JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.129.145.164

Neutral Activity

Abuse Confidence Score

0% Low Risk

40 reports

28 reporters · latest 1 year ago

ISP: FREEDOMTECH SOLUTIONS LIMITED
Usage Type: Fixed Line ISP
ASN: AS174
Domain Name: netutil.io
Country: 🇺🇸 United States of America
City: Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

102.129.145.164 has been reported 40 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

40 from 28 distinct reporters

First reported

January 5th 2022

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 basing	2025-04-10 06:09:28 UTC · (1 year ago)	2025-04-10 07:09:28 pzb SASL PLAIN auth failed: rhost=102.129.145.164...	Brute-Force
🇩🇪 stinpriza	2025-03-30 23:35:51 UTC · (1 year ago)	(XMLRPC) xmlrpc banned 102.129.145.164 (US/United States/-): 1 in the last 3600 secs	Web App Attack
🇺🇸 CollinsCorner	2025-02-19 08:01:43 UTC · (1 year ago)	Caught scraping for vulnerable files and/or endpoints - =3	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2025-02-18 12:37:56 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 102.129.145.164 (US/United States/-): N in the last X secs	Web App Attack
🇺🇸 TPI-Abuse	2025-02-18 12:02:30 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 07:02:26.364441 2025] [security2:error] [pid 2318:tid 2318] [client 102.129.145.164:57573] ... show more (mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 07:02:26.364441 2025] [security2:error] [pid 2318:tid 2318] [client 102.129.145.164:57573] [client 102.129.145.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spacebooger.com"] [uri "/.env"] [unique_id "Z7R20qKA2Uvem7nJYHpGTQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-18 11:41:08 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 06:41:03.476390 2025] [security2:error] [pid 1758668:tid 1758668] [client 102.129.145.164: ... show more (mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 06:41:03.476390 2025] [security2:error] [pid 1758668:tid 1758668] [client 102.129.145.164:52351] [client 102.129.145.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitalitywebb.com"] [uri "/.env"] [unique_id "Z7Rxz0fre9zpgg_OA6GQFQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2025-02-18 11:05:55 UTC · (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-02-18 11:02:48 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 06:02:41.890755 2025] [security2:error] [pid 24898:tid 24898] [client 102.129.145.164:6366 ... show more (mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 06:02:41.890755 2025] [security2:error] [pid 24898:tid 24898] [client 102.129.145.164:63666] [client 102.129.145.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.konahawaii.com"] [uri "/.env"] [unique_id "Z7Ro0UXBaId6N2l-6JJK5wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2025-02-18 10:04:49 UTC · (1 year ago)	apache-alfa-111	Web App Attack
🇺🇸 Alvino	2025-02-18 09:54:08 UTC · (1 year ago)	Blocked due to high risk score of 87	Port Scan Hacking SQL Injection Web App Attack
🇫🇷 dynamix	2025-02-18 09:03:13 UTC · (1 year ago)	Multiple WAF Violations	Web App Attack
🇫🇷 ✨	2025-02-18 08:45:01 UTC · (1 year ago)	Domain : tripoli-spain.org Rule : env 2025-02-18 08:44:15 152.53.103.155 GET /.env - 443 - 172.70.206.28 HTTP/2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - tripoli-spain.org 301 0 0 168 397 350 - 102.129.145.1 ... show more Domain : tripoli-spain.org Rule : env 2025-02-18 08:44:15 152.53.103.155 GET /.env - 443 - 172.70.206.28 HTTP/2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - tripoli-spain.org 301 0 0 168 397 350 - 102.129.145.164 show less	Hacking SQL Injection
🇺🇸 TPI-Abuse	2025-02-18 08:28:21 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 03:28:12.921036 2025] [security2:error] [pid 28651:tid 28651] [client 102.129.145.164:6225 ... show more (mod_security) mod_security (id:210492) triggered by 102.129.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 03:28:12.921036 2025] [security2:error] [pid 28651:tid 28651] [client 102.129.145.164:62252] [client 102.129.145.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hxctechllc.com"] [uri "/.env"] [unique_id "Z7REnJcK8h0Jbpz3TmtTugAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2025-02-18 07:22:02 UTC · (1 year ago)	Scanning for exploits - /.env	Web App Attack
🇦🇺 MAGIC	2025-02-18 07:02:25 UTC · (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.78.46.81

🇸🇳 154.125.228.145

🇹🇭 110.77.170.34

🇳🇱 35.214.149.126

🇷🇴 2.57.121.112

🇰🇷 210.103.32.183

🇹🇹 161.0.155.64

🇨🇳 115.55.242.7

🇺🇸 107.22.96.169

🇺🇸 98.173.235.214

🇧🇬 79.124.59.78

🇳🇱 35.214.191.144

🇺🇸 20.42.81.166

🇨🇳 175.153.221.109

🇮🇳 117.247.23.131

🇮🇪 109.78.120.207

🇨🇭 107.189.1.154

🇳🇱 34.178.109.235

🇳🇱 195.178.110.148

🇺🇸 95.155.139.169