JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.93.107

102.213.93.107 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 36%: ?

36%

ISP	FLINK TECHNOLOGIES LTD
Usage Type	Fixed Line ISP
ASN	AS329183
Domain Name	flink.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.93.107

Whois 102.213.93.107

IP Abuse Reports for 102.213.93.107:

This IP address has been reported a total of 26 times from 16 distinct sources. 102.213.93.107 was first reported on July 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2026-07-13 14:28:55 (1 day ago)	Jul 13 16:28:12 canopus postfix/smtpd[474238]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 5 ... show more Jul 13 16:28:12 canopus postfix/smtpd[474238]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<brcR9cl> Jul 13 16:28:17 canopus postfix/smtpd[474238]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<d8El0rs7y> Jul 13 16:28:31 canopus postfix/smtpd[474238]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<sBcnA5SKjc> Jul 13 16:28:50 canopus postfix/smtpd[474238]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<harrisonduba7 ... show less	Brute-Force Exploited Host
🇩🇪 ghostwarriors	2026-07-12 12:50:35 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2026-07-03 20:23:38 (1 week ago)	Jul 3 22:23:23 canopus postfix/smtpd[425485]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 5 ... show more Jul 3 22:23:23 canopus postfix/smtpd[425485]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dJhcNTKlq> Jul 3 22:23:33 canopus postfix/smtpd[425485]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<UNw9v8> Jul 3 22:23:33 canopus postfix/smtpd[425485]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<E0hWfYQ> Jul 3 22:23:33 canopus postfix/smtpd[425485]: NOQUEUE: reject: RCPT from unknown[102.213.93.107]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<esenemiracle100@g ... show less	Brute-Force Exploited Host
🇺🇸 kosada.com	2026-06-29 10:15:51 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 claude CALVET	2026-06-27 19:06:21 (2 weeks ago)	gew-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-06-25 11:22:19 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 102.213.93.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.213.93.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 07:22:15.520294 2026] [security2:error] [pid 32169:tid 32169] [client 102.213.93.107:38970] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|btccasting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "btccasting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj0PZ0nguDAt1XkQWEVGFwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-05 15:23:04 (1 month ago)	(xmlrpc) Failed xmlrpc access from 102.213.93.107 (KE/Kenya/-): 5 in the last 3600 secs (0-122)	Hacking
🇮🇩 hermawan	2026-06-02 03:27:15 (1 month ago)	[Tue Jun 02 10:27:03.610826 2026] [security2:error] [pid 97222:tid 139858485614272] [client 102.213. ... show more [Tue Jun 02 10:27:03.610826 2026] [security2:error] [pid 97222:tid 139858485614272] [client 102.213.93.107:56870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "ah5Nh6Q55WvMRe1HRt4nzQABxQA"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[97223] [NGp34jxnqWA] [ah5Nh6Q55WvMRe1HRt4nzQABxQA] keep_alive=[1] [2026-06-02 10:27:03.610830] [R:ah5Nh6Q55WvMRe1HRt4nzQABxQA] UA:'Mozilla/5.0 (iP ... show less	Email Spam Hacking
🇫🇮 kumiko	2026-04-15 23:54:09 (2 months ago)	[2026-04-16 02:54:09] Probing for exploits [1 requests] "GET http://sifas-cards.<Domain name omitt ... show more [2026-04-16 02:54:09] Probing for exploits [1 requests] "GET http://sifas-cards.<Domain name omitted>/ HTTP/1.1" 301 show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-03-24 03:39:45 (3 months ago)	102.213.93.107 \| Port: 10283 \| DNS: 102.213.93.107 2026-03-24T11:39:44+08:00 Africa/Nairobi \| IPs re ... show more 102.213.93.107 \| Port: 10283 \| DNS: 102.213.93.107 2026-03-24T11:39:44+08:00 Africa/Nairobi \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /3d-jose-cuervo-tequila-bottle-cake/?7bb910223ea60=JPY&code=JPY \| Ref: https://xxxxxx/3d-jose-cuervo-tequila-bottle-cake/?216db4d1eacc760ec=USD&code=USD \| Country: KE/Kenya/+03:00 IP City: Nairobi Windows 9e12a67d6d8aacb9-NBO/Nairobi, Kenya 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇦 polycoda	2026-01-31 01:05:54 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇧🇪 sauron-le-noir	2026-01-13 07:39:37 (6 months ago)	scan port : 23 from Kenya at Tue Jan 13 08:43:47 2026	Port Scan
Anonymous	2026-01-11 08:52:35 (6 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇮🇹 VHosting	2025-11-30 20:08:48 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2025-11-21 21:12:01 (7 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.27.76.210

🇨🇳 157.0.0.10

🇱🇻 151.242.43.229

🇮🇩 103.188.177.46

🇺🇸 81.30.98.193

🇨🇳 61.184.128.210

🇭🇰 8.210.89.241

🇸🇬 2406:da18:a1e:c10e:7e94::b

🇸🇬 2406:da18:a1e:c10d:9a73::59

🇪🇬 197.60.234.53

🇺🇸 141.11.88.236

🇩🇪 64.89.163.81

🇨🇳 61.146.129.133

🇸🇳 41.214.10.178

🇳🇱 20.23.229.100

🇨🇳 8.134.99.36

🇧🇷 201.17.133.138

🇩🇪 92.209.209.235

🇺🇸 34.186.47.122

🇳🇱 195.178.110.228