JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.153.85

102.129.153.85 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	FREEDOMTECH SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutil.io
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.153.85

Whois 102.129.153.85

IP Abuse Reports for 102.129.153.85:

This IP address has been reported a total of 32 times from 19 distinct sources. 102.129.153.85 was first reported on August 3rd 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-03-18 01:04:15 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 Origon	2026-02-23 22:03:58 (3 months ago)	recidive - IP: 102.129.153.85 - 2026-02-23 22:03:49,632 fail2ban.actions [245081]: NOTICE [plesk-wo ... show more recidive - IP: 102.129.153.85 - 2026-02-23 22:03:49,632 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 102.129.153.85 2026-02-23 22:33:53,898 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 102.129.153.85 2026-02-23 23:03:58,275 fail2ban.actions [245081]: NOTICE [plesk-wordpress] Ban 102.129.153.85 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 22:00:41 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.153.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.153.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 17:00:35.649820 2026] [security2:error] [pid 1261:tid 1261] [client 102.129.153.85:50663] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.iat.com.pa\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iat.com.pa"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZzOA9naT5JfUfgfZzYlHwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 21:30:43 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.153.85 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.153.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 16:30:39.176291 2026] [security2:error] [pid 20234:tid 20234] [client 102.129.153.85:35759] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|revision.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "revision.ws"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "aZzG_6LKt7i7doTihHN4YgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-23 19:39:52 (3 months ago)	Excessive request and web scraping	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-02-23 16:15:03 (3 months ago)	2.565 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇳🇿 Antinson	2026-02-23 15:31:54 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇮🇹 VHosting	2026-02-23 15:30:04 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇮🇹 VHosting	2026-02-18 23:10:11 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2025-12-27 01:03:02 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 etu brutus	2025-11-29 16:27:43 (6 months ago)	102.129.153.85 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇦🇺 oncord	2025-08-24 01:15:41 (9 months ago)	Form spam	Web Spam
Anonymous	2025-08-04 15:44:42 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-10 16:43:06 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 174 (COGENT-174) Protocol: HTTP/2 (GET method) UA: M ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 174 (COGENT-174) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇫🇷 ᴀʀᴛ	2025-07-10 13:59:34 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 174 (COGENT-174) Protocol: HTTP/2 (GET method) UA: M ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 174 (COGENT-174) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.74.50.114

🇳🇱 176.65.139.250

🇺🇸 152.32.183.27

🇨🇳 122.190.56.24

🇹🇳 41.227.155.119

🇧🇬 31.13.242.112

🇺🇸 167.71.187.135

🇳🇬 102.89.22.209

🇹🇷 78.189.194.18

🇺🇸 66.132.195.59

🇷🇴 2.57.121.112

🇷🇴 193.46.255.86

🇩🇪 140.82.32.10

🇲🇾 115.164.182.78

🇻🇳 103.153.254.96

🇩🇪 87.106.217.70

🇺🇸 47.251.253.42

🇹🇼 36.230.90.54

🇨🇳 27.24.141.112

🇸🇦 5.163.240.142