JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.209.18.108

102.209.18.108 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 33%: ?

33%

ISP	VENNET SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS329437
Hostname(s)	static-109.veenet.africa
Domain Name	veenet.africa
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.209.18.108

Whois 102.209.18.108

IP Abuse Reports for 102.209.18.108:

This IP address has been reported a total of 18 times from 15 distinct sources. 102.209.18.108 was first reported on August 6th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇺 tdefise	2026-08-16 15:22:00 (6 days ago)	This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (6.84 requests/min over ... show more This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (6.84 requests/min over a 829-minute timeframe) show less	DDoS Attack
🇩🇪 Vegascosmetics	2026-08-14 06:48:13 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 filstal.org	2026-08-10 12:38:23 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/3.1) show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-06 13:58:16 (2 weeks ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~646,289/tag_ids~377,832,580,489,553,754,424,791,651/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 pltcldvlpr	2026-08-04 11:53:49 (2 weeks ago)	Bogus Useragent: 102.209.18.108 - - [04/Aug/2026:13:53:49 +0200] "GET /protocol?id=st_6_104&offset=1 ... show more Bogus Useragent: 102.209.18.108 - - [04/Aug/2026:13:53:49 +0200] "GET /protocol?id=st_6_104&offset=1050&seq=908 HTTP/1.1" 444 0 "-" "Opera/9.78.(Windows NT 10.0; mni-IN) Presto/2.9.172 Version/10.00" asn=329437 org="VENNET SOLUTIONS LIMITED" country=KE ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-28 14:25:13 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 21:45:38 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇯🇵 VXG-NET	2026-06-04 06:29:58 (2 months ago)	port=40950, indicator_type=N/A	Port Scan Hacking
Anonymous	2026-05-27 03:38:41 (2 months ago)	Attack Signature Blocked: /wishlist/index/add/product/9640/form_key/g3zlvDl7prPT7oRY/ \| UA: Opera/9. ... show more Attack Signature Blocked: /wishlist/index/add/product/9640/form_key/g3zlvDl7prPT7oRY/ \| UA: Opera/9.79.(Windows NT 11.0; ln-CD) Presto/2.9.176 Version/10.00 \| (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-798... show less	Web App Attack Bad Web Bot
🇲🇹 Malta	2026-05-05 03:52:23 (3 months ago)	102.209.18.108 - - [05/May/2026:05:52:22 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 102.209.18.108 - - [05/May/2026:05:52:22 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇮🇳 Parth Maniar	2026-05-04 14:52:51 (3 months ago)	This IP address carried out 4 port scanning attempts on 03-05-2026. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 03-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇵🇱 sefinek.net	2026-04-29 05:33:34 (3 months ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/ ... show more Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
Anonymous	2026-04-28 21:51:19 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-04-20 16:18:10 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇹 VHosting	2025-12-23 20:45:33 (7 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.119.68.211

🇺🇸 70.182.31.136

🇺🇸 20.65.216.44

🇫🇮 178.20.210.151

🇷🇺 91.234.180.107

🇭🇰 46.247.61.243

🇬🇧 35.203.210.30

🇸🇪 20.240.128.207

🇺🇸 20.65.69.59

🇬🇧 5.226.140.37

🇩🇪 3.69.234.213

🇰🇿 212.154.234.9

🇺🇸 205.210.31.42

🇧🇷 200.155.66.2

🇹🇼 198.235.24.48

🇲🇽 189.217.82.36

🇪🇨 157.100.141.90

🇺🇸 139.144.235.132

🇺🇦 91.206.32.34

🇺🇸 84.37.168.146