JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.209.111.53

102.209.111.53 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 27%: ?

27%

ISP	Savanna Fibre Naguru
Usage Type	Fixed Line ISP
ASN	AS329415
Domain Name	savannafibre.com
Country	🇺🇬 Uganda
City	Kampala, Central Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.209.111.53

Whois 102.209.111.53

IP Abuse Reports for 102.209.111.53:

This IP address has been reported a total of 30 times from 17 distinct sources. 102.209.111.53 was first reported on August 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 jlouisbiz	2026-09-17 11:11:27 (2 days ago)	2026-09-17T11:11:07.845099+00:00 comm.rcdrun.com auth[918860]: pam_unix(dovecot:auth): authenticatio ... show more 2026-09-17T11:11:07.845099+00:00 comm.rcdrun.com auth[918860]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T11:11:16.533259+00:00 comm.rcdrun.com auth[918653]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T11:11:26.736609+00:00 comm.rcdrun.com auth[918860]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 ... show less	Brute-Force
🇳🇴 jlouisbiz	2026-09-17 10:06:24 (2 days ago)	2026-09-17T10:06:07.285256+00:00 comm.rcdrun.com auth[915706]: pam_unix(dovecot:auth): authenticatio ... show more 2026-09-17T10:06:07.285256+00:00 comm.rcdrun.com auth[915706]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T10:06:15.291469+00:00 comm.rcdrun.com auth[915706]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T10:06:23.702819+00:00 comm.rcdrun.com auth[915706]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 ... show less	Brute-Force
🇳🇴 jlouisbiz	2026-09-17 07:55:37 (2 days ago)	2026-09-17T07:55:15.102418+00:00 comm.rcdrun.com auth[909371]: pam_unix(dovecot:auth): authenticatio ... show more 2026-09-17T07:55:15.102418+00:00 comm.rcdrun.com auth[909371]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T07:55:26.018737+00:00 comm.rcdrun.com auth[909783]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 2026-09-17T07:55:35.987185+00:00 comm.rcdrun.com auth[909783]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=caesark rhost=102.209.111.53 ... show less	Brute-Force
🇺🇸 kosada.com	2026-09-07 08:00:55 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=30&topics%5B2%5D=32&topics%5B3%5D=34&topics%5B4%5D=52 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-04 04:12:36 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-31 17:08:43 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-08-28 10:06:45 (3 weeks ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 06:00:10 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-15 17:59:21 (1 month ago)	DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS2 ... show more DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS215599. This IP (AS329415) sent ~1244 packets (1.65 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-01 08:51:37 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 maxxsense	2026-04-09 00:09:46 (5 months ago)	102.209.111.53 (UG/Uganda/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
🇳🇱 Mangelot Hosting	2026-02-27 01:03:26 (6 months ago)	(modsecurity) srv103 ModSecurity 102.209.111.53 (UG/Uganda/-): 10 in the last 3600 secs; Ports: ; D ... show more (modsecurity) srv103 ModSecurity 102.209.111.53 (UG/Uganda/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 VMHeaven.io	2025-09-16 13:59:27 (1 year ago)	Blocked by UFW [23/tcp] Source port: 39967 TTL: 242 Packet length: 40	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2025-09-13 11:54:24 (1 year ago)	Port Scan Attack proto:TCP src:64469 dst:23	Port Scan
🇺🇸 xmission.com	2025-09-12 22:35:13 (1 year ago)	Blocked by UFW (TCP on 8080) Source port: 34369 TTL: 238 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 34369 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 102.209.111.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.92.114.66

🇦🇷 181.98.13.128

🇨🇳 106.40.184.131

🇰🇷 220.95.40.69

🇺🇸 162.216.149.149

🇭🇰 152.32.254.222

🇸🇦 151.254.78.111

🇻🇳 123.21.225.149

🇵🇰 103.134.236.106

🇮🇷 95.162.179.135

🇳🇱 94.154.46.247

🇩🇪 93.241.232.14

🇱🇹 91.244.197.105

🇧🇬 79.124.62.134

🇳🇱 77.83.39.94

🇺🇸 68.112.253.97

🇧🇷 24.152.25.156

🇷🇺 109.198.190.98

🇮🇱 79.177.135.201

🇺🇸 68.3.153.250