JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.208.220.201

102.208.220.201 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 25%: ?

25%

ISP	BEELINE TELECOMS LIMITED
Usage Type	Mobile ISP
ASN	AS329444
Domain Name	zedmobile.co.zm
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.208.220.201

Whois 102.208.220.201

IP Abuse Reports for 102.208.220.201:

This IP address has been reported a total of 134 times from 68 distinct sources. 102.208.220.201 was first reported on April 2nd 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 ferique	2026-07-16 06:23:22 (20 hours ago)	Real-time Intercept: Email Spam. Reference: Tagged as Spam by SpamAssassin. Score 85/10	Email Spam
🇹🇷 ferique	2026-07-15 21:38:18 (1 day ago)	Real-time Intercept: Email Spam. Reference: Tagged as Spam by SpamAssassin. Score 73/10	Email Spam
🇳🇱 soverin	2026-06-18 21:12:04 (4 weeks ago)	spam	Email Spam
🇩🇪 lenz	2026-06-12 22:09:26 (1 month ago)	Jun 13 00:08:43 hosting wordpress(grupa-ddd.pl)[11820]: XML-RPC authentication failure for admin fro ... show more Jun 13 00:08:43 hosting wordpress(grupa-ddd.pl)[11820]: XML-RPC authentication failure for admin from 102.208.220.201 Jun 13 00:08:53 hosting wordpress(grupa-ddd.pl)[1202]: XML-RPC authentication failure for admin from 102.208.220.201 Jun 13 00:09:04 hosting wordpress(grupa-ddd.pl)[1201]: XML-RPC authentication failure for admin from 102.208.220.201 Jun 13 00:09:14 hosting wordpress(grupa-ddd.pl)[1200]: XML-RPC authentication failure for admin from 102.208.220.201 Jun 13 00:09:25 hosting wordpress(grupa-ddd.pl)[1204]: XML-RPC authentication failure for admin from 102.208.220.201 ... show less	Brute-Force Web App Attack
Anonymous	2026-06-08 18:58:20 (1 month ago)	Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Aggressive search filter manipul ... show more Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=33+&dir=asc&order=relevance&product_vc_type=101&projector_type=62%2C314&q=ex+90 \| UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/533.2 (KHTML, like Gecko) Chrome/19.0.898.0 Safari/533.2 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-07 21:31:30 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 102.208.220.201 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 102.208.220.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:31:26.048220 2026] [security2:error] [pid 16555:tid 16555] [client 102.208.220.201:60941] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.208.220.201 (+1 hits since last alert)\|thenursingsite.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thenursingsite.com"] [uri "/xmlrpc.php"] [unique_id "aiXjLuQ5adObZKk_FwFregAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 23:01:19 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 102.208.220.201 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 102.208.220.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 19:01:12.090263 2026] [security2:error] [pid 31835:tid 31835] [client 102.208.220.201:59318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.208.220.201 (+1 hits since last alert)\|lightningbug.farm\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightningbug.farm"] [uri "/xmlrpc.php"] [unique_id "aiNVOF0D4O97Kr5tZEeHwQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 phil2k	2026-05-18 21:35:57 (1 month ago)	Firewall: Within 2026-05-15 14:37:42 - 2026-05-15 14:37:42 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-05-15 14:37:42 - 2026-05-15 14:37:42 CEST(+0200) identified: unallowed access from 102.208.220.201 on port 23(telnet) (1 trial) Fail2ban: Within 2026-05-15 14:37:42 - 2026-05-15 14:37:42 CEST(+0200) banned: 1 times by fail2ban[firewall] show less	Port Scan Brute-Force
Anonymous	2026-05-15 17:57:50 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-11 20:20:45 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 MPL	2026-05-11 20:12:50 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇩🇪 bescared	2026-05-11 17:58:53 (2 months ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -151302cd-	Port Scan
Anonymous	2026-05-09 11:58:33 (2 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇨🇳 ThreatBook.io	2026-05-07 00:49:31 (2 months ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/102.208.220.201	SSH
🇺🇸 MPL	2026-05-06 20:58:46 (2 months ago)	tcp/23	Port Scan

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 104.28.254.47

🇺🇸 47.253.226.114

🇨🇦 20.104.112.195

🇺🇸 208.67.219.93

🇺🇸 205.210.31.76

🇳🇱 195.178.110.30

🇸🇬 167.172.89.248

🇵🇭 112.208.74.97

🇫🇷 91.196.152.221

🇺🇸 85.239.151.34

🇺🇸 47.251.25.74

🇱🇻 46.183.221.210

🇱🇹 45.227.254.170

🇸🇪 45.91.171.156

🇸🇬 43.159.51.6

🇨🇦 20.104.50.116

🇳🇴 20.100.198.19

🇳🇴 20.100.175.1

🇯🇵 8.216.48.124

🇧🇷 191.232.233.136