JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.217.241.92

102.217.241.92 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 41%: ?

41%

ISP	Net99 Broadband 2
Usage Type	Fixed Line ISP
ASN	AS328961
Domain Name	net99.co.za
Country	🇿🇦 South Africa
City	Pretoria, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.217.241.92

Whois 102.217.241.92

IP Abuse Reports for 102.217.241.92:

This IP address has been reported a total of 25 times from 16 distinct sources. 102.217.241.92 was first reported on September 12th 2023, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-10-16 20:58:43 (45 minutes ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 102.217.241.92 (-)	Hacking
🇮🇹 VHosting	2026-10-16 20:30:05 (1 hour ago)	Detected mail brute force attack from different servers	Brute-Force
🇩🇪 Packets-Decreaser.NET	2026-10-11 01:10:23 (5 days ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 hermawan	2026-09-27 02:52:16 (2 weeks ago)	[Sun Sep 27 09:45:18.515307 2026] [security2:error] [pid 1547766:tid 140462912419520] [client 102.21 ... show more [Sun Sep 27 09:45:18.515307 2026] [security2:error] [pid 1547766:tid 140462912419520] [client 102.217.241.92:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "602"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "ariDPnnaTbWwUQEm6Gs9ZQAAAJI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1547811] [S6Gg8C1Md2c] [ariDPnnaTbWwUQEm6Gs9ZQAAAJI] keep_alive=[0] [2026-09-27 09:45:18.515311] [R:ariDPnnaTbWwUQEm6Gs9ZQAAAJI] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWeb ... show less	Email Spam Hacking
🇺🇸 鬼影233	2026-09-22 02:31:09 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-31 08:05:38 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-27 07:08:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 16:56:20 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 RAP	2026-08-22 20:34:43 (1 month ago)	2026-08-22 20:34:43 UTC Unauthorized activity to TCP port 22. SSH	SSH
Anonymous	2026-08-22 01:56:29 (1 month ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇳🇱 DrLex0	2026-08-18 03:58:30 (1 month ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 102.217.241.92 443 - [18/Aug/2026:03:58:30 +0000] "GET [redacted] HTTP/1.1" 503 6161 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
Anonymous	2026-08-08 01:00:50 (2 months ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/130/form_key/MUnQvXQVJHTpFbbz/ \| UA: Opera/9.68.(Windows NT 5.0; ur-PK) Presto/2.9.182 Version/10.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-01 19:21:34 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-18 02:46:38 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 kosada.com	2026-06-29 16:13:25 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.215

🇧🇷 179.48.18.42

🇺🇸 173.230.131.27

🇵🇭 120.28.109.188

🇨🇳 116.179.32.86

🇺🇸 66.132.172.147

🇺🇸 40.80.204.66

🇱🇰 220.247.224.226

🇦🇷 190.55.126.187

🇬🇧 178.128.45.45

🇺🇸 162.216.149.83

🇨🇳 117.133.160.209

🇨🇳 111.35.36.48

🇧🇷 104.23.254.236

🇳🇱 77.83.39.45

🇬🇧 64.227.34.152

🇦🇺 4.196.200.15

🇲🇽 189.243.178.2

🇩🇪 188.40.244.107

🇮🇳 182.77.71.157