JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.132.242.88

102.132.242.88 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 0%: ?

ISP	FTTH Cape Town
Usage Type	Fixed Line ISP
ASN	AS37680
Hostname(s)	nml4-cust.coolideas.co.za
Domain Name	cisp.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.132.242.88

Whois 102.132.242.88

IP Abuse Reports for 102.132.242.88:

This IP address has been reported a total of 62 times from 55 distinct sources. 102.132.242.88 was first reported on August 22nd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-08-24 20:08:24 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-24 00:08:24 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-08-23 22:43:49 (10 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.132.242.88 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.132.242.88 2025-08-23 05:58:12 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi \| cat -n"] show less	SSH
🇹🇷 rtbh.com.tr	2025-08-23 20:08:24 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 r	2025-08-23 00:04:49 (10 months ago)	Aug 23 00:04:48 panel sshd[4919]: Failed password for root from 102.132.242.88 port 59710 ssh2	Brute-Force SSH
🇳🇿 paradoxnetworks	2025-08-23 00:02:57 (10 months ago)	2025-08-23T00:02:44.679607+00:00 edge-zap-akl01.int.pdx.net.uk sshd[2840051]: error: maximum authent ... show more 2025-08-23T00:02:44.679607+00:00 edge-zap-akl01.int.pdx.net.uk sshd[2840051]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 37570 ssh2 [preauth] 2025-08-23T00:02:49.799591+00:00 edge-zap-akl01.int.pdx.net.uk sshd[2840077]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 38716 ssh2 [preauth] 2025-08-23T00:02:56.512762+00:00 edge-zap-akl01.int.pdx.net.uk sshd[2840100]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 39578 ssh2 [preauth] ... show less	Brute-Force SSH
🇳🇱 Brict IT	2025-08-22 23:59:20 (10 months ago)	2025-08-23T01:59:20.268605+02:00 sshd[2166167]: Connection from 102.132.242.88 port on port rdomain ... show more 2025-08-23T01:59:20.268605+02:00 sshd[2166167]: Connection from 102.132.242.88 port on port rdomain "" show less	Brute-Force SSH
🇺🇸 Rayulcifer	2025-08-22 23:58:24 (10 months ago)	2025-08-22T18:56:24.674270-05:00 ip-172-31-76-241 sshd[1959990]: error: maximum authentication attem ... show more 2025-08-22T18:56:24.674270-05:00 ip-172-31-76-241 sshd[1959990]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 38862 ssh2 [preauth] 2025-08-22T18:56:29.543746-05:00 ip-172-31-76-241 sshd[1960254]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 39554 ssh2 [preauth] 2025-08-22T18:56:32.596452-05:00 ip-172-31-76-241 sshd[1960619]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 40438 ssh2 [preauth] ... show less	Brute-Force SSH
🇩🇪 rh24	2025-08-22 23:35:49 (10 months ago)	(sshd) Failed SSH login from 102.132.242.88 (ZA/South Africa/nml4-cust.coolideas.co.za)	Brute-Force SSH
🇫🇷 antivirus_5846	2025-08-22 23:32:09 (10 months ago)	Aug 23 01:32:01 hestiacp-tunnel-ip sshd[1076864]: Failed password for root from 102.132.242.88 port ... show more Aug 23 01:32:01 hestiacp-tunnel-ip sshd[1076864]: Failed password for root from 102.132.242.88 port 55478 ssh2 Aug 23 01:32:03 hestiacp-tunnel-ip sshd[1076864]: Failed password for root from 102.132.242.88 port 55478 ssh2 Aug 23 01:32:04 hestiacp-tunnel-ip sshd[1076864]: error: maximum authentication attempts exceeded for root from 102.132.242.88 port 55478 ssh2 [preauth] Aug 23 01:32:06 hestiacp-tunnel-ip sshd[1076963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.132.242.88 user=root Aug 23 01:32:08 hestiacp-tunnel-ip sshd[1076963]: Failed password for root from 102.132.242.88 port 59068 ssh2 ... show less	Brute-Force SSH
🇺🇸 MPL	2025-08-22 23:03:45 (10 months ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 RAP	2025-08-22 22:52:37 (10 months ago)	2025-08-22 22:52:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇨🇳 ThreatBook.io	2025-08-22 22:49:14 (10 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.132.242.88	SSH
🇦🇹 urnilxfgbez	2025-08-22 22:45:00 (10 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇭 TOCE	2025-08-22 22:11:36 (10 months ago)	161 hits seen on 2025-08-23, ports 22 (SSH) on a honeypot from www.toce.ch	SSH

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.10

🇩🇪 213.209.159.142

🇺🇸 195.184.76.175

🇸🇪 193.235.141.178

🇮🇳 185.244.11.2

🇮🇩 163.7.3.26

🇨🇳 115.190.159.160

🇮🇳 106.205.45.37

🇨🇩 102.216.240.61

🇷🇴 92.118.39.50

🇩🇪 69.5.169.9

🇺🇸 64.62.197.178

🇺🇸 64.62.197.109

🇺🇸 50.217.40.11

🇷🇺 46.8.62.103

🇺🇸 20.168.120.208

🇺🇸 20.127.224.63

🇰🇬 217.29.30.135

🇨🇳 180.76.170.111

🇭🇰 172.253.4.21