JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.216.85.23

102.216.85.23 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 55%: ?

55%

ISP	Surf Net Solutions Limited
Usage Type	Fixed Line ISP
ASN	AS329044
Domain Name	surfnetsolution.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.216.85.23

Whois 102.216.85.23

IP Abuse Reports for 102.216.85.23:

This IP address has been reported a total of 59 times from 46 distinct sources. 102.216.85.23 was first reported on July 25th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-07-31 10:17:37 (5 hours ago)	Autoban IP(2): 102.216.85.23 - Hostname: Surf Net Solutions Limited - City: Nairobi - Region: Nairob ... show more Autoban IP(2): 102.216.85.23 - Hostname: Surf Net Solutions Limited - City: Nairobi - Region: Nairobi County - Country: Kenya - Location: - Organization: Surf - failed attempts. show less	Web App Attack
🇫🇷 Tilellit.PRO	2026-07-30 09:11:58 (1 day ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
Anonymous	2026-07-30 07:16:16 (1 day ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 kosada.com	2026-07-29 17:18:47 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-07-27 12:01:50 (4 days ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.913 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.913 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 09:32:56 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 102.216.85.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.216.85.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 05:32:52.499315 2026] [security2:error] [pid 14246:tid 14246] [client 102.216.85.23:60318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.216.85.23 (+1 hits since last alert)\|astglobaltech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "astglobaltech.com"] [uri "/xmlrpc.php"] [unique_id "alilROJCqBHuXM1J8m_RbwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 stechusa	2026-07-07 06:48:32 (3 weeks ago)	[Askari] \| country=KE	Bad Web Bot DDoS Attack
🇺🇸 nodepile	2026-07-01 19:02:37 (4 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-29 05:07:32 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 micropedro	2026-06-25 09:30:16 (1 month ago)	4 incidents: malicious activity. First: 2026-06-18 04:31, Last: 2026-06-25 05:30 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-18 04:31, Last: 2026-06-25 05:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 Hmorrin	2026-06-23 20:15:50 (1 month ago)		Port Scan
🇺🇸 micropedro	2026-06-18 08:31:17 (1 month ago)	3 incidents: malicious activity. First: 2026-06-04 03:30, Last: 2026-06-18 04:31 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-04 03:30, Last: 2026-06-18 04:31 UTC. Triggers: ufw-repeater. show less	Port Scan
Anonymous	2026-06-17 15:45:50 (1 month ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/372/form_key/nZLo3a9BRrqEwz9v/ \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_3 like Mac OS X; id-ID) AppleWebKit/533.43.1 (KHTML, like Gecko) Version/4.0.5 Mobile/8B118 Safari/6533.43.1 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-06-15 07:41:53 (1 month ago)	Bogus Useragent: 102.216.85.23 - - [14/Jun/2026:15:25:24 +0200] "GET /protocol?id=hh_22_90&offset=17 ... show more Bogus Useragent: 102.216.85.23 - - [14/Jun/2026:15:25:24 +0200] "GET /protocol?id=hh_22_90&offset=1700&seq=1689 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 4.0; Trident/3.1)" asn=329044 org="Surf Net Solutions Limited" country=KE ... show less	Bad Web Bot
🇺🇸 micropedro	2026-06-11 08:30:19 (1 month ago)	4 incidents: malicious activity. First: 2026-06-04 03:30, Last: 2026-06-11 04:30 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-04 03:30, Last: 2026-06-11 04:30 UTC. Triggers: ufw-repeater. show less	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.137

🇳🇱 195.178.110.228

🇳🇱 185.223.235.53

🇵🇱 185.70.180.199

🇮🇹 172.213.153.79

🇫🇮 147.185.133.111

🇨🇳 125.116.82.78

🇫🇷 91.231.89.175

🇺🇸 91.230.168.146

🇫🇷 91.196.152.111

🇫🇷 91.196.152.18

🇳🇿 45.252.191.33

🇬🇧 45.133.173.48

🇺🇸 2607:f8b0:400e:c05::12d

🇹🇼 2400:cb00:80:1000:dc4d:f8c5:9356:6bf9

🇳🇱 213.176.26.62

🇩🇪 193.148.56.21

🇲🇽 189.174.87.26

🇵🇱 185.70.181.52

🇩🇪 165.232.74.89