JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.212.20.89

102.212.20.89 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 42%: ?

42%

ISP	DCW
Usage Type	Fixed Line ISP
ASN	AS329249
Domain Name	dcwireless.co.za
Country	🇿🇦 South Africa
City	KwaDukuza, KwaZulu-Natal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.212.20.89

Whois 102.212.20.89

IP Abuse Reports for 102.212.20.89:

This IP address has been reported a total of 32 times from 17 distinct sources. 102.212.20.89 was first reported on August 4th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-10-27 07:10:10 (11 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 mawan	2026-10-24 20:01:16 (2 days ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2026-10-22 09:40:26 (5 days ago)	\| [Dangerous/South Africa] Aggressive IP 102.212.20.89 (~30 hits). Type: DoS Defender- Web server 40 ... show more \| [Dangerous/South Africa] Aggressive IP 102.212.20.89 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 big-cloud.nl	2026-10-20 11:13:53 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 11:39:40 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 102.212.20.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 102.212.20.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:39:32.032648 2026] [security2:error] [pid 32473:tid 32473] [client 102.212.20.89:53096] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dennisangellismusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dennisangellismusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNedD-YSXVXzLb7IaitEQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-10-12 02:30:03 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Bad Web Bot
🇲🇽 octageeks.com	2026-10-10 04:48:40 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 鬼影233	2026-09-28 07:57:26 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 22:27:17 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:17:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 09:33:57 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 13:41:34 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 08:08:59 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 11:45:27 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-05 07:56:01 (2 months ago)	2026-08-05T07:54:37 102.212.20.89 GET /Photos/Vacation/2018-04-07%20Big%20Trip/raw/IMG_4285.CR2.xmp ... show more 2026-08-05T07:54:37 102.212.20.89 GET /Photos/Vacation/2018-04-07%20Big%20Trip/raw/IMG_4285.CR2.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 ... show less	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.123.54.231

🇹🇳 197.1.163.22

🇷🇺 193.24.123.120

🇨🇳 180.76.98.88

🇩🇪 167.94.146.56

🇷🇺 92.43.0.81

🇷🇺 91.185.39.130

🇸🇪 89.160.102.155

🇺🇸 54.147.80.137

🇳🇱 45.148.10.141

🇺🇸 44.208.223.68

🇨🇳 27.25.70.70

🇦🇺 3.26.68.67

🇧🇷 191.250.44.20

🇨🇭 179.43.153.18

🇭🇰 156.245.246.50

🇺🇸 147.90.235.141

🇷🇺 92.124.133.35

🇮🇷 92.119.70.229

🇷🇺 81.26.132.70