JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.216.1.153

102.216.1.153 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 33%: ?

33%

ISP	Baremetal Business Network
Usage Type	Fixed Line ISP
ASN	AS329062
Domain Name	baremetal.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.216.1.153

Whois 102.216.1.153

IP Abuse Reports for 102.216.1.153:

This IP address has been reported a total of 41 times from 25 distinct sources. 102.216.1.153 was first reported on April 22nd 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-30 08:33:04 (8 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 04:32:58.140089 2026] [security2:error] [pid 23183:tid 23183] [client 102.216.1.153:33688] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jasbemarketing.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jasbemarketing.com"] [uri "/"] [unique_id "arzJOt8dXeXRBg1yGubaYQAAABg"], referer: https://freebacklinks.website/dir/professional-seo-links-105130 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 17:42:02 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 13:41:54.514481 2026] [security2:error] [pid 20705:tid 20705] [client 102.216.1.153:45442] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mcarrollcommunications.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mcarrollcommunications.com"] [uri "/"] [unique_id "arqm4tll6EBLDOdOIH7hKgAAABc"], referer: https://bulkdacheckertools.site/dir/seo-backlink-services-132701 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-21 06:12:32 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 14:28:24 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 20:08:04 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.216.1.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:07:58.569074 2026] [security2:error] [pid 8843:tid 8843] [client 102.216.1.153:56464] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bernsteinip.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bernsteinip.com"] [uri "/"] [unique_id "aqr3Hve09UIhsBtkIVVBAAAAABg"], referer: https://daseochecker.store/dir/advanced-link-building-21832 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-30 14:27:35 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 05:02:19 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-25 09:24:47 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 RAP	2026-08-09 23:27:39 (1 month ago)	2026-08-09 23:27:39 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 cybsecaoccol	2026-08-09 22:35:41 (1 month ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-08-09 13:14:24 (1 month ago)	Port Scan Attack proto:TCP src:55648 dst:23	Port Scan
Anonymous	2026-08-07 20:32:07 (1 month ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-08-07 08:37:31 (1 month ago)	23/tcp (1 or more attempts)	Port Scan
🇷🇸 Scan	2026-08-07 01:52:42 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-08-06 02:03:00 (1 month ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.112.237.201

🇪🇨 181.198.203.197

🇮🇳 103.216.170.141

🇩🇪 31.76.119.187

🇺🇸 144.225.6.182

🇳🇱 109.160.32.157

🇺🇿 84.54.72.16

🇨🇦 69.12.83.15

🇺🇸 38.19.185.32

🇨🇳 36.250.220.38

🇬🇧 213.166.84.41

🇸🇬 212.73.148.32

🇨🇱 190.151.113.6

🇧🇷 177.46.154.142

🇨🇳 123.163.114.166

🇬🇧 81.19.219.219

🇬🇧 31.14.254.56

🇨🇳 27.8.44.168

🇬🇧 5.226.140.28

🇳🇱 195.178.110.217