JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.210.58.126

102.210.58.126 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 88%: ?

88%

ISP	Syokinet Solutions Limited
Usage Type	Fixed Line ISP
ASN	AS328271
Domain Name	syokinet.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.210.58.126

Whois 102.210.58.126

IP Abuse Reports for 102.210.58.126:

This IP address has been reported a total of 17 times from 15 distinct sources. 102.210.58.126 was first reported on September 14th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 noconex	2026-09-18 18:39:04 (8 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.210.58 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.210.58.126 show less	Port Scan Brute-Force SSH
🇹🇷 pashait	2026-09-18 14:18:02 (13 hours ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-09-18 14:18 show less	Web App Attack
🇵🇱 bart@	2026-09-18 12:32:16 (14 hours ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp show less	Port Scan
🇩🇪 Vegascosmetics	2026-09-18 11:13:57 (16 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-09-17 19:20:32 (1 day ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[110]= ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[110]=33&topics[111]=49&topics[112]=65&topics[113]=61 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 15:59:24 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 102.210.58.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.210.58.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:59:15.767654 2026] [security2:error] [pid 20271:tid 20271] [client 102.210.58.126:41438] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|debzy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "debzy.com"] [uri "/"] [unique_id "aqwOU61RuDU3NU1o42X59wAAABg"], referer: https://checkdomainbacklinks.online/dir/trusted-link-building-52019 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-17 03:35:37 (1 day ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /it/panier/ \| 2026-09-17 03:35 UTC show less	Bad Web Bot
🇹🇷 Domainhizmetleri.com	2026-09-16 08:10:53 (2 days ago)	Source: DH Hunter (Honeypot) \| Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)	Port Scan
🇧🇷 noconex	2026-09-16 05:59:05 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.210.58 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.210.58.126 show less	Port Scan Brute-Force SSH
🇺🇸 Cyber Crusader	2026-09-16 03:00:10 (3 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 gui-ying233	2026-09-15 21:24:33 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 MPL	2026-09-15 07:52:42 (3 days ago)	tcp ports: 22,23 (8 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-09-15 02:52:43 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 102.210.58.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 102.210.58.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 22:52:34.250953 2026] [security2:error] [pid 31060:tid 31060] [client 102.210.58.126:44554] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davidnevue.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidnevue.com"] [uri "/"] [unique_id "aqiy8jxqU38rwl5ZYKJopgAAAAc"], referer: https://findingjoyinthejourney-angie.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-14 17:36:40 (4 days ago)	[UDP/1670] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
Anonymous	2026-09-14 16:32:04 (4 days ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.94

🇺🇸 167.99.12.43

🇳🇱 160.119.76.138

🇨🇳 116.148.226.140

🇫🇷 91.231.89.148

🇮🇹 88.58.122.242

🇧🇪 34.79.67.37

🇧🇪 34.22.126.131

🇺🇸 34.11.102.232

🇰🇷 220.126.237.110

🇩🇪 217.182.196.66

🇰🇼 188.71.246.179

🇺🇸 157.230.237.176

🇺🇸 156.146.38.170

🇹🇼 152.32.165.241

🇩🇪 149.88.19.89

🇺🇸 147.185.132.129

🇰🇷 123.108.169.196

🇰🇷 121.131.220.142

🇻🇳 116.97.106.92