JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.216.85.30

102.216.85.30 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 42%: ?

42%

ISP	Surf Net Solutions Limited
Usage Type	Fixed Line ISP
ASN	AS329044
Domain Name	surfnetsolution.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.216.85.30

Whois 102.216.85.30

IP Abuse Reports for 102.216.85.30:

This IP address has been reported a total of 20 times from 16 distinct sources. 102.216.85.30 was first reported on April 28th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-18 14:38:00 (2 days ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-18 09:20:34 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 102.216.85.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.216.85.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 05:20:26.886503 2026] [security2:error] [pid 27433:tid 27433] [client 102.216.85.30:53834] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|manty.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "manty.com"] [uri "/"] [unique_id "aq0CWk471Y2Pyt1q8Mp6ewAAAAc"], referer: https://five.co.in/redirect.php?ref_host=genteconcancha.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-15 18:13:57 (5 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-13 16:38:01 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 security.rdmc.fr	2026-09-12 11:47:34 (1 week ago)	Port Scan Attack proto:TCP src:38924 dst:23	Port Scan
🇫🇷 Tilellit.PRO	2026-09-12 04:59:08 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-09-07 07:24:09 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A317&f%5B1%5D=digest_key_terms%3A344&f%5B2%5D=digest_key_terms%3A491&f%5B3%5D=digest_key_terms%3A510&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B319%5D=319 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-05 14:43:08 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 MAGIC	2024-03-26 12:02:56 (2 years ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-03-26 10:42:01 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 JuicyJ	2024-03-25 09:43:50 (2 years ago)	Looking for WordPress vulnerabilities	Web App Attack
🇦🇺 MAGIC	2024-02-03 10:02:50 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 SilverZippo	2024-01-29 10:59:31 (2 years ago)	Web App Attack	Web App Attack
🇳🇿 Tripwire	2024-01-22 07:22:51 (2 years ago)	Wordpress login attempts	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2023-08-03 14:48:52 (3 years ago)	102.216.85.30 - - [03/Aug/2023:17:48:41 +0300] "GET /wp-login.php HTTP/1.1" 404 4847 "-" "Mozilla/5. ... show more 102.216.85.30 - - [03/Aug/2023:17:48:41 +0300] "GET /wp-login.php HTTP/1.1" 404 4847 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 102.216.85.30 - - [03/Aug/2023:17:48:46 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 125.77.73.145

🇰🇷 122.199.225.53

🇭🇰 118.26.36.161

🇸🇬 45.78.194.186

🇨🇩 102.223.209.43

🇲🇾 60.54.52.240

🇧🇪 34.77.240.224

🇺🇸 24.164.152.25

🇨🇳 2408:8452:ac7f:79c3:e893:b680:3e7f:b050

🇧🇷 201.3.179.236

🇧🇷 187.73.200.237

🇺🇸 173.16.45.138

🇸🇬 138.75.105.42

🇵🇭 119.93.15.27

🇵🇰 110.39.14.226

🇸🇬 35.187.231.181

🇮🇩 34.34.216.168

🇺🇸 20.65.145.199

🇨🇳 218.0.63.25

🇦🇹 213.225.7.95