AbuseIPDB » 102.213.42.40
102.213.42.40
This IP was reported 9 times. Confidence of
Abuse
is 33% : ?
ISP
FBB_BYO-GPON&ADSL FIREWALLS
Usage Type
Fixed Line ISP
ASN
AS37204
Domain Name
telone.co.zw
Country
🇿🇼
Zimbabwe
City
Bulawayo, Bulawayo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.213.42.40 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
102.213.42.40 was first reported on
November 16th 2025 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
SpaceHost-Server
2026-05-29 22:25:05
(1 week ago)
Brute-Force
Web App Attack
2026-05-29 09:01:13
(1 week ago)
Attac
Brute-Force
🇺🇸
factor1
2026-05-29 05:55:13
(1 week ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
2026-05-29 04:23:55
(1 week ago)
[redacted] 102.213.42.40 - - [29/May/2026:06:23:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 102.213.42.40 - - [29/May/2026:06:23:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 102.213.42.40 - - [29/May/2026:06:23:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 102.213.42.40 - - [29/May/2026:06:23:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site30095404.com"
[redacted] 102.213.42.40 - - [29/May/2026:06:23:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
[redacted] 102.213.42.40 - - [29/May/2026:06:23:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
🇫🇷
Kenshin869
2026-05-29 02:10:08
(1 week ago)
Wordpress unauthorized access attempt
Brute-Force
🇫🇷
masterguru
2026-05-28 17:28:16
(1 week ago)
(xmlrpc) Apache: Failed xmlrpc access from 102.213.42.40 (ZW/Zimbabwe/-): 10 in the last 3600 secs ( ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 102.213.42.40 (ZW/Zimbabwe/-): 10 in the last 3600 secs (0-180)
show less
Hacking
🇩🇪
kjaerulff
2025-11-16 10:44:37
(6 months ago)
Failed Wordpress login using xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 10:38:48
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 102.213.42.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 102.213.42.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 05:38:42.181426 2025] [security2:error] [pid 27185:tid 27185] [client 102.213.42.40:28274] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||majesticsolutions.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "majesticsolutions.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aRmpsgtFCu9rpMvwhTwIiwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 09:49:42
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 102.213.42.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 102.213.42.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 04:49:39.410738 2025] [security2:error] [pid 28930:tid 29007] [client 102.213.42.40:59324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||landmarkocchealth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "landmarkocchealth.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRmeM577aq6bePzOLCFzBAAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: