JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.248.17

102.213.248.17 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	Optinode Group LLP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS329192
Domain Name	optinode.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.248.17

Whois 102.213.248.17

IP Abuse Reports for 102.213.248.17:

This IP address has been reported a total of 46 times from 28 distinct sources. 102.213.248.17 was first reported on August 7th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-05-06 07:58:54 (1 month ago)	[Askari] \| country=KE \| Behavior: Concurrent page load during attack, Targeting specific pages, HTTP ... show more [Askari] \| country=KE \| Behavior: Concurrent page load during attack, Targeting specific pages, HTTP/1.1 over TLS show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-05-06 07:58:54 (1 month ago)	ELEVATED_THREAT \| country=KE \| ASN=OGL1-AS \| 59 IPs targeting /category.html \| Facet request during ... show more ELEVATED_THREAT \| country=KE \| ASN=OGL1-AS \| 59 IPs targeting /category.html \| Facet request during elevated threat (facet_ratio=0.86, unique_ips=237) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-12-10 09:23:48 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-23 07:03:36 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇬🇧 Silly Development	2025-09-29 20:52:29 (8 months ago)	Malicious activity detected from 329192 OGL1-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-2 ... show more Malicious activity detected from 329192 OGL1-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:29Z (3 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-08-28 15:20:40 (9 months ago)	2025-08-28 15:20:40 warning[6642098]: host unknown[102.213.248.17]: unauthorized access at ... show more 2025-08-28 15:20:40 warning[6642098]: host unknown[102.213.248.17]: unauthorized access attempted: tcp/16881 show less	Port Scan Brute-Force
🇺🇸 yangfan	2025-08-28 09:32:42 (9 months ago)	IP: 102.213.248.17 [Country: KE] triggered WAF (l7ddos). Action: managed_challenge ASN: 329192 (OGL1 ... show more IP: 102.213.248.17 [Country: KE] triggered WAF (l7ddos). Action: managed_challenge ASN: 329192 (OGL1-AS) Protocol: HTTP/2 (method GET) Endpoint: /cc.gif Time: 2025-08-28T09:23:56Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	DDoS Attack Web Spam Web App Attack
🇺🇸 shabi	2025-08-28 09:26:35 (9 months ago)	IP: 102.213.248.17 [Country: KE] triggered WAF (l7ddos). Action: managed_challenge ASN: 329192 (OGL1 ... show more IP: 102.213.248.17 [Country: KE] triggered WAF (l7ddos). Action: managed_challenge ASN: 329192 (OGL1-AS) Protocol: HTTP/2 (method GET) Endpoint: /cc.gif Time: 2025-08-28T09:22:57Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	DDoS Attack Web Spam Web App Attack
🇩🇪 CommanderRoot	2025-08-26 18:52:09 (9 months ago)	HTTP request flood	DDoS Attack Web Spam
🇪🇸 10dencehispahard SL	2025-08-19 14:02:54 (10 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-16 23:10:50 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 Silly Development	2025-08-10 00:59:08 (10 months ago)	Malicious activity detected from 329192 OGL1-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-1 ... show more Malicious activity detected from 329192 OGL1-AS towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:08Z (2 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-09 16:46:54 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇸🇬 Vano Ganzzz	2025-08-09 14:00:44 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from KE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 27.123.102.50

🇺🇸 2600:6c50:37f:3703:ad64:b1a4:e68f:f4fd

🇧🇷 190.115.65.118

🇷🇺 178.185.136.57

🇺🇸 148.153.193.120

🇫🇮 147.185.133.209

🇨🇳 106.75.216.134

🇨🇦 85.217.149.2

🇷🇴 80.94.95.242

🇺🇸 44.147.216.186

🇺🇸 40.124.173.235

🇰🇷 27.100.188.204

🇺🇸 23.251.43.140

🇵🇱 20.215.211.246

🇩🇪 5.252.153.10

🇵🇱 194.180.48.34

🇺🇸 185.243.5.116

🇸🇬 172.188.218.162

🇻🇳 103.118.28.15

🇳🇱 89.21.67.180