JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.68.77.13

102.68.77.13 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 54%: ?

54%

ISP	Unwired Communications Limited
Usage Type	Fixed Line ISP
ASN	AS328490
Domain Name	unwired.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.68.77.13

Whois 102.68.77.13

IP Abuse Reports for 102.68.77.13:

This IP address has been reported a total of 101 times from 49 distinct sources. 102.68.77.13 was first reported on July 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 legionMCCXV	2026-10-16 08:51:34 (1 day ago)	Bad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid or ... show more Bad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid origin — suspected coordinate scraper. Banned 7 days. show less	Bad Web Bot
🇨🇭 ALPHANET	2026-10-16 07:40:06 (1 day ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
Anonymous	2026-10-15 03:23:32 (2 days ago)	WEB attack	Brute-Force
🇺🇸 TPI-Abuse	2026-10-05 17:29:03 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 13:28:57.286138 2026] [security2:error] [pid 13154:tid 13154] [client 102.68.77.13:43186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strippolefitness.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strippolefitness.com"] [uri "/"] [unique_id "asPeWf3BX4EvqJ5xaNtUZQAAABE"], referer: https://seolinkservices.website/dir/niche-link-building-199262 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 09:38:08 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:38:04.075645 2026] [security2:error] [pid 31555:tid 31555] [client 102.68.77.13:51790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rohn.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rohn.com"] [uri "/"] [unique_id "ar97fFCRk0n7Ccd7VGihfAAAAAo"], referer: https://seopbnbacklinks.store/dir/high-dr-backlinks-178269 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-10-02 02:10:04 (2 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇩🇪 LRob	2026-09-25 13:20:31 (3 weeks ago)	This address requests our sites over plain http, is answered with a redirect to https, and never fol ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: /serie/a-forest \| 2026-09-25 13:20 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-25 12:22:02 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 08:21:54.559375 2026] [security2:error] [pid 636275:tid 636275] [client 102.68.77.13:49514] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|garon.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/harry lerner.html"] [unique_id "arZnYhNk77cszzz7aGfNhAAAAAk"], referer: https://www.garon.us/zindex.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 06:10:35 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 02:10:27.237230 2026] [security2:error] [pid 24603:tid 24603] [client 102.68.77.13:56274] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cchockeyhistory.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cchockeyhistory.org"] [uri "/"] [unique_id "arYQUxwzR7Q8Rh5gTu-bsAAAAAM"], referer: https://certiad.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 19:34:19 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 15:18:32 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 librebit	2026-09-24 07:23:52 (3 weeks ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-22 09:54:58 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 13:52:55 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:52:47.491826 2026] [security2:error] [pid 6734:tid 6734] [client 102.68.77.13:34330] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|elpasoheroes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "elpasoheroes.com"] [uri "/"] [unique_id "aqvwr5MhVBSGSBnXJsbSQQAAAAI"], referer: https://findwebsitebacklinks.shop/dir/niche-link-building-64062 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:39:04 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.68.77.13 (102.68.77.13.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:38:59.288499 2026] [security2:error] [pid 28001:tid 28001] [client 102.68.77.13:51196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|chronoton.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chronoton.com"] [uri "/"] [unique_id "aqunIxjrf07Rf1x90aV3lQAAAAA"], referer: https://domaincheckerdapa.site/dir/organic-visibility-backlinks-39577 show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.153.135

🇻🇳 221.133.26.3

🇬🇧 86.38.187.149

🇺🇸 3.129.187.38

🇲🇽 177.245.240.132

🇨🇳 125.69.76.148

🇪🇸 113.30.149.218

🇰🇿 95.58.255.251

🇬🇧 86.38.187.128

🇬🇧 86.38.187.13

🇳🇱 77.91.71.10

🇨🇳 60.188.112.159

🇭🇷 188.252.198.241

🇺🇸 173.18.106.54

🇭🇰 156.239.236.204

🇨🇳 124.237.60.6

🇨🇳 117.50.208.104

🇰🇷 112.187.204.188

🇭🇰 94.190.229.193

🇨🇭 91.208.173.162