JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.216.2

102.213.216.2 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 78%: ?

78%

ISP	CELCOM NETWORKS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329198
Domain Name	celcom.co.ke
Country	🇰🇪 Kenya
City	Garissa, Garissa County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.216.2

Whois 102.213.216.2

IP Abuse Reports for 102.213.216.2:

This IP address has been reported a total of 101 times from 63 distinct sources. 102.213.216.2 was first reported on December 16th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 noconex	2026-09-18 16:28:15 (1 hour ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.21 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.216.2 show less	Port Scan Brute-Force SSH
🇺🇸 OceanTreasure	2026-09-17 10:30:03 (1 day ago)	tcp/22; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026 ... show more tcp/22; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-17T10:27:05Z show less	Port Scan
🇦🇺 Telemetry2U.com	2026-09-13 08:17:45 (5 days ago)	Unauthorized connection attempt to port 22 detected	SSH
🇺🇸 SX Communications	2026-09-09 07:45:58 (1 week ago)	HTTP application-layer DoS / botnet traffic from 102.213.216.2: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 102.213.216.2: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-09-07 00:33:55 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A308&f%5B1%5D=digest_key_terms%3A309&f%5B2%5D=digest_key_terms%3A494&f%5B3%5D=digest_key_terms%3A759&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B321%5D=321 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇧🇷 noconex	2026-09-04 13:58:03 (2 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.21 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.216.2 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-04 10:32:01 (2 weeks ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇺🇸 gui-ying233	2026-09-03 18:42:10 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 16:53:16 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 12:12:33 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 10:58:17 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 07:51:36 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇧🇷 noconex	2026-08-28 13:59:11 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.21 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.213.216.2 show less	Port Scan Brute-Force SSH
🇺🇸 Al Coholic	2026-08-28 08:40:55 (3 weeks ago)	Automated report (2026-08-28T20:40:55+12:00). Scraper detected.	Bad Web Bot
🇺🇸 NetVexor	2026-08-27 10:57:24 (3 weeks ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.107.189

🇺🇸 147.185.132.72

🇨🇳 111.6.188.169

🇧🇬 109.160.32.38

🇸🇬 103.250.10.63

🇺🇸 64.62.197.37

🇳🇱 45.148.10.152

🇧🇪 35.233.44.102

🇧🇪 34.156.121.46

🇺🇸 208.98.38.234

🇵🇦 201.218.119.26

🇧🇷 201.79.53.94

🇩🇪 134.209.232.252

🇨🇳 113.44.98.49

🇻🇳 103.90.226.200

🇰🇪 102.215.79.185

🇸🇬 47.79.200.21

🇰🇿 2.135.159.197

🇲🇾 183.171.41.126

🇺🇸 170.106.153.232