JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.209.57.109

102.209.57.109 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 75%: ?

75%

ISP	VGG Connect LTD
Usage Type	Fixed Line ISP
ASN	AS328856
Domain Name	vggconnect.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.209.57.109

Whois 102.209.57.109

IP Abuse Reports for 102.209.57.109:

This IP address has been reported a total of 44 times from 30 distinct sources. 102.209.57.109 was first reported on October 29th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-06-10 07:28:48 (1 day ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇸🇬 mypatricks	2026-06-09 19:59:05 (1 day ago)	102.209.57.109 \| Port: 10728 \| DNS: 102.209.57.109 2026-06-10T03:59:04+08:00 Africa/Nairobi \| IPs re ... show more 102.209.57.109 \| Port: 10728 \| DNS: 102.209.57.109 2026-06-10T03:59:04+08:00 Africa/Nairobi \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /ms?ffcad9e9ec8d8ee=273 \| Ref: https://xxxxxx \| Country: KE/Kenya/+03:00 IP City: Nairobi Windows a092b6efbb9573cd-JNB/Johannesburg, South Africa 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks	2026-06-08 11:26:27 (3 days ago)	102.209.57.109 \| Port: 11697 \| DNS: 102.209.57.109 2026-06-08T19:26:26+08:00 Africa/Nairobi \| IPs re ... show more 102.209.57.109 \| Port: 11697 \| DNS: 102.209.57.109 2026-06-08T19:26:26+08:00 Africa/Nairobi \| IPs res erved list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /%e5%af%92%e5%bf%83/?cab9d9a22aac2 \| Ref: - \| Country: KE/Kenya/+03:00 IP City: Nairobi macOS a0878aa63e24348f-FRA/Frankfurt, Germany 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 nodepile	2026-06-08 08:22:10 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇪🇸 librebit	2026-06-08 05:00:32 (3 days ago)	Brute force	Brute-Force
🇩🇪 Vegascosmetics	2026-06-07 04:37:44 (4 days ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇩🇪 ghostwarriors	2026-06-06 14:50:17 (5 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-06-03 11:52:34 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇯🇵 huihui	2026-06-03 11:15:03 (1 week ago)	2026-06-03T15:47:59.462530+08:00 [Host] sshd[139318]: banner exchange: Connection from 102.209.57.10 ... show more 2026-06-03T15:47:59.462530+08:00 [Host] sshd[139318]: banner exchange: Connection from 102.209.57.109 port 55098: invalid format 2026-06-03T15:49:43.920135+08:00 [Host] sshd[139654]: error: kex_exchange_identification: client sent invalid protocol identifier "\365\354\367\202\265\331\252\364\273\314\237B\216\356\330\306\3514\034\002)\376Ca\355\3465\265\303\311\fv\245a\303" 2026-06-03T15:49:43.920209+08:00 [Host] sshd[139654]: banner exchange: Connection from 102.209.57.109 port 39756: invalid format ... show less	Brute-Force SSH
🇨🇭 ALPHANET	2026-05-28 18:25:03 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇮🇹 A000Z	2026-05-17 17:24:04 (3 weeks ago)	Fail2Ban: 102.209.57.109 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 102.209.57.109 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 RAP	2026-05-13 19:55:36 (4 weeks ago)	2026-05-13 19:55:36 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 xmission.com	2026-05-13 16:42:14 (4 weeks ago)	Blocked by UFW (TCP on 23) Source port: 24634 TTL: 47 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 24634 TTL: 47 Packet length: 40 TOS: 0x00 This report (for 102.209.57.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇮 6kilowatti	2026-05-08 04:01:57 (1 month ago)	2026-05-08T07:01:57.240170+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-05-08T07:01:57.240170+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=102.209.57.109 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=18409 DF PROTO=TCP SPT=58064 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 51.68.34.131

🇸🇬 47.84.193.254

🇪🇸 213.165.74.84

🇪🇹 196.190.41.137

🇬🇧 193.163.125.208

🇸🇬 138.199.60.11

🇫🇮 80.66.83.91

🇺🇸 52.165.80.115

🇺🇸 47.88.56.38

🇨🇱 34.176.236.135

🇸🇬 34.21.216.142

🇰🇷 20.214.111.181

🇺🇿 213.230.88.107

🇧🇷 201.17.133.138

🇦🇱 185.175.254.11

🇨🇳 175.170.144.18

🇵🇰 153.117.32.95

🇧🇷 129.121.54.208

🇷🇺 85.95.166.40

🇲🇾 47.250.58.33