JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.218.85.252

Recent Activity

Abuse Confidence Score

22% Elevated

18 reports

14 reporters · latest 2 days ago

ISP: Africell Angola S.A
Usage Type: Mobile ISP
ASN: AS328943
Domain Name: africell.ao
Country: 🇦🇴 Angola
City: Luanda, Luanda

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

18 from 14 distinct reporters

First reported

October 30th 2023

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇫🇷 France 2 🇺🇸 United States of America 2

Most common categories Brute-Force 3 Web App Attack 3 Bad Web Bot 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-10-26 13:44:42 (2 days ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)	Hacking
🇺🇸 TPI-Abuse	2026-10-26 09:06:46 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:06:39.169367 2026] [security2:error] [pid 1219:tid 1222] [client 102.218.85.252:52738] M ... show more (mod_security) mod_security (id:225170) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:06:39.169367 2026] [security2:error] [pid 1219:tid 1222] [client 102.218.85.252:52738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vinylnotespodcast.com.104ventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com.104ventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at8YH2_oKZGaKFuhZhSi6AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-08 11:03:38 (2 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 13:22:38 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 09:22:34.018260 2026] [security2:error] [pid 16255:tid 16255] [client 102.218.85.252:20230] ... show more (mod_security) mod_security (id:210350) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 09:22:34.018260 2026] [security2:error] [pid 16255:tid 16255] [client 102.218.85.252:20230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|michaelcarrollgreen.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "michaelcarrollgreen.com"] [uri "/"] [unique_id "asEBmho2io3OC9bG58xJRgAAAAE"], referer: https://dofollowlink.space/dir/manual-seo-backlinks-135815 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-23 03:04:39 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇺🇸 kosada.com	2026-08-10 19:54:23 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-08-07 17:16:04 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -66.29 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.	Web App Attack Bad Web Bot
🇫🇮 YF	2026-08-05 14:00:37 (2 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 integrantservices.com	2026-08-05 12:25:14 (2 months ago)	(wordpress) Failed wordpress login from 102.218.85.252 (AO/Angola/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-05 08:26:41 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 04:26:37.301177 2026] [security2:error] [pid 3025500:tid 3025500] [client 102.218.85.252:38 ... show more (mod_security) mod_security (id:240335) triggered by 102.218.85.252 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 04:26:37.301177 2026] [security2:error] [pid 3025500:tid 3025500] [client 102.218.85.252:38674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.218.85.252 (+1 hits since last alert)\|artizandecor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artizandecor.com"] [uri "/xmlrpc.php"] [unique_id "anLzvT7L2sokSk_y93oLQAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 17:24:34 (3 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Exces ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=5&product_vc_mcu=106&q=DVI+104+Tx%2FRx \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Trident/5.0) \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-29 09:42:02 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-05-07 21:38:47 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
Anonymous	2025-11-18 15:30:52 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-27 19:05:22 (1 year ago)	Attacks with Bad user agents	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 213.209.159.226

🇳🇱 170.168.173.92

🇺🇸 155.212.109.73

🇮🇩 103.125.88.6

🇮🇳 103.106.137.174

🇯🇵 35.194.104.167

🇦🇷 190.183.30.227

🇧🇷 186.218.127.36

🇨🇳 180.76.188.13

🇨🇳 123.244.62.87

🇮🇳 115.97.200.136

🇨🇳 103.255.200.90

🇮🇹 95.255.158.96

🇺🇸 50.6.205.47

🇳🇱 45.148.10.152

🇮🇳 34.93.54.195

🇨🇭 213.55.171.188

🇧🇷 201.16.201.105

🇦🇷 181.23.54.239

🇮🇳 125.20.165.213