JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.252.36

102.129.252.36 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 8%: ?

ISP	FREEDOMTECH SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutil.io
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.252.36

Whois 102.129.252.36

IP Abuse Reports for 102.129.252.36:

This IP address has been reported a total of 19 times from 12 distinct sources. 102.129.252.36 was first reported on February 1st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-05-23 00:48:26 (1 month ago)	Fail2Ban banned 102.129.252.36 for security violations in jail wp-armour. Log: 2026/05/23 00:48:26 [ ... show more Fail2Ban banned 102.129.252.36 for security violations in jail wp-armour. Log: 2026/05/23 00:48:26 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 102.129.252.36 \| Target: wplogin" , client: 102.129.252.36, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Web Spam
🇫🇷 basing	2026-05-14 17:27:29 (1 month ago)	2026-05-14 18:27:29 idz SASL PLAIN auth failed: rhost=102.129.252.36...	Brute-Force
🇺🇸 TPI-Abuse	2025-11-11 00:40:13 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 19:40:09.432098 2025] [security2:error] [pid 16911:tid 16911] [client 102.129.252.36:56500] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dietzengineers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dietzengineers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRKF6ZyzWMHRfeRqodqoswAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-13 01:15:15 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-05-06 04:40:10 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-05-03 04:35:12 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇦 Julio Covolato	2025-05-02 10:40:03 (1 year ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇧🇷 SvrAdmin	2025-04-02 03:58:37 (1 year ago)	[101] (smtpauth) Failed SMTP AUTH login from 102.129.252.36 (US/United States/-): 5 in the last 3600 ... show more [101] (smtpauth) Failed SMTP AUTH login from 102.129.252.36 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-04-02 00:56:10 dovecot_login authenticator failed for (ADMIN) [102.129.252.36]:53160: 535 Incorrect authentication data ([email protected]) 2025-04-02 00:56:17 dovecot_login authenticator failed for (ADMIN) [102.129.252.36]:53170: 535 Incorrect authentication data ([email protected]) 2025-04-02 00:57:11 dovecot_login authenticator failed for (ADMIN) [102.129.252.36]:57208: 535 Incorrect authentication data ([email protected]) 2025-04-02 00:57:36 dovecot_login authenticator failed for (ADMIN) [102.129.252.36]:41650: 535 Incorrect authentication data ([email protected]) 2025-04-02 00:58:35 dovecot_login authenticator failed for (ADMIN) [102.129.252.36]:54776: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇨🇿 lp	2025-03-15 04:20:22 (1 year ago)	Email account brute force: 2 attempts were recorded from 102.129.252.36 2025-03-15T05:02:10+01:00 wa ... show more Email account brute force: 2 attempts were recorded from 102.129.252.36 2025-03-15T05:02:10+01:00 warning: unknown[102.129.252.36]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-03-15T05:02:18+01:00 warning: unknown[102.129.252.36]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇬🇧 stom	2025-03-15 04:03:45 (1 year ago)	2025-03-15T04:03:41.306445ls2.tom2.co.uk postfix/smtpd[6014]: warning: unknown[102.129.252.36]: SASL ... show more 2025-03-15T04:03:41.306445ls2.tom2.co.uk postfix/smtpd[6014]: warning: unknown[102.129.252.36]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam Brute-Force
Anonymous	2024-11-23 00:05:09 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2024-11-20 00:01:17 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 ghostwarriors	2024-09-28 06:50:21 (1 year ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2024-09-28 06:49:07 (1 year ago)	2024/09/28 08:49:06 [error] 81485#100813: 99639 access forbidden by rule, client: 102.129.252.36, s ... show more 2024/09/28 08:49:06 [error] 81485#100813: 99639 access forbidden by rule, client: 102.129.252.36, server: git.ksol.io, request: "GET / HTTP/1.1", host: "git.ksol.io", referrer: "https://git.ksol.io" ... show less	Web Spam
🇺🇸 ChamberofCommerce.com	2024-09-25 07:40:06 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227 show less	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 85.239.151.34

🇸🇬 134.209.100.39

🇷🇴 80.94.92.109

🇧🇬 79.124.56.250

🇫🇮 74.125.114.144

🇩🇪 47.254.172.242

🇺🇸 34.162.105.226

🇷🇺 90.189.112.147

🇮🇷 85.9.111.160

🇭🇰 45.142.154.109

🇯🇵 43.153.185.56

🇺🇸 212.32.49.148

🇳🇱 195.178.110.30

🇧🇪 193.104.37.200

🇮🇩 110.35.80.116

🇷🇴 80.94.92.234

🇺🇦 62.182.80.44

🇺🇸 20.169.106.110

🇧🇷 138.255.31.123

🇨🇳 120.48.141.101