JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.204.4.22

102.204.4.22 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 94%: ?

94%

ISP	Net Point Solutions Limited
Usage Type	Fixed Line ISP
ASN	AS329658
Domain Name	netpoint.pro
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.204.4.22

Whois 102.204.4.22

IP Abuse Reports for 102.204.4.22:

This IP address has been reported a total of 35 times from 23 distinct sources. 102.204.4.22 was first reported on July 13th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-09-19 15:30:03 (3 hours ago)	2026-09-19 15:30:03 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇧🇷 noconex	2026-09-18 16:08:27 (1 day ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4.22 show less	Port Scan Brute-Force SSH
🇵🇱 mkey	2026-09-18 14:35:03 (1 day ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-18 16:29:46 \| LAST=2026-09-18 16:29:46. Last seen 2026-09-18 16:29:46. show less	Port Scan
🇫🇷 security.rdmc.fr	2026-09-18 11:28:10 (1 day ago)	IP in Malicious Database	Web App Attack
🇹🇷 pashait	2026-09-18 01:37:58 (1 day ago)	Seczar SecureOps — SSH Brute Force (5 events) — quarantined 43200m on FWLKS	SSH Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 10:11:17 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 102.204.4.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 102.204.4.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:11:09.953690 2026] [security2:error] [pid 24546:tid 24546] [client 102.204.4.22:58304] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dennisangellismusic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dennisangellismusic.com"] [uri "/"] [unique_id "aqu8vU8c9JO_hKFD22n31wAAAA0"], referer: https://blogbacklinkchecker.space/dir/website-ranking-links-52974 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-15 12:32:21 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 noconex	2026-09-13 15:58:19 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4.22 show less	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-09-10 23:42:16 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4.22 show less	Port Scan Brute-Force SSH
🇦🇷 Bruno	2026-09-09 09:13:44 (1 week ago)	Port Scanner: 102.204.4.22	Port Scan
🇺🇸 LotPhantom	2026-09-07 13:16:22 (1 week ago)	2026-09-07T13:14:52.484616+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-07T13:14:52.484616+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=102.204.4.22 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=37770 DF PROTO=TCP SPT=41078 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-07T13:16:21.661972+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=102.204.4.22 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=14467 DF PROTO=TCP SPT=38540 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇧🇷 noconex	2026-09-07 12:38:13 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.204.4.22 show less	Port Scan Brute-Force SSH
🇺🇸 kosada.com	2026-09-07 04:19:03 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A320&f%5B1%5D=digest_key_terms%3A491&f%5B2%5D=digest_key_terms%3A523&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
Anonymous	2026-09-06 09:32:02 (1 week ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇳🇱 EGP Abuse Dept	2026-09-06 07:07:12 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇷 200.105.99.79

🇺🇸 185.223.152.225

🇺🇸 165.154.182.179

🇺🇸 163.227.179.121

🇨🇴 153.67.115.239

🇺🇸 136.116.134.196

🇳🇱 94.154.46.248

🇨🇦 51.79.86.230

🇬🇧 35.203.211.168

🇬🇧 35.203.211.3

🇭🇰 2602:80d:1004::15

🇧🇪 198.235.24.185

🇧🇪 198.235.24.172

🇩🇪 194.88.98.101

🇩🇪 193.124.20.228

🇨🇴 186.148.183.47

🇸🇰 185.188.239.36

🇺🇸 172.171.233.230

🇺🇸 159.223.206.7

🇨🇳 121.40.41.46