JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.129.82.91

102.129.82.91 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 23%: ?

23%

ISP	Net PNR grand public
Usage Type	Fixed Line ISP
ASN	AS37451
Domain Name	congotelecom.cg
Country	🇨🇬 Congo
City	Pointe-Noire, Pointe-Noire

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.129.82.91

Whois 102.129.82.91

IP Abuse Reports for 102.129.82.91:

This IP address has been reported a total of 31 times from 15 distinct sources. 102.129.82.91 was first reported on March 2nd 2022, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-13 08:19:27 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 102.129.82.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.129.82.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 04:19:21.558370 2026] [security2:error] [pid 26979:tid 26979] [client 102.129.82.91:5797] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.129.82.91 (+1 hits since last alert)\|rodzillacharters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodzillacharters.com"] [uri "/xmlrpc.php"] [unique_id "alSfiQMWOX75RVqLmYBErAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 10:41:53 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-06-19 00:03:08 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 TPI-Abuse	2026-04-05 20:40:14 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 102.129.82.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 102.129.82.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 16:40:08.075961 2026] [security2:error] [pid 18622:tid 18622] [client 102.129.82.91:5494] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rimworld.com\|F\|2"] [data ".marsasystems.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rimworld.com"] [uri "/ballslaunch/http:/www.marsasystems.com"] [unique_id "adLIqAjYeAzx0Hxq_-Wd_wAAABE"], referer: https://www.rimworld.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-03-26 07:23:09 (3 months ago)	102.129.82.91 \| Port: 10467 \| DNS: 102.129.82.91 2026-03-26T15:23:08+08:00 Africa/Brazzaville \| IPs ... show more 102.129.82.91 \| Port: 10467 \| DNS: 102.129.82.91 2026-03-26T15:23:08+08:00 Africa/Brazzaville \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /shop/birthday-cake-chooser/virgo/?3e7e33cb19631ee25876d14d=SGD&code=SGD \| Ref: https://xxxxxx/shop/birthday-cake-chooser/virgo/?ae7e42436c24246db4d1eacc760ec=KRW&code=KRW \| Country: CG/Congo the/+01:00 IP City: Pointe-Noire Windows 9e246879e82c77e0-LAD/Luanda, Angola 1 hits/0 secs Robots 4 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇦 polycoda	2026-03-22 12:08:32 (3 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇸🇬 mypatricks	2026-02-27 16:26:51 (4 months ago)	102.129.82.91 \| Port: 11012 \| DNS: 102.129.82.91 2026-02-28T00:26:50+08:00 Africa/Brazzaville \| Susp ... show more 102.129.82.91 \| Port: 11012 \| DNS: 102.129.82.91 2026-02-28T00:26:50+08:00 Africa/Brazzaville \| Suspicious Spoofing Activity \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0 HTTP/1.1 443 GET \| URL: /fondant-cakes-pink-chanel/?e2697bfbc26ba788e1acb5=enabled&f2a9a9dd3fb449df708fae44fa66d120=1772071186 \| Ref: - \| Country: CG/Congo the/+01:00 IP City: Pointe-Noire macOS 9d490bba8bdbaf5d-DUR/Durban, South Africa 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 kosada.com	2026-02-03 16:24:07 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-01-18 21:42:25 (5 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-01-17 07:56:36 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-24 19:54:29 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2025-11-21 01:13:04 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-20 17:48:10 (7 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇺🇸 135.237.125.118

🇫🇮 89.169.113.190

🇺🇸 66.132.224.24

🇧🇷 45.70.60.2

🇺🇸 200.10.46.160

🇪🇬 196.202.62.57

🇮🇶 185.239.18.30

🇳🇱 160.119.71.22

🇮🇳 160.25.1.134

🇳🇱 159.223.217.240

🇫🇷 149.202.42.118

🇰🇷 39.115.195.164

🇨🇳 39.64.110.20

🇺🇸 185.243.5.150

🇺🇸 152.32.205.193

🇩🇪 145.253.80.179

🇮🇳 124.253.121.194

🇨🇳 120.48.54.198

🇺🇸 91.230.168.249