AbuseIPDB » 102.208.123.79

102.208.123.79 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 50%: ?

50%

ISP	GVA-RDC
Usage Type	Fixed Line ISP
ASN	AS36924
Domain Name	gva.africa
Country	Congo (the Democratic Republic of the)
City	Kinshasa, Kinshasa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 102.208.123.79

Whois 102.208.123.79

IP Abuse Reports for 102.208.123.79:

This IP address has been reported a total of 36 times from 17 distinct sources. 102.208.123.79 was first reported on May 9th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-06-23 20:07:18 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-22 20:07:18 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
mnsf	2025-06-22 00:05:33 (2 weeks ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
rtbh.com.tr	2025-06-21 20:07:16 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Valhalla	2025-06-21 18:56:39 (2 weeks ago)	/xmlrpc.php	Hacking Web App Attack
rtbh.com.tr	2025-06-21 00:07:33 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-20 20:07:16 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Burayot	2025-06-20 08:55:11 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 102.208.123.79 (CD/DR Congo/-): 1 i ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 102.208.123.79 (CD/DR Congo/-): 1 in the last 3600 secs show less	Web App Attack
findlab	2025-06-19 19:20:03 (3 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
TPI-Abuse	2025-06-18 18:56:05 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 102.208.123.79 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 102.208.123.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 18 14:56:01.784388 2025] [security2:error] [pid 2280759:tid 2280759] [client 102.208.123.79:14317] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realdesigninterior.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realdesigninterior.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aFMLwX4PxSP9F5UMTdAVCAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
i-turnradio.nl	2025-06-18 06:48:07 (3 weeks ago)	2025-06-18 @ 08:48:07 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
ddw	2025-06-17 04:20:03 (3 weeks ago)	WordPress XMLRPC.PHP Access Attempt.	Hacking Web App Attack
TPI-Abuse	2025-06-15 03:14:24 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 102.208.123.79 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 102.208.123.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 23:14:21.711448 2025] [security2:error] [pid 823737:tid 823737] [client 102.208.123.79:16628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dokuzadabirdeniz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dokuzadabirdeniz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aE46jT-n3l2WPiZii00rUQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-15 01:17:36 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-06-14 20:14:11 (3 weeks ago)	(wordpress) Failed wordpress login from 102.208.123.79 (CD/DR Congo/-)	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩