JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.204.13.227

102.204.13.227 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 89%: ?

89%

ISP	Cortech Systems Limited
Usage Type	Fixed Line ISP
ASN	AS329654
Domain Name	cortechsystems.com
Country	🇰🇪 Kenya
City	Karuri, Kiambu County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.204.13.227

Whois 102.204.13.227

IP Abuse Reports for 102.204.13.227:

This IP address has been reported a total of 40 times from 28 distinct sources. 102.204.13.227 was first reported on March 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 senkodev	2026-08-27 04:16:49 (2 days ago)	2026-08-27T04:15:26.141243Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 102.204.13.227:607 ... show more 2026-08-27T04:15:26.141243Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 102.204.13.227:60776 (158.69.22.11:2222) [session: 9473f1817bbf] 2026-08-27T04:16:49.266260Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 102.204.13.227:54694 (158.69.22.11:2222) [session: 64760a630172] ... show less	Brute-Force SSH
Anonymous	2026-08-26 21:04:34 (2 days ago)	PORT & IP Scan.	Port Scan Brute-Force
🇺🇸 floreriaexpress	2026-08-26 11:53:58 (2 days ago)	FakeADS-Anti: country:KE \| https://floreriaexpresschile.cl/product-tag/flores-santiago/page/18/?max_ ... show more FakeADS-Anti: country:KE \| https://floreriaexpresschile.cl/product-tag/flores-santiago/page/18/?max_price=201680&add-to-cart=91725 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 11:28:25 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-26 10:24:27 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇵🇱 bart@	2026-08-26 09:06:54 (2 days ago)	Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip show less	Port Scan
🇺🇸 gui-ying233	2026-08-25 11:37:56 (3 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-25 09:55:48 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 73>=65, Abuse 77, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇧🇷 noconex	2026-08-24 19:15:13 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.13.227 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-24 10:20:27 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 garrymenata	2026-08-24 01:35:36 (5 days ago)	102.204.13.227 - - [24/Aug/2026:02:16:29 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 102.204.13.227 - - [24/Aug/2026:02:16:29 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.204.13.227 - - [24/Aug/2026:02:16:31 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.204.13.227 - - [24/Aug/2026:02:16:33 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 13:17:37 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-23 09:58:22 (5 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇩🇪 ITSNF	2026-08-23 08:40:02 (5 days ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=22,23	Port Scan Hacking
🇧🇷 noconex	2026-08-22 18:45:03 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.13 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.13.227 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:2cc:1::280

🇹🇼 198.235.24.95

🇿🇼 197.221.232.44

🇺🇸 172.236.111.128

🇻🇳 171.244.201.80

🇨🇴 148.222.199.217

🇫🇮 147.185.133.23

🇫🇷 141.95.242.9

🇨🇳 118.248.156.241

🇫🇷 85.217.140.47

🇺🇸 2001:470:1:c84::e1

🇰🇷 221.165.172.38

🇧🇷 205.210.31.158

🇳🇵 157.10.100.12

🇨🇳 60.174.35.18

🇭🇰 45.125.67.31

🇫🇷 2400:cb00:19:1000:735d:a915:2150:eca6

🇵🇭 2001:4450:4f4f:df00:edc3:d464:282c:3530

🇧🇷 205.210.31.194

🇳🇱 204.76.203.18