This IP address has been reported a total of 13 times from 8 distinct sources. 102.201.110.11 was first reported on September 13th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 17:38:17 (9 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 13:38:12.673644 2026] [security2:error] [pid 30916:tid 30916] [client 102.201.110.11:41340] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|acsellsre.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acsellsre.com"] [uri "/"] [unique_id "aq13BJ7liXg4QQUgjkGJYAAAABc"], referer: https://freeserpchecker.site/dir/competitive-seo-backlinks-1779 show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 pashait	2026-09-18 14:26:03 (12 hours ago)	Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-09-18 14:26	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 10:33:31 (16 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 06:33:24.327922 2026] [security2:error] [pid 31075:tid 31075] [client 102.201.110.11:32828] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|victotex.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "victotex.com"] [uri "/"] [unique_id "aq0TdEvVNu80jrSxi93kkQAAAAM"], referer: https://bulkdadrchecker.site/dir/organic-seo-links-225713 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 16:16:52 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:16:46.339174 2026] [security2:error] [pid 9706:tid 9706] [client 102.201.110.11:42408] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|meghanmack.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "meghanmack.com"] [uri "/"] [unique_id "aqwSbtQegE2xWsCxPoCoCQAAABM"], referer: https://backlinkanalysistool.shop/dir/quality-backlink-services-133866 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-17 16:05:15 (1 day ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /contact \| 2026-09-17 16:05 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 11:41:50 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.201.110.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:41:43.301655 2026] [security2:error] [pid 16917:tid 16917] [client 102.201.110.11:52716] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|voodooshop.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "voodooshop.com"] [uri "/"] [unique_id "aqqAd97jNUyRzLEbF1PB1AAAACY"], referer: https://things-to-do-neworleans.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-09-15 14:57:31 (3 days ago)	tcp ports: 23,22 (6 or more attempts)	Port Scan
🇺🇸 gui-ying233	2026-09-14 16:08:59 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 HamSammich	2026-09-14 05:33:25 (4 days ago)	Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-09-14T05:33 ... show more Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-09-14T05:33Z). show less	Brute-Force SSH IoT Targeted
Anonymous	2026-09-14 04:32:02 (4 days ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇺🇸 MPL	2026-09-14 03:30:45 (4 days ago)	tcp/23	Port Scan
Anonymous	2026-09-14 03:01:59 (5 days ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 gui-ying233	2026-09-13 15:22:49 (5 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.33.142

🇺🇸 185.180.141.68

🇺🇸 172.203.217.224

🇨🇳 118.145.66.151

🇭🇰 58.152.42.212

🇨🇦 54.39.6.223

🇨🇳 8.152.209.0

🇺🇸 216.25.89.111

🇺🇸 195.184.76.219

🇬🇧 193.163.125.123

🇫🇷 156.67.31.88

🇺🇸 147.185.132.62

🇨🇦 142.44.228.210

🇺🇸 135.129.161.9

🇨🇳 115.191.18.114

🇮🇩 103.156.17.4

🇸🇬 85.203.23.11

🇲🇦 81.192.46.32

🇺🇸 64.62.197.96

🇳🇱 45.148.10.157