This IP address has been reported a total of
91
times from
49 distinct
sources.
102.213.49.22 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 22)
Source port: 60234
TTL: 46
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 60234
TTL: 46
Packet length: 60
TOS: 0x00
This report (for 102.213.49.22) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
UDP flood (DDoS) vs AS215599: 20 pkts / 0.03 MB to UDP 80 across 18 dst IP(s), 2026-08-19 21:46 to 2 ...
show moreUDP flood (DDoS) vs AS215599: 20 pkts / 0.03 MB to UDP 80 across 18 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 20 pkts / 0.03 MB to UDP 80 across 18 dst IP(s), 2026-08-19 21:46 to 2 ...
show moreUDP flood (DDoS) vs AS215599: 20 pkts / 0.03 MB to UDP 80 across 18 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (6.96 requests/min over ...
show moreThis IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (6.96 requests/min over a 829-minute timeframe)
show less
DDoS Attack
Anonymous
denied traffic to a honeypot network. destination port 23.
NOQUEUE - IP: 102.213.49.22 - Aug 2 09:00:34 plesk postfix/smtpd[4074612]: NOQUEUE: reject: RCPT fr ...
show moreNOQUEUE - IP: 102.213.49.22 - Aug 2 09:00:34 plesk postfix/smtpd[4074612]: NOQUEUE: reject: RCPT from unknown[102.213.49.22]: 554 5.7.1 Service unavailable; Client host [102.213.49.22] blocked using dnsbl-2.uceprotect.net; Net 102.213.48.0/22 is UCEPROTECT-Level2 listed because 35 impacts are seen from VIJIJI-CONNECT-LIMITED, KE/AS328856 there. See: http://www.uceprotect.net/rblcheck.php?ipr=102.213.49.22; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[102.213.49.16]>
show less
Email Spam
Anonymous
denied traffic to a honeypot network. destination port 41647.