JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.42.61

102.213.42.61 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 75%: ?

75%

ISP	FBB_BYO-GPON&ADSL FIREWALLS
Usage Type	Fixed Line ISP
ASN	AS37204
Domain Name	telone.co.zw
Country	🇿🇼 Zimbabwe
City	Bulawayo, Bulawayo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.42.61

Whois 102.213.42.61

IP Abuse Reports for 102.213.42.61:

This IP address has been reported a total of 25 times from 15 distinct sources. 102.213.42.61 was first reported on July 24th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-15 07:18:56 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:18:48.878533 2026] [security2:error] [pid 3751:tid 3751] [client 102.213.42.61:33728] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.213.42.61 (+1 hits since last alert)\|crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crittergetterpestcontrol.com"] [uri "/xmlrpc.php"] [unique_id "ai-nWHvZwfFiweTNKvlicQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-15 05:25:48 (5 days ago)	3.907 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 04:43:30 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:43:25.106335 2026] [security2:error] [pid 2557:tid 2557] [client 102.213.42.61:11395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.213.42.61 (+1 hits since last alert)\|walterceron.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "walterceron.com"] [uri "/xmlrpc.php"] [unique_id "ai-C7VGpvZ40JRNly_igaAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-15 03:45:09 (5 days ago)	(xmlrpc) Failed xmlrpc access from 102.213.42.61 (ZW/Zimbabwe/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 lostswordfish.com	2026-06-14 21:06:02 (5 days ago)	Wordfence waf block on lostswordfish	Web App Attack
🇳🇱 Site.eu	2026-06-14 15:45:06 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-14 09:47:08 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 102.213.42.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:47:04.457172 2026] [security2:error] [pid 31109:tid 31136] [client 102.213.42.61:43598] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.213.42.61 (+1 hits since last alert)\|koalacogs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "koalacogs.com"] [uri "/xmlrpc.php"] [unique_id "ai54mEDztk3Hj7mVca-RPQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 07:12:10 (6 days ago)	Attac	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-14 06:40:06 (6 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC -	Web App Attack
🇪🇸 masterguru	2026-06-14 03:39:02 (6 days ago)	(xmlrpc) Failed xmlrpc access from 102.213.42.61 (ZW/Zimbabwe/-): 5 in the last 3600 secs (0-122)	Hacking
Anonymous	2026-06-14 03:37:20 (6 days ago)	(wordpress) Failed wordpress login from 102.213.42.61 (ZW/Zimbabwe/-)	Brute-Force
Anonymous	2026-06-14 03:06:32 (6 days ago)		Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-06-14 01:18:03 (6 days ago)	trying wp-login.php/xmlrpc.php 31 times in 1 minutes	Brute-Force Web App Attack
🇩🇪 abdubhai	2026-06-14 00:01:31 (6 days ago)	102.213.42.61 - - [14/Jun/2026:0 ...	Brute-Force
🇳🇱 debestelapp	2026-06-13 21:10:07 (6 days ago)		Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇹 200.113.234.133

🇳🇱 193.176.31.156

🇦🇷 179.43.114.162

🇨🇦 172.70.80.28

🇮🇪 89.100.205.172

🇧🇷 177.71.89.208

🇺🇸 172.208.48.177

🇳🇱 141.101.76.148

🇺🇸 100.28.153.226

🇷🇺 87.250.224.12

🇺🇸 66.132.195.32

🇸🇦 51.235.232.242

🇨🇳 36.212.191.18

🇭🇰 199.45.155.98

🇨🇳 122.51.73.24

🇮🇩 103.190.47.114

🇺🇸 96.245.253.58

🇫🇷 91.231.89.195

🇭🇰 91.208.73.57

🇮🇷 89.41.14.54