JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.206.92.41

102.206.92.41 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 96%: ?

96%

ISP	IIP1 Pty Ltd
Usage Type	Fixed Line ISP
ASN	AS329126
Domain Name	fibertime.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.206.92.41

Whois 102.206.92.41

IP Abuse Reports for 102.206.92.41:

This IP address has been reported a total of 40 times from 28 distinct sources. 102.206.92.41 was first reported on November 30th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-08-26 19:54:45 (1 day ago)	Port Scan Attack proto:TCP src:39880 dst:23	Port Scan
🇫🇷 vtchost.com	2026-08-26 17:34:07 (2 days ago)	2026-08-26T19:34:05.289136+02:00 vmi3491693 kernel: [55791.330684] PORTSCAN: IN=eth0 OUT= MAC=00:50: ... show more 2026-08-26T19:34:05.289136+02:00 vmi3491693 kernel: [55791.330684] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=102.206.92.41 DST=169.58.138.2 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=60483 DF PROTO=TCP SPT=52412 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-08-26 08:49:18 (2 days ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇧🇷 noconex	2026-08-25 09:50:08 (3 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92.41 show less	Port Scan Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 08:43:40 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-23 17:26:47 (5 days ago)	102.206.92.41 - - [24/Aug/2026:00:10:49 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U ... show more 102.206.92.41 - - [24/Aug/2026:00:10:49 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.206.92.41 - - [24/Aug/2026:00:10:51 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.206.92.41 - - [24/Aug/2026:00:10:54 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇦🇹 urnilxfgbez	2026-08-22 22:45:00 (5 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 gui-ying233	2026-08-22 11:13:31 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 sthoyer.de	2026-08-21 19:29:42 (1 week ago)	Aug 21 21:29:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 21 21:29:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=102.206.92.41 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=47418 DF PROTO=TCP SPT=39350 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 mkey	2026-08-21 16:45:04 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-21 18:41:33 \| LAST=2026-08-21 18:41:33. Last seen 2026-08-21 18:41:33. show less	Port Scan
🇩🇪 Vegascosmetics	2026-08-21 15:15:26 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 69>=65, Abuse 68, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-08-20 12:55:05 (1 week ago)	Port Scan Attack proto:TCP src:59134 dst:23	Port Scan
🇫🇷 Zkillu	2026-08-19 21:09:40 (1 week ago)	UDP flood (DDoS) vs AS215599: 302 pkts / 0.43 MB to UDP 80/8443 across 175 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 302 pkts / 0.43 MB to UDP 80/8443 across 175 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:09:40 (1 week ago)	UDP flood (DDoS) vs AS215599: 302 pkts / 0.43 MB to UDP 80/8443 across 175 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 302 pkts / 0.43 MB to UDP 80/8443 across 175 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-15 17:59:00 (1 week ago)	UDP flood attack on 31.56.58.1 UDP:22 (2026-08-15 17:53-18:05 UTC). Peak aggregate 47 Gbps / 4.2 Mpp ... show more UDP flood attack on 31.56.58.1 UDP:22 (2026-08-15 17:53-18:05 UTC). Peak aggregate 47 Gbps / 4.2 Mpps against victim AS215599. This IP (AS329126) sent ~187298 packets (248.46 MB) during the attack window. Likely a compromised device (Mirai-like botnet). show less	DDoS Attack Exploited Host

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.38

🇺🇸 162.216.18.113

🇳🇱 176.65.148.244

🇭🇰 118.193.45.65

🇫🇷 92.204.171.141

🇫🇷 91.196.152.232

🇺🇸 67.205.0.102

🇺🇸 66.132.172.139

🇸🇬 47.82.3.29

🇺🇸 44.222.87.100

🇩🇪 43.228.157.10

🇺🇸 40.119.36.77

🇮🇪 2a05:d018:1d9d:e702:cd8c:8f9e:9724:e32b

🇸🇴 197.231.202.201

🇲🇾 195.86.192.66

🇺🇸 162.216.150.14

🇸🇬 152.42.203.34

🇺🇸 136.112.225.72

🇨🇳 113.218.234.39

🇸🇬 103.134.154.235