JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.217.240.17

102.217.240.17 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 20%: ?

20%

ISP	NET99 (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS328961
Domain Name	net99.co.za
Country	🇿🇦 South Africa
City	Bloemfontein, Free State

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.217.240.17

Whois 102.217.240.17

IP Abuse Reports for 102.217.240.17:

This IP address has been reported a total of 21 times from 14 distinct sources. 102.217.240.17 was first reported on August 27th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-11 21:34:05 (5 days ago)	Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: q=Taille-M-XXL-XL \| src_por ... show more Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: q=Taille-M-XXL-XL \| src_port: 65464 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-24 20:16:35 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 03:43:56 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 Budyn	2026-09-06 06:23:26 (1 month ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_1 \| Action: AWS API Call \| Token: jjbm ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_1 \| Action: AWS API Call \| Token: jjbmqxvagp71pskep78twdp5w \| Client Tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/windows lang/go#1.25.5 md/GOOS#windows md/GOARCH#amd64 api/bedrock#1.70.0 m/e show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-20 02:59:40 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-04 16:15:19 (2 months ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/6557/form_key/D1EKBGlFm9Bxvau1/ \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows CE; Trident/4.0) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 botreporter	2026-08-02 05:49:04 (2 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 kosada.com	2026-07-26 03:02:49 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-26 00:46:05 (2 months ago)	denied traffic to a non-approved destination port. destination port 20501.	Port Scan
🇨🇭 backslash	2026-07-08 18:12:02 (3 months ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇺🇸 kosada.com	2026-07-06 16:37:52 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-27 03:25:44 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-05-06 19:19:28 (5 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 TPI-Abuse	2026-04-07 19:25:51 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 102.217.240.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 102.217.240.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 15:25:40.410462 2026] [security2:error] [pid 1446170:tid 1446275] [client 102.217.240.17:22248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ceol.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ceol.us"] [uri "/htpsocal.com"] [unique_id "adVaNDC6EXxhL0lnyMwttgAAAVQ"], referer: http://ceol.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-16 22:03:00 (7 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.3.248.179

🇰🇷 125.182.93.87

🇬🇧 2a06:4880:a000::d6

🇷🇺 185.15.38.109

🇩🇪 165.245.253.20

🇭🇰 101.79.165.43

🇺🇸 66.132.186.200

🇬🇧 64.205.72.152

🇰🇷 61.84.4.230

🇮🇩 43.173.33.166

🇸🇦 31.166.206.69

🇲🇾 27.125.248.44

🇫🇷 5.49.77.89

🇸🇪 2.71.47.105

🇬🇧 200.138.46.47

🇦🇿 188.253.214.47

🇷🇺 176.114.190.29

🇺🇸 168.158.148.133

🇰🇷 121.134.185.211

🇲🇦 105.159.19.118