JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.252.45

102.129.252.45 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 15%: ?

15%

ISP	FREEDOMTECH SOLUTIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	netutil.io
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.252.45

Whois 102.129.252.45

IP Abuse Reports for 102.129.252.45:

This IP address has been reported a total of 27 times from 14 distinct sources. 102.129.252.45 was first reported on February 1st 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-05-28 15:27:19 (3 weeks ago)	Blocked by UFW (TCP on 27563) Source port: 1201 TTL: 55 Packet length: 64 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 27563) Source port: 1201 TTL: 55 Packet length: 64 TOS: 0x08 This report (for 102.129.252.45) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 inlink.ltd	2026-05-24 12:09:34 (3 weeks ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 tilellit.pro	2026-05-17 14:53:44 (1 month ago)	Fail2Ban banned 102.129.252.45 for security violations in jail wp-armour. Log: 2026/05/17 14:53:43 [ ... show more Fail2Ban banned 102.129.252.45 for security violations in jail wp-armour. Log: 2026/05/17 14:53:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 102.129.252.45 \| Target: wplogin" , client: 102.129.252.45, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇧🇪 cmbplf	2026-02-28 00:32:31 (3 months ago)	6 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/2002062 ... show more 6 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 show less	Brute-Force Bad Web Bot
Anonymous	2026-02-18 00:55:06 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-15 00:50:30 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-10 18:35:15 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-31 13:50:16 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-27 14:46:53 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-12-12 22:07:53 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-12-06 16:30:38 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇨🇦 Julio Covolato	2025-12-06 09:40:02 (6 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇺🇸 TPI-Abuse	2025-11-06 04:43:34 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 23:43:27.706364 2025] [security2:error] [pid 25138:tid 25138] [client 102.129.252.45:56168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|34thprs.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "34thprs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aQwnb8fNPKG2nZpL6jsMwwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-05 22:57:35 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 17:57:32.295458 2025] [security2:error] [pid 1730:tid 1730] [client 102.129.252.45:51434] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|brtc.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brtc.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aQvWXLOnzlV0tRnNtkRkjgAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-05 20:05:55 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.129.252.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 15:05:48.854752 2025] [security2:error] [pid 28181:tid 28181] [client 102.129.252.45:37130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|danproctor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danproctor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQuuHPVqZWb7VM3u_N1d5AAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.36

🇮🇳 106.219.89.108

🇳🇱 45.156.128.176

🇺🇸 192.241.141.178

🇺🇸 173.252.95.132

🇮🇳 103.117.14.206

🇬🇧 86.8.209.31

🇹🇼 34.81.72.185

🇧🇷 201.57.40.70

🇩🇪 194.88.98.103

🇺🇸 173.252.95.134

🇻🇳 165.101.46.30

🇵🇰 111.68.96.42

🇳🇱 5.61.209.224

🇮🇩 2404:c0:c202:e615:5116:4316:bb78:b1d8

🇮🇳 183.82.2.107

🇺🇸 173.252.95.146

🇭🇰 154.83.15.221

🇹🇼 125.230.232.122

🇨🇳 14.18.113.233