AbuseIPDB » 102.209.109.249
102.209.109.249
This IP was reported 8 times. Confidence of
Abuse
is 18% : ?
ISP
Hosting Operations
Usage Type
Fixed Line ISP
ASN
AS329415
Domain Name
savannafibre.co.ug
Country
🇺🇬
Uganda
City
Kampala, Central Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.209.109.249 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
102.209.109.249 was first reported on
September 19th 2025 , and the most recent report was
8 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-24 15:44:46
(8 hours ago)
denied traffic to a non-approved destination port. destination port 51896.
Port Scan
🇺🇸
kosada.com
2026-07-08 20:19:37
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
SMARTNET
2026-05-27 06:03:53
(1 month ago)
Aisuru(Mirai variant) DDoS | Incident ID: 4acf41a8-b801-4675-a9cd-4cf95dcec3e7
DDoS Attack
🇫🇷
SpaceHost-Server
2026-05-24 22:25:15
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 11:12:43
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 102.209.109.249 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.209.109.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 07:12:36.489087 2026] [security2:error] [pid 15996:tid 15996] [client 102.209.109.249:42822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.209.109.249 (+1 hits since last alert)|eye7graphics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eye7graphics.com"] [uri "/xmlrpc.php"] [unique_id "ahLdJJbKj6YB_FfWgMCGGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-24 11:11:13
(2 months ago)
Attac
Brute-Force
🇮🇹
VHosting
2025-12-23 18:55:31
(7 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇮🇩
hermawan
2025-09-19 16:48:44
(10 months ago)
[Fri Sep 19 23:48:13.165367 2025] [security2:error] [pid 706439:tid 140408024606400] [client 102.209 ...
show more
[Fri Sep 19 23:48:13.165367 2025] [security2:error] [pid 706439:tid 140408024606400] [client 102.209.109.249:28250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Baidu" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Baidu found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 7.1.1; OPPO R9sk Build/NMF26F; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3069.144 Mobile Safari/537.36 T7/9.1 baidubrowser/7.19.13.0 (Baidu; P1 7.1.1) request_line = GET /index.php/skala-mmi-modified-mercalli-intensity HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/skala-mmi-modified-mercalli-intensity"] [unique_id "aM2JTZAoQ5HFo0UshKPzaAAAA4I"] [staklim-malang.info] [staklim-malang.info] top=[706468] [yW4VPGpqepc] [aM2JTZAoQ5HFo0UshKPzaAAAA4I] keep_alive=[0] [202
...
show less
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: