102.206.97.28
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AGAPETECH ENTERPRISE SOLUTION LIMITED
- Usage Type
- Fixed Line ISP
- ASN
- AS329664
- Domain Name
- agapetech.co.ke
- Country
- 🇰🇪 Kenya
- City
- Nyahururu, Laikipia
Abuse Reports
Total reports
87 from
53 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| Anonymous |
2026-09-06T02:05:56.654434+00:00 Germany1 sshd-session[2078979]: Connection closed by 102.206.97.28 port 57768 [preauth]
2026-09-14T08:23:00.976985+00:00 Germany1 sshd-session[4135566]: Connection closed by 102.206.97.28 port 52808 [preauth]
...
|
Brute-Force SSH | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.97.28
|
Port Scan Brute-Force SSH | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇩🇪 xdee111 |
Unauthorized SSH connection attempt (cowrie) on home server, banned by fail2ban
|
Brute-Force SSH | |
| 🇫🇷 Zkillu |
DDoS flood attack against 82.152.54.114 (2026-09-10 18:56:59 -> 2026-09-10 19:11:59 UTC) targeting AS215599. This IP (AS329664) sent ~25592 packets (1.92 MB) during the attack window. Likely a compromised device (botnet).
|
DDoS Attack Exploited Host | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 kosada.com |
|
DDoS Attack Bad Web Bot | |
| 🇫🇷 gianluca.demartino75 |
2026-09-07T06:39:59.418512+02:00 vps-49934a4d endlessh[2951547]: 2026-09-07T04:39:59.418Z ACCEPT host=::ffff:102.206.97.28 port=40028 fd=4 n=1/4096
...
|
Brute-Force SSH | |
| 🇺🇸 wbsouza |
CrowdSec: infra/ssh22-probe — automated firewall drops on self-hosted IDS sensor
|
SSH Brute-Force | |
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
IP in Malicious Database
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/22 (4 or more attempts)
|
Port Scan | |
| 🇫🇷 Lat31320 |
gate - SSH brute force
...
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown