JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.215.13.18

102.215.13.18 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 47%: ?

47%

ISP	SPRINKVILLE NETWORKS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329167
Domain Name	sprinkvillenetworks.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.215.13.18

Whois 102.215.13.18

IP Abuse Reports for 102.215.13.18:

This IP address has been reported a total of 62 times from 39 distinct sources. 102.215.13.18 was first reported on May 5th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-25 19:51:58 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-24 22:06:23 (4 days ago)	06/25/2026-05:06:19.612077 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-search ... show more 06/25/2026-05:06:19.612077 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 102.215.13.18:54372 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇺🇸 anon333	2026-06-22 07:33:05 (1 week ago)	Hacker syslog review 1782113585	Hacking
🇩🇪 filstal.org	2026-06-22 00:54:21 (1 week ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇦🇺 MAGIC	2026-06-12 02:20:20 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-01 11:42:38 (4 weeks ago)	Kingcopy(AI-IDS) Report: IP 102.215.13.18 wurde nach 3 Angriffsversuchen automatisch geblockt. Patte ... show more Kingcopy(AI-IDS) Report: IP 102.215.13.18 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇮🇩 hermawan	2026-05-28 03:27:31 (1 month ago)	[Thu May 28 10:27:26.002195 2026] [security2:error] [pid 320967:tid 139852289910464] [client 102.215 ... show more [Thu May 28 10:27:26.002195 2026] [security2:error] [pid 320967:tid 139852289910464] [client 102.215.13.18:41794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 16; Pixel 6 Build/BP2A.250605.031.A5; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /images/gempa/webp/20260528084856.mmi.jpg.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/gempa/webp/20260528084856.mmi.jpg.webp"] [unique_id "ahe2HZrEY8hV8xJa0L-ecAAAVwQ"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[320972] [bZyWTphC4fE] [ahe2HZrEY8hV8xJa0L-ecAAAVwQ] ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
Anonymous	2026-05-22 02:51:25 (1 month ago)	Attack Signature Blocked: /wishlist/index/add/product/9417/form_key/1azgfm3zOiHD7qnl/ (Magento Site) ... show more Attack Signature Blocked: /wishlist/index/add/product/9417/form_key/1azgfm3zOiHD7qnl/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
Anonymous	2026-05-21 20:47:14 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇭 backslash	2026-05-21 05:18:07 (1 month ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇮🇹 A000Z	2026-05-17 17:51:12 (1 month ago)	Fail2Ban: 102.215.13.18 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 102.215.13.18 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 trivox.sh	2026-05-14 14:36:45 (1 month ago)	2026-05-14T14:29:56.641117+00:00 ws1.trivox.sh sshd-session[1776658]: banner exchange: Connection fr ... show more 2026-05-14T14:29:56.641117+00:00 ws1.trivox.sh sshd-session[1776658]: banner exchange: Connection from 102.215.13.18 port 59683: invalid format 2026-05-14T14:32:05.696717+00:00 ws1.trivox.sh sshd-session[1780945]: banner exchange: Connection from 102.215.13.18 port 44079: invalid format 2026-05-14T14:33:39.593683+00:00 ws1.trivox.sh sshd-session[1784479]: banner exchange: Connection from 102.215.13.18 port 53154: invalid format 2026-05-14T14:34:26.923904+00:00 ws1.trivox.sh sshd-session[1786067]: banner exchange: Connection from 102.215.13.18 port 37601: invalid format ... show less	Brute-Force SSH
🇦🇺 MAGIC	2026-05-10 00:14:35 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇵 radheykrishna.com.np	2026-04-28 18:30:54 (2 months ago)	Apr 29 00:15:53 kernel: [890772.012637] [UFW BLOCK] IN=ens160 OUT= SRC=102.215.13.18 LEN=61 TOS=0x00 ... show more Apr 29 00:15:53 kernel: [890772.012637] [UFW BLOCK] IN=ens160 OUT= SRC=102.215.13.18 LEN=61 TOS=0x00 PREC=0x00 TTL=47 ID=22376 DF PROTO=UDP SPT=37486 DPT=33798 LEN=41 ... show less	Port Scan

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 148.105.12.110

🇺🇸 154.92.22.131

🇺🇿 144.124.192.120

🇨🇳 123.145.17.172

🇮🇳 103.86.176.224

🇮🇩 103.70.68.194

🇸🇬 51.79.128.217

🇱🇹 45.227.254.170

🇰🇷 211.186.115.35

🇷🇴 193.32.162.84

🇫🇷 172.69.223.126

🇺🇸 74.125.92.125

🇨🇭 62.169.136.4

🇸🇬 43.160.212.142

🇮🇳 20.204.23.206

🇩🇪 5.231.242.144

🇷🇴 2.57.121.25

🇧🇷 205.210.31.153

🇺🇸 195.184.76.161

🇳🇱 193.176.31.157