102.204.89.108

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
171 reports
95 reporters · latest 1 hour ago
ISP
VENNET SOLUTIONS LIMITED
Usage Type
Fixed Line ISP
ASN
AS329437
Domain Name
veenet.africa
Country
🇰🇪 Kenya
City
Nairobi, Nairobi County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
171 from 95 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 17 🇩🇪 Germany 16 🇫🇷 France 8
Most common categories Web App Attack 29 Brute-Force 27 Port Scan 17 Bad Web Bot 16 Hacking 16
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇲🇹 Malta
102.204.89.108 - - [15/Nov/2026:19:33:28 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
Anonymous
Malicious IP reputation (AbuseIPDB 100).
Hacking
🇲🇹 Malta
102.204.89.108 - - [14/Nov/2026:09:26:17 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇫🇷 ingroscart.it
(wordpress) Failed wordpress login from 102.204.89.108 (KE/Kenya/Nairobi County/Nairobi/-/[redacted])
Brute-Force
🇮🇹 LTM
WebServer - Attempts to exploit
Hacking Brute-Force Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇫🇷 masterguru
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇰🇿 ramiil
NALA pattern: (?i)^/(?:wp-admin(?:/|$)|wp-login\.php$|wp-config\.php(?:$|[./])|xmlrpc\.php$|wp-json(?:/|$)|wordpress(?:/|$)|wp(?:/|$))
Web App Attack
🇺🇸 justbible
Bad Web Bot
🇷🇺 basil s
Unauthorized access attempt: automated SSH credential brute-force probe on TCP/22; dropped and source blocked. Observed 2026-11-09 16:45:30 UTC; blocked for 24h.
Brute-Force SSH
🇺🇸 RAP
2026-11-07 08:17:05 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇩🇪 tvipper.com
probing for exposed files and admin pages: 1 attempt within 1 minute, seen by edge honeypot (reported by RemotePower)
Web App Attack
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.163.125.42
🇳🇱 170.168.173.171
🇩🇪 151.243.11.48
🇺🇸 68.51.221.140
🇮🇹 194.60.214.74
🇺🇸 172.71.23.59
🇺🇸 68.235.46.25
🇧🇷 45.88.13.74
🇵🇱 31.179.228.93
🇧🇷 205.210.31.223
🇨🇱 190.20.62.97
🇫🇷 109.208.23.94
🇺🇸 185.198.240.117
🇨🇳 180.153.236.150
🇧🇷 168.121.193.60
🇩🇪 167.94.146.63
🇩🇪 109.160.32.106
🇳🇬 102.88.137.80
🇱🇹 77.90.185.14
🇺🇸 67.207.81.134
feedback