JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.209.76.146

102.209.76.146 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 44%: ?

44%

ISP	SAFHOME FIBRE LIMITED
Usage Type	Fixed Line ISP
ASN	AS329422
Domain Name	safhomefibre.com
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.209.76.146

Whois 102.209.76.146

IP Abuse Reports for 102.209.76.146:

This IP address has been reported a total of 164 times from 53 distinct sources. 102.209.76.146 was first reported on June 10th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-26 12:20:30 (6 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 01:38:42 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 22:17:12 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 15:05:29 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 garrymenata	2026-08-24 02:24:32 (1 week ago)	102.209.76.146 - - [24/Aug/2026:02:46:03 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 102.209.76.146 - - [24/Aug/2026:02:46:03 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.209.76.146 - - [24/Aug/2026:02:46:05 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.209.76.146 - - [24/Aug/2026:02:46:07 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-22 15:28:53 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 21:48:08 (1 week ago)	UDP flood (DDoS) vs AS215599: 29165 pkts / 41.71 MB to UDP 80/8443 across 459 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 29165 pkts / 41.71 MB to UDP 80/8443 across 459 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:48:08 (1 week ago)	UDP flood (DDoS) vs AS215599: 29165 pkts / 41.71 MB to UDP 80/8443 across 459 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 29165 pkts / 41.71 MB to UDP 80/8443 across 459 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-12 09:07:01 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-07 06:59:45 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 rh24	2026-08-05 21:57:40 (3 weeks ago)	102.209.76.146 (KE/Kenya/-), 25 distributed imapd attacks on account [redacted]	Brute-Force
🇺🇸 LockBlock	2026-08-05 19:26:11 (3 weeks ago)	2026-08-05 19:26:11: Port scan detected from 102.209.76.146 on port 22 of racknerd-e7e1a9	Port Scan SSH
🇺🇸 COMPLEX	2026-07-29 08:10:27 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇺🇸 kosada.com	2026-07-29 01:18:27 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 librebit	2026-07-26 18:12:05 (1 month ago)	Brute force	Brute-Force

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 193.37.32.42

🇨🇴 190.61.61.86

🇧🇪 91.86.88.73

🇫🇷 90.3.147.155

🇰🇿 89.218.51.222

🇨🇳 39.104.78.118

🇺🇸 34.168.92.100

🇨🇭 34.65.195.181

🇮🇩 34.50.80.37

🇺🇸 20.150.193.68

🇻🇳 14.225.59.80

🇷🇴 193.46.255.86

🇦🇷 186.39.103.130

🇰🇷 106.245.226.202

🇵🇭 103.107.159.75

🇮🇳 103.62.238.130

🇩🇪 88.214.25.123

🇱🇻 62.60.130.242

🇮🇱 46.210.95.5

🇮🇳 45.127.111.62