JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.218.215.113

102.218.215.113 was found in our database!

This IP was reported 560 times. Confidence of Abuse is 100%: ?

100%

ISP	VPS Hostafrica
Usage Type	Data Center/Web Hosting/Transit
ASN	AS329184
Hostname(s)	server.ahnigeria.org.ng
Domain Name	hostafrica.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.218.215.113

Whois 102.218.215.113

IP Abuse Reports for 102.218.215.113:

This IP address has been reported a total of 560 times from 163 distinct sources. 102.218.215.113 was first reported on March 10th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-07-21 06:01:08 (22 hours ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 tjx	2026-07-20 05:47:37 (1 day ago)	Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 15 IPs in this cam ... show more Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 15 IPs in this campaign. show less	Port Scan Brute-Force SSH
🇺🇸 tjx	2026-07-17 02:05:43 (5 days ago)	Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 14 IPs in this cam ... show more Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 14 IPs in this campaign. show less	Port Scan Brute-Force SSH
🇺🇸 tjx	2026-07-14 05:24:43 (1 week ago)	Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 13 IPs in this cam ... show more Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 13 IPs in this campaign. show less	Port Scan Brute-Force SSH
🇺🇸 tjx	2026-07-11 13:50:41 (1 week ago)	Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 12 IPs in this cam ... show more Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 12 IPs in this campaign. show less	Port Scan Brute-Force SSH
🇫🇷 Selckie	2026-07-09 03:17:53 (1 week ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇫🇷 tecnicorioja	2026-07-07 22:00:02 (2 weeks ago)	POST /xmlrpc.php [07/Jul/2026:14:30:03	Brute-Force Web App Attack
🇺🇸 1cyb3rpunk	2026-07-07 17:48:25 (2 weeks ago)	Honeypot trap [wordpress_install_probe] on sectrace.org — path: /xmlrpc.php stage: credential. Autom ... show more Honeypot trap [wordpress_install_probe] on sectrace.org — path: /xmlrpc.php stage: credential. Automated scanner/attacker activity. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 thefaxe	2026-07-07 14:01:55 (2 weeks ago)	2026-07-07T16:01:53.461892+02:00 ka02 sshd-session[1495038]: Connection from 102.218.215.113 port 33 ... show more 2026-07-07T16:01:53.461892+02:00 ka02 sshd-session[1495038]: Connection from 102.218.215.113 port 33386 on 46.38.234.197 port 22 rdomain "" 2026-07-07T16:01:54.037926+02:00 ka02 sshd-session[1495038]: User root from 102.218.215.113 not allowed because not listed in AllowUsers 2026-07-07T16:01:54.222373+02:00 ka02 sshd-session[1495038]: Connection closed by invalid user root 102.218.215.113 port 33386 [preauth] 2026-07-07T16:01:54.408940+02:00 ka02 sshd-session[1495040]: Connection from 102.218.215.113 port 33394 on 46.38.234.197 port 22 rdomain "" 2026-07-07T16:01:54.972509+02:00 ka02 sshd-session[1495040]: User root from 102.218.215.113 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇫🇷 Selckie	2026-07-07 13:23:03 (2 weeks ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇳🇱 VMHeaven.io	2026-07-07 12:55:52 (2 weeks ago)	2026-07-07T12:55:46.166363+00:00 baloo sshd[17041]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-07-07T12:55:46.166363+00:00 baloo sshd[17041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.218.215.113 user=root 2026-07-07T12:55:48.389473+00:00 baloo sshd[17041]: Failed password for root from 102.218.215.113 port 34500 ssh2 2026-07-07T12:55:49.618583+00:00 baloo sshd[17045]: Invalid user admin from 102.218.215.113 port 35284 2026-07-07T12:55:50.293830+00:00 baloo sshd[17045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.218.215.113 2026-07-07T12:55:52.065343+00:00 baloo sshd[17045]: Failed password for invalid user admin from 102.218.215.113 port 35284 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-07 12:28:18 (2 weeks ago)	sshd	Brute-Force SSH
🇺🇸 tjx	2026-07-07 12:17:10 (2 weeks ago)	Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 8 IPs in this camp ... show more Part of detected botnet campaign. Shared hassh: 16443846184eafde36765c9bab2f4397. 8 IPs in this campaign. show less	Port Scan Brute-Force SSH
Anonymous	2026-07-07 11:24:12 (2 weeks ago)	Brute forcing Wordpress login	Hacking Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-07 11:03:46 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 560 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 217.216.111.63

🇱🇻 185.214.96.50

🇬🇧 185.192.70.96

🇨🇳 61.52.174.232

🇨🇦 51.222.168.108

🇬🇧 45.133.173.43

🇸🇬 15.235.199.123

🇬🇧 2.57.17.170

🇪🇬 197.32.103.216

🇬🇧 193.176.29.7

🇩🇪 185.242.3.195

🇬🇧 185.192.70.72

🇦🇷 181.23.54.140

🇺🇸 162.216.150.88

🇺🇸 162.216.150.20

🇩🇪 162.158.110.2

🇫🇷 157.173.122.136

🇮🇳 120.60.28.46

🇦🇺 118.127.40.41

🇨🇳 113.240.110.90