JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.222.6.113

102.222.6.113 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 31%: ?

31%

ISP	Zeplin Investments Ltd
Usage Type	Fixed Line ISP
ASN	AS328753
Domain Name	zeplininvestments.com
Country	🇰🇪 Kenya
City	Malindi, Kilifi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.222.6.113

Whois 102.222.6.113

IP Abuse Reports for 102.222.6.113:

This IP address has been reported a total of 45 times from 34 distinct sources. 102.222.6.113 was first reported on July 24th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-20 06:59:09 (3 days ago)	(mod_security) mod_security (id:217210) triggered by 102.222.6.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 102.222.6.113 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 02:59:04.797723 2026] [security2:error] [pid 4443:tid 4443] [client 102.222.6.113:42822] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|teenxxxmov.com\|F\|4"] [data "GET http://teenxxxmov.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "teenxxxmov.com"] [uri "/"] [unique_id "ajY6OGV_9kUwHFlT7Qk5jAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-13 16:43:05 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e	DDoS Attack
🇬🇧 PeravixGroup	2026-05-18 07:26:02 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-05-16 08:24:28 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 cybsecaoccol	2026-05-05 16:41:07 (1 month ago)	unauthorized connection or malicious port scan attempted on tcp port 23 - dr	Port Scan Hacking
🇩🇪 filstal.org	2026-04-30 11:53:55 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; rv:1.9.6.20) Gec ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; rv:1.9.6.20) Gecko/8196-10-07 21:56:48.080475 Firefox/3.6.14). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-04-27 08:25:14 (1 month ago)	requested honeypot page - ignored robots.txt - possible botnet ...	Bad Web Bot
🇬🇧 www.elivecd.org	2026-04-22 17:05:28 (2 months ago)	102.222.6.113 - - [22/Apr/2026:17:33:23 +0100] "GET /Main/Blog/?reflect_683_month=1&reflect_683_year ... show more 102.222.6.113 - - [22/Apr/2026:17:33:23 +0100] "GET /Main/Blog/?reflect_683_month=1&reflect_683_year=2011&reflect_683_day=false&reflect_683_start=0&reflect_119_year=2011&reflect_119_month=false&reflect_119_day=false&reflect_119_start=0 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36" ... show less	DDoS Attack
🇮🇩 hermawan	2026-04-17 12:33:58 (2 months ago)	04/17/2026-19:30:51.616788 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-search ... show more 04/17/2026-19:30:51.616788 [Drop] [] [1:9200020:0] Suricata match JA3 string Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 102.222.6.113:45316 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇳🇱 TCATERDSBE	2026-04-09 11:21:00 (2 months ago)	SQL Injection	SQL Injection
Anonymous	2026-04-01 06:53:10 (2 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Exploited Host Bad Web Bot
🇺🇸 kosada.com	2026-03-28 05:35:14 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-15 20:12:04 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 200.118.146.61

🇳🇱 176.65.139.43

🇨🇳 111.228.42.144

🇮🇳 92.4.76.12

🇳🇱 91.92.40.35

🇹🇷 78.135.111.203

🇺🇸 66.132.172.186

🇨🇦 54.39.203.182

🇮🇩 2406:da19:776:6e02:64df:30a9:4a27:ac2d

🇨🇳 223.88.8.12

🇬🇧 195.140.214.30

🇨🇳 183.47.59.10

🇨🇳 117.91.186.55

🇻🇳 103.118.28.15

🇳🇱 91.229.105.132

🇨🇳 60.188.58.133

🇲🇾 47.254.192.213

🇳🇱 45.142.193.164

🇸🇬 43.156.92.183

🇧🇪 35.205.143.232