JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.164.30.168

102.164.30.168 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 13%: ?

13%

ISP	Capricom Networks
Usage Type	Fixed Line ISP
ASN	AS328341
Hostname(s)	customer.capricom.net
Domain Name	capricom.co.za
Country	🇿🇦 South Africa
City	Polokwane, Limpopo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.164.30.168

Whois 102.164.30.168

IP Abuse Reports for 102.164.30.168:

This IP address has been reported a total of 37 times from 25 distinct sources. 102.164.30.168 was first reported on April 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-08-23 08:34:02 (1 day ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇵🇱 Kolobrzeg	2026-08-18 09:58:28 (6 days ago)	MikroTik RouterOS brute-force: 3 failed login attempts (service). Last seen 2026-08-18 09:58 UTC, fi ... show more MikroTik RouterOS brute-force: 3 failed login attempts (service). Last seen 2026-08-18 09:58 UTC, first seen 2026-06-12 UTC. Automated detection. AS328341 Capricom Networks. show less	Brute-Force Port Scan
🇬🇧 PeravixGroup	2026-05-20 20:47:58 (3 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-18 23:17:34 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/102.164.30.168 2026-05 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/102.164.30.168 2026-05-18 23:44:47 / show less	Web App Attack
🇨🇿 lp	2026-02-20 22:23:24 (6 months ago)	SSH Brute force: 1 attempts were recorded from 102.164.30.168 2026-02-20T22:53:28+01:00 Disconnected ... show more SSH Brute force: 1 attempts were recorded from 102.164.30.168 2026-02-20T22:53:28+01:00 Disconnected from authenticating user root 102.164.30.168 port 38844 [preauth] show less	Brute-Force SSH
🇩🇪 F242	2025-10-25 18:31:35 (9 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-10-10 08:33:42 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 102.164.30.168 (customer.capricom.net): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 102.164.30.168 (customer.capricom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 04:33:35.095135 2025] [security2:error] [pid 17876:tid 17876] [client 102.164.30.168:51050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOjE3y3xF42-4CRo-fBJgwAAAAQ"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-10-09 07:21:38 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 Tha_14	2025-09-23 10:10:20 (11 months ago)	Excessive spam activity detected	Web App Attack
Anonymous	2025-09-23 03:20:00 (11 months ago)	Spamming registration page	Web Spam
🇫🇷 Nicolmn	2025-09-20 05:00:06 (11 months ago)	Web form spam ( id m.l )	Web Spam
Anonymous	2025-09-08 22:04:44 (11 months ago)	xmlrpc attack blocked attempt from fail2ban ...	Web App Attack
🇬🇧 gtabomber	2025-09-02 03:45:57 (11 months ago)	2025-09-02T04:45:14.088354 espaceonline.co.uk auth[442]: pam_unix(dovecot:auth): authentication fail ... show more 2025-09-02T04:45:14.088354 espaceonline.co.uk auth[442]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=102.164.30.168 2025-09-02T04:45:15.980199 espaceonline.co.uk dovecot[5130]: auth-worker(442): pam([email protected],102.164.30.168,<fm3UUMk9CaJmpB6o>): unknown user (given password: espaceonline12345) 2025-09-02T04:45:48.064776 espaceonline.co.uk dovecot[5130]: pop3-login: Disconnected (auth failed, 1 attempts in 34 secs): user=<[email protected]>, method=PLAIN, rip=102.164.30.168, lip=176.126.240.132, session=<fm3UUMk9CaJmpB6o> ... show less	Brute-Force SSH
🇬🇧 Apache	2025-08-28 09:04:08 (11 months ago)	(mod_security) mod_security (id:217200) triggered by 102.164.30.168 (ZA/South Africa/customer.capric ... show more (mod_security) mod_security (id:217200) triggered by 102.164.30.168 (ZA/South Africa/customer.capricom.net): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-22 17:42:20 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 102.164.30.168 (customer.capricom.net): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 102.164.30.168 (customer.capricom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 13:42:15.094564 2025] [security2:error] [pid 27618:tid 27618] [client 102.164.30.168:43262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lcoor.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lcoor.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aKir964dDEVuVeyGnd-23gAAAAo"], referer: https://lcoor.org/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 181.127.213.203

🇺🇸 162.241.130.124

🇺🇸 104.23.160.237

🇳🇱 91.92.42.37

🇫🇷 85.217.140.36

🇺🇸 74.235.140.14

🇬🇭 41.204.63.118

🇨🇳 27.18.70.62

🇰🇷 221.162.218.85

🇱🇹 213.176.26.94

🇹🇷 178.18.207.92

🇬🇧 165.84.215.49

🇭🇰 150.242.218.137

🇵🇱 89.229.161.41

🇬🇧 87.236.176.26

🇩🇪 57.129.12.239

🇨🇳 221.0.14.36

🇳🇱 176.65.149.182

🇦🇷 148.222.222.169

🇮🇩 147.139.136.75