JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.209.76.172

102.209.76.172 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 64%: ?

64%

ISP	SAFHOME FIBRE LIMITED
Usage Type	Fixed Line ISP
ASN	AS329422
Domain Name	safhomefibre.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.209.76.172

Whois 102.209.76.172

IP Abuse Reports for 102.209.76.172:

This IP address has been reported a total of 25 times from 18 distinct sources. 102.209.76.172 was first reported on June 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-08-16 19:12:06 (1 day ago)	102.209.76.172 - - [15/Aug/2026:05:53:33 +0200] "GET /lka/Record/c0281672+2.1829/Similar?lng=cy&prin ... show more 102.209.76.172 - - [15/Aug/2026:05:53:33 +0200] "GET /lka/Record/c0281672+2.1829/Similar?lng=cy&print=1 HTTP/1.1" 500 25037 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/312.8 (KHTML, like Gecko) Safari/312.3.3" ... show less	Bad Web Bot
🇮🇩 sockominfo	2026-08-11 09:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 102.209.76.172. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 102.209.76.172. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-11 08:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 102.209.76.172. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 102.209.76.172. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-10 16:53:26 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇵🇱 bmino.pl	2026-08-09 12:44:13 (1 week ago)	Autoban IP(2): 102.209.76.172 - Hostname: Safhome Fibre Limited - City: Nairobi - Region: Nairobi Co ... show more Autoban IP(2): 102.209.76.172 - Hostname: Safhome Fibre Limited - City: Nairobi - Region: Nairobi County - Country: Kenya - Location: - Organization: SAFHOME-SP - failed attempts. show less	Web App Attack
🇵🇱 bmino.pl	2026-08-07 16:48:55 (1 week ago)	Autoban IP(2): 102.209.76.172 - Hostname: Safhome Fibre Limited - City: Nairobi - Region: Nairobi Co ... show more Autoban IP(2): 102.209.76.172 - Hostname: Safhome Fibre Limited - City: Nairobi - Region: Nairobi County - Country: Kenya - Location: - Organization: SAFHOME-SP - failed attempts. show less	Web App Attack
🇺🇸 RAP	2026-08-07 14:15:22 (1 week ago)	2026-08-07 14:15:22 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-08-05 18:45:03 (1 week ago)	tcp/23	Port Scan
🇺🇸 LARL-Stompro-2024	2026-08-03 11:10:39 (2 weeks ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇩🇪 centurion	2026-08-01 15:11:21 (2 weeks ago)	Blocked by UFW on ns02 [23/tcp] Source port: 54208 TTL: 52 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [23/tcp] Source port: 54208 TTL: 52 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 kosada.com	2026-07-31 06:14:47 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-07-30 17:10:36 (2 weeks ago)	Blocked by UFW (TCP on 23) Source port: 58328 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 58328 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 102.209.76.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 HamSammich	2026-07-30 08:39:25 (2 weeks ago)	Automated sensor: 2 telnet connection/probe attempts over the last 24h (latest 2026-07-30T08:39Z).	Brute-Force IoT Targeted
🇺🇸 xmission.com	2026-07-29 08:28:37 (2 weeks ago)	Blocked by UFW (TCP on 23) Source port: 48152 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 48152 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 102.209.76.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 COMPLEX	2026-07-29 08:17:20 (2 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.191

🇸🇬 165.232.164.223

🇺🇸 152.32.206.49

🇫🇮 147.185.133.221

🇫🇷 104.23.229.56

🇸🇪 83.233.97.33

🇮🇳 223.182.99.153

🇦🇷 209.61.7.229

🇦🇷 190.9.70.86

🇫🇷 176.169.15.103

🇺🇸 162.216.150.207

🇨🇳 112.94.252.182

🇺🇸 107.175.183.32

🇫🇷 91.231.89.154

🇺🇸 76.192.119.243

🇱🇹 62.60.130.253

🇧🇾 46.53.193.236

🇺🇸 45.92.229.62

🇮🇩 36.71.176.137

🇧🇷 187.6.140.111