AbuseIPDB » 102.129.255.213
102.129.255.213
This IP was reported 8 times. Confidence of
Abuse
is 45% : ?
ISP
Internet Utilities Africa (PTY) LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396356
Domain Name
hivelocity.net
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.129.255.213 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
102.129.255.213 was first reported on
October 14th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
conseilgouz
2026-10-14 22:55:10
(1 week ago)
loe-21 : Rogue PHP files=>/goods.php
Hacking
🇺🇸
Player Unknown
2026-10-14 22:52:41
(1 week ago)
102.129.255.213 - - [14/Oct/2026:15:52:17 -0700] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 ( ...
show more
102.129.255.213 - - [14/Oct/2026:15:52:17 -0700] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
102.129.255.213 - - [14/Oct/2026:15:52:19 -0700] "GET /admin.php HTTP/1.1" 404 47 "http://taneja.xyz/admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
102.129.255.213 - - [14/Oct/2026:15:52:24 -0700] "GET /1.php HTTP/1.1" 404 47 "http://taneja.xyz/1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
102.129.255.213 - - [14/Oct/2026:15:52:26 -0700] "GET /alfa.php HTTP/1.1" 404 47 "http://taneja.xyz/alfa.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
102.129.255.213 - - [14/Oct/2026:15:52:28 -0700] "GET /edit.php HTTP/1.1" 404 47 "http://taneja.xyz/edit.php" "Mozilla/5.0 (Windows
...
show less
Brute-Force
SSH
🇨🇭
Origon
2026-10-14 22:29:52
(1 week ago)
http-admin-interface-probing - IP: 102.129.255.213 - time="2026-10-15T00:29:51+02:00" level=info ms ...
show more
http-admin-interface-probing - IP: 102.129.255.213 - time="2026-10-15T00:29:51+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 102.129.255.213 (US/396356) : 4h ban on Ip 102.129.255.213" module=db
show less
Web App Attack
2026-10-14 22:02:19
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
consul.to
2026-10-14 21:30:54
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
dot.mg
2026-10-14 21:10:02
(1 week ago)
Scan of vulnerable files
Web App Attack
🇬🇷
setupgr
2026-10-14 21:00:52
(1 week ago)
(mod_security) mod_security (id:1000001) triggered by 102.129.255.213 (US/United States/New York/New ...
show more
(mod_security) mod_security (id:1000001) triggered by 102.129.255.213 (US/United States/New York/New York/-/[AS396356 Latitude.sh]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:00:51.050685 2026] [security2:error] [pid 1635986:tid 1636032] [client 102.129.255.213:29599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/1.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "102"] [id "1000001"] [msg "Bad file blocked: /1.php"] [severity "CRITICAL"] [tag "security"] [hostname "adoro.gr"] [uri "/1.php"] [unique_id "as_tg_sHPf6q4ybE5Y8MowAAAkE"]
show less
Port Scan
🇷🇴
iulianh
2026-10-14 19:52:45
(1 week ago)
80,443
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: