102.205.236.28
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ONSITE AFRICA CORE
- Usage Type
- Fixed Line ISP
- ASN
- AS329535
- Domain Name
- onsite.co.ke
- Country
- 🇰🇪 Kenya
- City
- Thika, Nairobi County
Abuse Reports
Total reports
129 from
66 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-escaped-quotes)
|
DDoS Attack | |
| 🇫🇷 satelliteproxy |
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
|
Bad Web Bot | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-escaped-quotes)
|
DDoS Attack | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-11-03 19:39, Last: 2026-11-12 19:47 UTC. Triggers: unknown.
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-escaped-quotes)
|
DDoS Attack | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-escaped-quotes)
|
DDoS Attack | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 ISPLtd |
Nov 8 12:46:40 102.205.236.28 TCP SPT=48322 DPT=22 SYN
Nov 8 12:47:53 102.205.236.28 TCP SPT=60380 DPT=22 SYN
...
|
Port Scan SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/22 (2 or more attempts)
|
Port Scan | |
| 🇸🇮 satelliteproxy |
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
|
Bad Web Bot | |
| 🇪🇸 el-brujo |
|
Hacking SQL Injection Web App Attack | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
|
DDoS Attack | |
| 🇺🇸 jakob |
Fail2Ban rule: apache-cgit (robots.txt violation)
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown