JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.252.227

102.129.252.227 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	FREEDOMTECH SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutil.io
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.252.227

Whois 102.129.252.227

IP Abuse Reports for 102.129.252.227:

This IP address has been reported a total of 34 times from 25 distinct sources. 102.129.252.227 was first reported on March 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-22 08:18:17 (1 month ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 int8	2026-03-20 14:27:20 (2 months ago)	2026-03-20T14:27:20.761536115Z Minecraft server scanner: status request	Port Scan
🇳🇱 FREAKISH	2026-03-20 14:25:55 (2 months ago)	2026-03-20 15:25:55: Minecraft server scan detected from 102.129.252.227 on port 25565 of 127.0.0.1	Port Scan
🇩🇪 zUnlegit	2026-03-20 14:25:43 (2 months ago)	2026-03-20 14:25:25: Minecraft server scan detected from 102.129.252.227 on port 25565 of mailserver	Port Scan
🇺🇸 cpxducky	2026-03-20 14:25:28 (2 months ago)	2026-03-20 14:25:28: Minecraft server scan detected from 102.129.252.227 on port 25565 of mail.cpxdu ... show more 2026-03-20 14:25:28: Minecraft server scan detected from 102.129.252.227 on port 25565 of mail.cpxducky.com show less	Port Scan
🇺🇸 LockBlock	2026-03-20 14:25:25 (2 months ago)	2026-03-20 14:25:25: Minecraft server scan detected from 102.129.252.227 on port 25565 of racknerd-e ... show more 2026-03-20 14:25:25: Minecraft server scan detected from 102.129.252.227 on port 25565 of racknerd-e7e1a9 show less	Port Scan
🇮🇹 VHosting	2026-02-18 22:50:38 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-01-30 05:00:08 (4 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇱🇻 garmtech.com	2026-01-11 09:05:05 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-05.102.129.252.227.web-spam ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-05.102.129.252.227.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-12-11 09:01:06 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-07 21:02:39 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 16:02:31.688507 2025] [security2:error] [pid 14811:tid 14811] [client 102.129.252.227:47806] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|autocares-belintxon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "autocares-belintxon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQ5eZ2RuRuAmZ8iQuj2erQAAAB8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2025-11-06 18:38:21 (7 months ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch US/United States/-	Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 20:40:24 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 15:40:17.704865 2025] [security2:error] [pid 30534:tid 30534] [client 102.129.252.227:38430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|enselme.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enselme.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQkTMXvMx_bP7k5IPq1SIwAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 19:15:23 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 14:15:15.707251 2025] [security2:error] [pid 24818:tid 24818] [client 102.129.252.227:40562] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|opennatura.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opennatura.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQj_QwzqAZXMlkmpHgpe0wAAABw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-11 04:30:26 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.232.15.250

🇵🇱 95.214.55.226

🇺🇸 64.92.167.4

🇳🇱 45.156.87.10

🇲🇽 201.149.53.243

🇸🇬 194.164.107.6

🇿🇦 160.19.132.238

🇭🇰 154.198.162.75

🇺🇸 147.185.132.203

🇺🇸 107.150.98.252

🇳🇱 91.92.40.46

🇨🇳 54.223.241.99

🇳🇱 45.148.10.151

🇨🇦 34.130.46.154

🇩🇪 212.132.120.41

🇺🇸 185.180.141.35

🇩🇪 168.222.43.84

🇺🇸 136.49.53.226

🇨🇳 118.250.1.95

🇺🇸 107.173.241.217