JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.203.215.9

102.203.215.9 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 56%: ?

56%

ISP	SUPERFLASH NETWORKS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329673
Domain Name	superflashnetworksltd.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.203.215.9

Whois 102.203.215.9

IP Abuse Reports for 102.203.215.9:

This IP address has been reported a total of 23 times from 17 distinct sources. 102.203.215.9 was first reported on June 29th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SimonB	2026-08-30 06:58:20 (3 days ago)	SSH bruteforce attempt	Brute-Force SSH
🇪🇸 el-brujo	2026-08-27 13:55:51 (6 days ago)	[Thu Aug 27 15:50:18.016158 2026] [proxy_fcgi:error] [pid 2770132:tid 2774222] [remote 102.203.215.9 ... show more [Thu Aug 27 15:50:18.016158 2026] [proxy_fcgi:error] [pid 2770132:tid 2774222] [remote 102.203.215.9:0] AH01071: Got error 'Primary script unknown\n' [Thu Aug 27 15:50:18.076381 2026] [proxy_fcgi:error] [pid 2770112:tid 2774917] [remote 102.203.215.9:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
🇺🇸 gui-ying233	2026-08-27 04:16:01 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 14:49:14 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2026-08-26 13:01:11 (1 week ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇸🇬 garrymenata	2026-08-24 02:13:46 (1 week ago)	102.203.215.9 - - [24/Aug/2026:02:40:34 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U ... show more 102.203.215.9 - - [24/Aug/2026:02:40:34 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.203.215.9 - - [24/Aug/2026:02:40:36 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.203.215.9 - - [24/Aug/2026:02:40:38 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 16:01:20 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 16:17:27 (1 week ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS215599. This IP (AS329673) sent ~866 packets (1.23 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-19 22:11:52 (1 week ago)	UDP flood (DDoS) vs AS215599: 191 pkts / 0.27 MB to UDP 80/8443 across 73 dst IP(s), 2026-08-19 21:4 ... show more UDP flood (DDoS) vs AS215599: 191 pkts / 0.27 MB to UDP 80/8443 across 73 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇦🇺 FireGuard Server	2026-08-19 03:00:10 (2 weeks ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443	Port Scan Hacking
🇱🇺 tdefise	2026-08-16 15:22:00 (2 weeks ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (8.33 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (8.33 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇩🇪 Vegascosmetics	2026-08-14 18:04:04 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇧🇪 voormedia	2026-08-08 23:51:29 (3 weeks ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇩🇪 LRob	2026-08-04 04:20:57 (4 weeks ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~121,187/tag_ids~420,481,639,241,577,621/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 COMPLEX	2026-07-28 19:39:58 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.109

🇩🇪 159.100.18.230

🇺🇸 2600:1f28:365:80b0:fd7b:a5e4:8f8f:df1

🇳🇱 176.65.148.30

🇸🇬 164.52.53.188

🇩🇪 35.198.88.113

🇬🇧 31.14.254.126

🇺🇸 20.169.77.38

🇬🇧 185.216.145.187

🇧🇷 179.218.15.40

🇺🇸 168.235.210.157

🇬🇧 163.5.16.6

🇫🇮 157.22.124.205

🇫🇮 157.22.44.236

🇺🇸 66.132.195.104

🇺🇸 47.251.252.169

🇺🇿 213.230.127.104

🇫🇮 147.185.133.37

🇨🇳 106.40.122.85

🇪🇸 81.202.122.154