JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.215.15.119

102.215.15.119 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 43%: ?

43%

ISP	SPRINKVILLE NETWORKS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329167
Domain Name	sprinkvillenetworks.co.ke
Country	🇰🇪 Kenya
City	Nkubu, Meru County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.215.15.119

Whois 102.215.15.119

IP Abuse Reports for 102.215.15.119:

This IP address has been reported a total of 84 times from 60 distinct sources. 102.215.15.119 was first reported on February 21st 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-06-09 09:00:04 (4 weeks ago)	spam	Email Spam
🇫🇮 notelseit	2026-06-08 14:59:47 (1 month ago)	2026-06-08T16:57:58.507799+02:00 mail postfix/smtpd[783127]: NOQUEUE: reject: RCPT from unknown[102. ... show more 2026-06-08T16:57:58.507799+02:00 mail postfix/smtpd[783127]: NOQUEUE: reject: RCPT from unknown[102.215.15.119]: 450 4.7.25 Client host rejected: cannot find your hostname, [102.215.15.119]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[102.215.15.119]> 2026-06-08T16:57:58.678350+02:00 mail postfix/smtpd[783127]: lost connection after RCPT from unknown[102.215.15.119] 2026-06-08T16:59:46.709347+02:00 mail postfix/smtpd[783127]: NOQUEUE: reject: RCPT from unknown[102.215.15.119]: 450 4.7.25 Client host rejected: cannot find your hostname, [102.215.15.119]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[102.215.15.119]> ... show less	Brute-Force Email Spam
🇮🇩 hermawan	2026-06-08 13:41:21 (1 month ago)	[Mon Jun 08 20:41:18.954619 2026] [security2:error] [pid 1115718:tid 140661849224896] [client 102.21 ... show more [Mon Jun 08 20:41:18.954619 2026] [security2:error] [pid 1115718:tid 140661849224896] [client 102.215.15.119:41052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "aibGfpraOUysXCqW69drIAABmBc"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1115742] [ksBDKj5iMog] [aibGfpraOUysXCqW69drIAABmBc] keep_alive=[1] [2026-06-08 20:41:18.954623] [R:aibGfpra ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-06-07 12:52:07 (1 month ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇩🇪 ghostwarriors	2026-06-06 09:50:22 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 chrisw	2026-06-06 07:27:40 (1 month ago)	2026-06-06T08:23:58.576918l03.customhost.org.uk postfix/smtpd[30403]: NOQUEUE: reject: RCPT from unk ... show more 2026-06-06T08:23:58.576918l03.customhost.org.uk postfix/smtpd[30403]: NOQUEUE: reject: RCPT from unknown[102.215.15.119]: 554 5.7.1 Service unavailable; Client host [102.215.15.119] blocked using sbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.215.15.119; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[102.215.15.119]> 2026-06-06T08:25:06.680245l03.customhost.org.uk postfix/smtpd[30403]: NOQUEUE: reject: RCPT from unknown[102.215.15.119]: 554 5.7.1 Service unavailable; Client host [102.215.15.119] blocked using sbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.215.15.119; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[102.215.15.119]> 2026-06-06T08:25:44.801210l03.customhost.org.uk postfix/smtpd[30403]: NOQUEUE: reject: RCPT from unknown[102.215.15.119]: 554 5.7.1 Service unavailable; Client host [102.215.15.119] blocked using sbl.spamhaus.org; Listed by CSS, see https://che ... show less	Web Spam Brute-Force Exploited Host
🇳🇱 soverin	2026-06-05 15:05:02 (1 month ago)	spam	Email Spam
🇯🇵 VXG-NET	2026-06-04 06:30:02 (1 month ago)	port=56096, indicator_type=N/A	Port Scan Hacking
Anonymous	2026-06-03 03:29:19 (1 month ago)	102.215.15.119 - - [03/Jun/2026:03:29:17 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 166 ... show more 102.215.15.119 - - [03/Jun/2026:03:29:17 +0000] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 166 "-" "terrabot-owned-you" ... show less	Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2026-06-03 00:48:08 (1 month ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇮🇪 RoboSOC	2026-05-30 00:35:48 (1 month ago)	MVPower DVR Shell Unauthenticated Command Execution Vulnerability, PTR: PTR record not found	Hacking
🇯🇵 VXG-NET	2026-05-29 16:45:29 (1 month ago)	port=80, indicator_type=code-execution	Hacking
🇩🇪 dispaisyenterprises	2026-05-29 14:39:47 (1 month ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (31 bytes of payload); 59777 [1] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (31 bytes of payload); 59777 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇦 polycoda	2026-05-29 11:27:11 (1 month ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 xmission.com	2026-05-28 11:19:19 (1 month ago)	Blocked by UFW (TCP on 55756) Source port: 8147 TTL: 104 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 55756) Source port: 8147 TTL: 104 Packet length: 52 TOS: 0x08 This report (for 102.215.15.119) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.228.197

🇩🇪 167.94.145.22

🇺🇸 159.89.91.236

🇨🇳 114.239.221.29

🇭🇰 103.146.158.57

🇳🇱 45.148.10.157

🇳🇱 34.158.151.148

🇬🇧 31.187.72.41

🇭🇰 31.77.145.225

🇨🇳 27.18.84.172

🇮🇳 20.197.60.102

🇲🇱 217.64.97.85

🇸🇪 188.126.240.80

🇲🇽 148.216.28.11

🇧🇬 78.128.114.166

🇺🇸 50.91.112.51

🇯🇴 46.185.128.24

🇧🇷 45.187.64.235

🇵🇰 223.123.38.35

🇨🇳 211.143.87.58