JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.202.74.104

102.202.74.104 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 45%: ?

45%

ISP	Savanna Fibre (Tanzania) Ltd
Usage Type	Fixed Line ISP
ASN	AS329530
Domain Name	savannafibre.co.tz
Country	🇹🇿 Tanzania, the United Republic of
City	Dar es Salaam, Dar es Salaam Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.202.74.104

Whois 102.202.74.104

IP Abuse Reports for 102.202.74.104:

This IP address has been reported a total of 14 times from 11 distinct sources. 102.202.74.104 was first reported on July 6th 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-17 13:00:34 (21 hours ago)	Large-scale coordinated botnet (5M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (5M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Blocked by User-Agent Filter: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇫🇷 SpaceHost-Server	2026-09-05 22:14:05 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-09-04 22:14:04 (1 week ago)		Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-04 17:19:05 (1 week ago)	102.202.74.104 - - [04/Sep/2026:19:18:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4386 "-" "Jetpack by ... show more 102.202.74.104 - - [04/Sep/2026:19:18:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4386 "-" "Jetpack by WordPress.com" 102.202.74.104 - - [04/Sep/2026:19:18:31 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4386 "-" "Jetpack by WordPress.com" 102.202.74.104 - - [04/Sep/2026:19:18:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "WordPress.com; https://wordpress.com" 102.202.74.104 - - [04/Sep/2026:19:18:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4387 "-" "WordPress.com; https://wordpress.com" 102.202.74.104 - - [04/Sep/2026:19:19:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4387 "-" "Jetpack/13.0; WordPress/6.1; http://site75554289.com" show less	Web App Attack Brute-Force
Anonymous	2026-09-04 17:15:06 (1 week ago)	102.202.74.104 - - [04/Sep/2026:19:15:05 +0200] "POST / HTTP/1.1" 301 169 "-" "Jetpack by (Jetpack ... show more 102.202.74.104 - - [04/Sep/2026:19:15:05 +0200] "POST / HTTP/1.1" 301 169 "-" "Jetpack by (Jetpack 13.0; WordPress 6.2)" show less	Web App Attack
🇳🇱 debestelapp	2026-09-04 16:55:11 (1 week ago)		Web App Attack
🇳🇱 ConsulHosting	2026-09-04 16:23:39 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-09-04 14:44:30 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 gui-ying233	2026-08-31 12:47:44 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 15:44:35 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-06 15:35:38 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 masterguru	2026-07-06 11:10:03 (2 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-06 08:57:58 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 102.202.74.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.202.74.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:57:53.123464 2026] [security2:error] [pid 7093:tid 7093] [client 102.202.74.104:5760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.202.74.104 (+1 hits since last alert)\|ohwaitiforgot.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ohwaitiforgot.com"] [uri "/xmlrpc.php"] [unique_id "aktuESTtC-5N3nwrtr7CwQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 07:57:59 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 102.202.74.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.202.74.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:57:55.526693 2026] [security2:error] [pid 4625:tid 4625] [client 102.202.74.104:63985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.202.74.104 (+1 hits since last alert)\|stukabird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stukabird.com"] [uri "/xmlrpc.php"] [unique_id "aktgA1RLTLb81AT74oLkFAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.87.32.78

🇧🇷 189.127.19.28

🇻🇳 123.25.115.189

🇺🇸 52.173.67.116

🇭🇰 223.18.201.43

🇩🇪 213.209.159.108

🇺🇸 209.37.38.210

🇭🇰 202.155.236.242

🇺🇸 170.187.154.22

🇩🇪 167.99.241.118

🇺🇸 162.216.150.228

🇭🇰 156.225.1.108

🇫🇷 138.199.16.131

🇨🇳 106.4.161.154

🇧🇦 89.117.46.54

🇰🇿 87.121.125.18

🇫🇷 85.217.140.45

🇧🇬 79.124.58.18

🇺🇦 77.109.21.190

🇲🇾 47.254.192.136