JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.208.164.191

102.208.164.191 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 34%: ?

34%

ISP	Alwen Networks Co. Limited
Usage Type	Fixed Line ISP
ASN	AS329452
Domain Name	fibrconnect.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.208.164.191

Whois 102.208.164.191

IP Abuse Reports for 102.208.164.191:

This IP address has been reported a total of 43 times from 22 distinct sources. 102.208.164.191 was first reported on May 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-10-08 18:09:54 (2 weeks ago)	Autoban IP(2): 102.208.164.191 - Hostname: Alwen Networks Co. Limited - City: Nairobi - Country: Ken ... show more Autoban IP(2): 102.208.164.191 - Hostname: Alwen Networks Co. Limited - City: Nairobi - Country: Kenya - Organization: Alwen Networks Co. Limited - Reason: GET /?t=wzhnu175pabla24651yftypina HTTP/1.1 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 06:18:59 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.208.164.191 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.208.164.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 02:18:52.594386 2026] [security2:error] [pid 1000:tid 1000] [client 102.208.164.191:54866] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|napaautopartskeokuk.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "napaautopartskeokuk.com"] [uri "/"] [unique_id "asHvzHjU46guoKzBR6MyVgAAAA8"], referer: https://buycheapbacklinks.site/dir/manual-seo-backlinks-145115 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-30 09:50:39 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (61, Abuse: 52) show less	Hacking Exploited Host Web App Attack
🇨🇭 ALPHANET	2026-09-30 03:20:03 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-26 17:00:38 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-26 15:24:35 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 librebit	2026-09-24 06:54:57 (4 weeks ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-24 05:29:48 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-22 18:22:32 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.208.164.191 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 102.208.164.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:22:28.259897 2026] [security2:error] [pid 1102:tid 1102] [client 102.208.164.191:45106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sylversheers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sylversheers.com"] [uri "/"] [unique_id "arLHZB0hRIsiD1ro2bnW1gAAAAg"], referer: https://mixtykenlike.blogspot.com/2023/06/d.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-21 10:26:32 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 10:33:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-09-13 03:22:31 (1 month ago)	DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-09-07 15:41:45 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A504&f%5B1%5D=digest_key_terms%3A312&f%5B2%5D=digest_key_terms%3A331&f%5B3%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B321%5D=321 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-03 10:24:22 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-29 16:00:03 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.165.56.162

🇰🇪 102.201.139.166

🇭🇷 89.164.136.219

🇿🇦 41.10.77.205

🇰🇪 197.248.222.159

🇱🇧 194.246.90.107

🇯🇵 172.64.215.100

🇮🇳 152.59.97.111

🇯🇵 136.110.106.71

🇷🇺 95.152.63.90

🇦🇹 83.136.38.178

🇮🇳 58.84.63.5

🇳🇱 45.148.10.141

🇹🇭 43.152.233.107

🇧🇪 35.187.189.52

🇰🇷 211.253.9.49

🇺🇸 162.216.150.37

🇳🇱 149.18.67.231

🇧🇪 130.211.58.197

🇰🇪 62.8.68.171