102.206.211.116

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
93 reports
52 reporters ยท latest 5 hours ago
ISP RSAWEB
Usage Type Fixed Line ISP
ASN AS37053
Domain Name rsaweb.co.za
Country ๐Ÿ‡ฟ๐Ÿ‡ฆ South Africa
City Cape Town, Western Cape

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 102.206.211.116

This IP address has been reported a total of 93 times from 52 distinct sources. 102.206.211.116 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 25 reports; France with 16 reports; Germany with 15 reports. The most common categories in these recent reports were: Port Scan 71 times; Brute-Force 30 times; SSH 22 times; Hacking 19 times; Web App Attack 6 times; Other 10 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-14 12:02:19 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡ฉ๐Ÿ‡ช london2038.com
Brute-Force Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan SSH Brute-Force
๐Ÿ‡ง๐Ÿ‡ท aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡จ๐Ÿ‡ฆ polycoda
๐Ÿ”‘ Wordpress login brute force attempt
Hacking Web App Attack
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
๐Ÿ‡ซ๐Ÿ‡ท masterguru
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท GabrielJST
(sshd) Failed SSH login from 102.206.211.116 (-)
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡ซ๐Ÿ‡ฎ mikkopal88
TCP SYN port scan to SSH 22
Port Scan SSH
๐Ÿ‡ฉ๐Ÿ‡ช Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฎ๐Ÿ‡ณ 223.238.162.46
๐Ÿ‡ง๐Ÿ‡ช 185.132.187.148
๐Ÿ‡บ๐Ÿ‡ธ 152.163.101.224
๐Ÿ‡จ๐Ÿ‡ณ 116.207.113.107
๐Ÿ‡ท๐Ÿ‡บ 109.173.38.135
๐Ÿ‡ฉ๐Ÿ‡ช 84.19.182.20
๐Ÿ‡ฌ๐Ÿ‡ง 54.38.147.88
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.157
๐Ÿ‡จ๐Ÿ‡ณ 36.42.67.114
๐Ÿ‡บ๐Ÿ‡ธ 20.64.98.9
๐Ÿ‡บ๐Ÿ‡ธ 172.71.191.45
๐Ÿ‡ฎ๐Ÿ‡น 151.59.127.172
๐Ÿ‡ฎ๐Ÿ‡ฑ 147.235.217.145
๐Ÿ‡บ๐Ÿ‡ธ 143.198.161.227
๐Ÿ‡บ๐Ÿ‡ธ 143.59.217.7
๐Ÿ‡ง๐Ÿ‡ช 82.197.193.216
๐Ÿ‡ฏ๐Ÿ‡ต 8.221.139.48
๐Ÿ‡ต๐Ÿ‡ฑ 195.3.220.7
๐Ÿ‡ณ๐Ÿ‡ฑ 193.29.139.151