JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.206.92.61

102.206.92.61 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	IIP1 Pty Ltd
Usage Type	Fixed Line ISP
ASN	AS329126
Domain Name	fibertime.com
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.206.92.61

Whois 102.206.92.61

IP Abuse Reports for 102.206.92.61:

This IP address has been reported a total of 74 times from 48 distinct sources. 102.206.92.61 was first reported on September 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-27 06:00:33 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇷🇸 Smel	2026-08-27 04:47:02 (1 day ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-08-27 03:03:25 (1 day ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇺🇸 RAP	2026-08-27 02:21:24 (1 day ago)	2026-08-27 02:21:24 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇧🇷 noconex	2026-08-26 01:21:10 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92.61 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-26 00:09:04 (2 days ago)	Aug 25 20:08:38 localhost kernel: [116048067.892852] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 25 20:08:38 localhost kernel: [116048067.892852] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=102.206.92.61 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=1530 DF PROTO=TCP SPT=40104 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 25 20:08:38 localhost kernel: [116048067.892874] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=102.206.92.61 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=1530 DF PROTO=TCP SPT=40104 DPT=23 SEQ=2546993738 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A01200FB00000000001030306) Aug 25 20:09:03 localhost kernel: [116048093.093644] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=102.206.92.61 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=49559 DF PROTO=TCP SPT=52486 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 25 20:09:03 localhost kernel: [116048093.093663] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:0 show less	Port Scan
🇺🇸 kosada.com	2026-08-25 19:06:30 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 08:11:34 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 garrymenata	2026-08-24 01:09:48 (4 days ago)	102.206.92.61 - - [24/Aug/2026:02:02:38 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U ... show more 102.206.92.61 - - [24/Aug/2026:02:02:38 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.206.92.61 - - [24/Aug/2026:02:02:40 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 102.206.92.61 - - [24/Aug/2026:02:02:43 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 Aurealize	2026-08-22 15:45:16 (5 days ago)	Cowrie SSH brute-force activity and firewall port scanning detected. 2 or more observation(s) from 2 ... show more Cowrie SSH brute-force activity and firewall port scanning detected. 2 or more observation(s) from 2026-08-22T15:45:16.000Z through 2026-08-22T15:45:16.000Z. show less	Port Scan Brute-Force SSH
🇺🇸 RAP	2026-08-21 18:38:42 (6 days ago)	2026-08-21 18:38:42 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 MPL	2026-08-20 20:57:50 (1 week ago)	tcp ports: 22,23 (12 or more attempts)	Port Scan
🇧🇷 noconex	2026-08-20 17:17:14 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 102.206.92.61 show less	Port Scan Brute-Force SSH
🇫🇷 Zkillu	2026-08-20 16:04:40 (1 week ago)	DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS ... show more DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS215599. This IP (AS329126) sent ~4661 packets (6.62 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-19 22:29:22 (1 week ago)	UDP flood (DDoS) vs AS215599: 6770 pkts / 9.68 MB to UDP 80/8443 across 579 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 6770 pkts / 9.68 MB to UDP 80/8443 across 579 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 102.220.160.129

🇫🇷 2400:cb00:1036:1000:6551:145c:7362:61b0

🇺🇸 216.75.62.8

🇳🇱 192.253.248.251

🇳🇱 188.166.113.59

🇧🇷 179.157.146.183

🇭🇰 172.253.5.18

🇺🇸 167.172.217.169

🇨🇳 140.255.135.251

🇺🇸 67.210.235.94

🇺🇸 47.251.15.21

🇺🇸 47.88.90.156

🇧🇷 45.179.189.48

🇳🇱 45.148.10.240

🇳🇱 45.148.10.141

🇺🇸 40.124.179.91

🇬🇧 31.14.254.109

🇫🇷 217.113.196.143

🇬🇧 213.166.84.44

🇧🇷 191.183.36.220