JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.241.9

102.213.241.9 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 100%: ?

100%

ISP	Swift Broadband Limited
Usage Type	Fixed Line ISP
ASN	AS329174
Hostname(s)	croc.coloc.co.ke
Domain Name	swiftbroadband.co.ke
Country	🇰🇪 Kenya
City	Chuka, Tharaka - Nithi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.241.9

Whois 102.213.241.9

IP Abuse Reports for 102.213.241.9:

This IP address has been reported a total of 164 times from 32 distinct sources. 102.213.241.9 was first reported on April 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-05-21 03:51:00 (1 week ago)	Blocked for recurring port scan. Time: Thu May 21. 05:21:02 2026 +0200 IP: 102.213.241.9 (croc.col ... show more Blocked for recurring port scan. Time: Thu May 21. 05:21:02 2026 +0200 IP: 102.213.241.9 (croc.coloc.co.ke) Temporary blocks that triggered the permanent block: Wed May 20 22:35:43 2026 Port Scan detected from 102.213.241.9 (croc.coloc.co.ke). 11 hits in the last 185 seconds Thu May 21 01:28:19 2026 Port Scan detected from 102.213.241.9 (croc.coloc.co.ke). 11 hits in the last 176 seconds Thu May 21 02:39:23 2026 Port Scan detected from 102.213.241.9 (croc.coloc.co.ke). 11 hits in the last 222 seconds Thu May 21 04:19:18 2026 Port Scan detected from 102.213.241.9 (croc.coloc.co.ke). 11 hits in the last 191 seconds Thu May 21 05:21:01 2026 Port Scan detected from 102.213.241.9 (croc.coloc.co.ke). 11 hits in the last 286 seconds show less	Port Scan Brute-Force
🇩🇪 phil2k	2026-05-20 22:06:50 (2 weeks ago)	TCP portscan or auth bruteforce on ports: telnet : Firewall: Within 2026-05-20 03:21:24 - 2026-05-20 ... show more TCP portscan or auth bruteforce on ports: telnet : Firewall: Within 2026-05-20 03:21:24 - 2026-05-20 12:57:35 CEST(+0200) identified: unallowed access from 102.213.241.9/32 on port 23(telnet) (1 trial) Fail2ban: Within 2026-05-20 03:21:24 - 2026-05-20 12:57:36 CEST(+0200) banned: 10 times by fail2ban[firewall]; 10 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇩🇪 phil2k	2026-05-20 10:57:39 (2 weeks ago)	fail2ban:recidive:2026-05-20 06:20:47,153 fail2ban.actions [4176173]: NOTICE [firewall] Ban ... show more fail2ban:recidive:2026-05-20 06:20:47,153 fail2ban.actions [4176173]: NOTICE [firewall] Ban 102.213.241.9 2026-05-20 12:57:36,011 fail2ban.actions [4176173]: NOTICE [firewall] Ban 102.213.241.9 show less	DDoS Attack Port Scan Brute-Force
🇺🇸 RAP	2026-05-20 05:14:42 (2 weeks ago)	2026-05-20 05:14:42 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 phil2k	2026-05-20 04:20:49 (2 weeks ago)	fail2ban:firewall:2026-05-20T05:41:56.695263+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-05-20T05:41:56.695263+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=102.213.241.9 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=46905 PROTO=TCP SPT=15359 DPT=23 WINDOW=5847 RES=0x00 SYN URGP=0 2026-05-20T06:20:47.006365+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=102.213.241.9 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=46905 PROTO=TCP SPT=15359 DPT=23 WINDOW=5847 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-05-19 17:30:27 (2 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇲🇿 delsio	2026-05-19 12:05:15 (2 weeks ago)	AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=102.213.241.9; ... show more AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=102.213.241.9; destination=160.119.113.44; destination_port=23; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence alert_name alert=Live Flow Malicious Fingerprint dst=160.119.113.44 port=23 show less	Port Scan Hacking
🇺🇸 RAP	2026-05-19 00:55:30 (2 weeks ago)	2026-05-19 00:55:30 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇬🇧 [email protected]	2026-05-19 00:30:25 (2 weeks ago)	...	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-05-18 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-05-18 19:12:08 (2 weeks ago)	2026-05-18 19:12:08 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇬🇧 PeravixGroup	2026-05-18 17:12:24 (2 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 RAP	2026-05-18 16:07:07 (2 weeks ago)	2026-05-18 16:07:07 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-05-18 12:42:36 (2 weeks ago)	2026-05-18 12:42:36 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-05-18 09:58:15 (2 weeks ago)	2026-05-18 09:58:15 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 61 to 75 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.152

🇳🇱 176.65.148.58

🇮🇹 172.253.228.150

🇩🇪 172.69.150.146

🇲🇾 113.211.193.213

🇨🇳 111.17.199.57

🇺🇸 66.132.195.54

🇨🇳 58.52.70.49

🇳🇱 38.180.169.211

🇬🇧 23.161.169.113

🇯🇵 219.162.218.71

🇸🇬 152.32.218.244

🇬🇧 89.238.183.12

🇳🇱 5.255.123.222

🇩🇪 213.209.159.108

🇳🇱 212.30.37.109

🇳🇱 212.30.37.74

🇬🇧 35.176.11.152

🇨🇳 182.116.118.246

🇨🇳 153.0.87.136