AbuseIPDB » 102.212.239.245
102.212.239.245
This IP was reported 6 times. Confidence of
Abuse
is 31% : ?
ISP
Novia East Africa Ltd
Usage Type
Fixed Line ISP
ASN
AS329211
Domain Name
novia.co.ke
Country
🇰🇪
Kenya
City
Nairobi, Nairobi County
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.212.239.245 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
102.212.239.245 was first reported on
May 23rd 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-10 08:30:45
(4 days ago)
[Wed Jun 10 15:30:42.047909 2026] [security2:error] [pid 350121:tid 140281651865280] [client 102.212 ...
show more
[Wed Jun 10 15:30:42.047909 2026] [security2:error] [pid 350121:tid 140281651865280] [client 102.212.239.245:64961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aikgstpNOfTL7IBn0wCITQAABws"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[350156] [AzwSD+Ip/gY] [aikgstpNOfTL7IBn0wCITQAABws] keep_alive=[1] [2026-06-10 15:30:42.047916] [R:aikgstpNOfTL7IBn0wCITQAABws] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.b
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-09 03:13:35
(5 days ago)
[Tue Jun 09 10:13:35.043614 2026] [security2:error] [pid 149476:tid 140246265095872] [client 102.212 ...
show more
[Tue Jun 09 10:13:35.043614 2026] [security2:error] [pid 149476:tid 140246265095872] [client 102.212.239.245:53764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2026/05_Mei_2026/Das-III/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_31_Mei_2026.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "aieE38bahzncOF4m7ebiIQAADAE"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id]
...
show less
Email Spam
Hacking
🇩🇪
Vegascosmetics
2026-06-08 09:30:43
(6 days ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security
DDoS Attack
Hacking
Bad Web Bot
2026-06-04 09:45:28
(1 week ago)
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signatur ...
show more
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signature Blocked: /wishlist/index/add/product/4349/form_key/2KPztjdJjwWmONo3/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(2 weeks ago)
Aisuru(Mirai variant) DDoS | Incident ID: 1c72ea9a-d634-4668-a8aa-89a786da95ec
DDoS Attack
2026-05-23 08:39:01
(3 weeks ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp
show less
Exploited Host
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: