102.206.95.145
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- IIP1 Pty Ltd
- Usage Type
- Fixed Line ISP
- ASN
- AS329126
- Domain Name
- fibertime.com
- Country
- 🇿🇦 South Africa
- City
- Gqeberha, Eastern Cape
Abuse Reports
Total reports
17 from
15 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:52:55Z.
|
Bad Web Bot | |
| 🇳🇱 EGP Abuse Dept |
Scraping webshop URLs (www.badgehouder.nl), likely botnet drone
|
Bad Web Bot Exploited Host | |
| 🇫🇷 Petre 21_ip |
2026-10-10T22:54:22.478531+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=102.206.95.145 DST=155.133.26.57 LEN=746 TOS=0x00 PREC=0x00 TTL=50 ID=30095 DF PROTO=UDP SPT=35623 DPT=443 LEN=726
...
|
Port Scan | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1257
|
Exploited Host Web App Attack | |
| 🇷🇺 AbuseIPDB informer |
nfdump top talker: 102.206.95.145 | first seen 2026-10-08 13:50:31.296 | duration 00:00:00.067 | flows=1 | packets=25575 | bytes=18.6 M | pps=381 | bps=2.2 M | bpp=728 | proto=any
|
DDoS Attack Port Scan Exploited Host | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇨🇦 DidierMX |
Wazuh Alert: Exim Auth Failed from 102.206.95.145
|
Brute-Force Web App Attack | |
| 🇩🇪 LRob |
Shop search flood (L7 DDoS) | path: /7-velo-electrique-ville | query: order=product.price.desc&productListView=list&q=Taille-L/Ann%C3%A9e-2025 | src_port: 17268
|
DDoS Attack Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
|
Bad Web Bot | |
| 🇫🇮 inlink.ltd |
SMTP AUTH attack
|
Brute-Force | |
| Anonymous |
|
Email Spam Brute-Force | |
| 🇮🇹 VHosting |
Detected mail brute force attack from different servers
|
Brute-Force | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown