JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.219.155.18

102.219.155.18 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	FOB
Usage Type	Fixed Line ISP
ASN	AS36920
Domain Name	kkontech.com
Country	🇳🇬 Nigeria
City	Lagos, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.219.155.18

Whois 102.219.155.18

IP Abuse Reports for 102.219.155.18:

This IP address has been reported a total of 46 times from 28 distinct sources. 102.219.155.18 was first reported on March 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dbmwebdesign	2026-06-24 17:20:22 (1 day ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 dbmwebdesign	2026-06-24 16:20:22 (1 day ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇹🇭 thaizone.com	2026-06-24 15:02:32 (1 day ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇲🇾 Rizzy	2026-06-24 14:03:30 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-24 12:34:44 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-24 05:00:24 (1 day ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 04:05:05 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 00:04:59.533661 2026] [security2:error] [pid 11310:tid 11310] [client 102.219.155.18:54534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.219.155.18 (+1 hits since last alert)\|jellisonrepair.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jellisonrepair.com"] [uri "/xmlrpc.php"] [unique_id "ajtXazXwL8kNnJ8Md-_ycAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 21:03:49 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 17:03:44.764823 2026] [security2:error] [pid 15190:tid 15190] [client 102.219.155.18:9135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.219.155.18 (+1 hits since last alert)\|nuewines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nuewines.com"] [uri "/xmlrpc.php"] [unique_id "ajr0sLRCvIrYfEK3sP2ixgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-06-23 17:50:19 (2 days ago)	2026-06-23T19:50:18.182801+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 102 ... show more 2026-06-23T19:50:18.182801+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 102.219.155.18 show less	Web App Attack
🇫🇷 dynamix	2026-06-23 17:21:09 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-06-23 14:20:16 (2 days ago)	Wordpress brute force attempt	Brute-Force Web App Attack
🇪🇸 masterguru	2026-06-23 13:31:35 (2 days ago)	(xmlrpc) Failed xmlrpc access from 102.219.155.18 (NG/Nigeria/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 ger-stg-sifi1	2026-06-23 12:48:25 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 12:18:59 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.219.155.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 08:18:55.720243 2026] [security2:error] [pid 28193:tid 28193] [client 102.219.155.18:23688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.219.155.18 (+1 hits since last alert)\|harwoodmechanical.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "harwoodmechanical.com"] [uri "/xmlrpc.php"] [unique_id "ajp5rwZAdSkWZjpq9sKpvAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-06-23 11:55:39 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.108.145

🇺🇸 162.222.34.234

🇯🇵 52.253.105.32

🇮🇳 203.223.188.118

🇦🇷 201.252.133.233

🇺🇸 198.12.118.218

🇹🇿 197.250.100.206

🇬🇧 193.32.209.246

🇺🇸 185.198.240.39

🇺🇸 162.215.219.73

🇺🇸 162.215.175.161

🇰🇷 150.109.241.177

🇨🇦 138.197.163.124

🇵🇭 131.226.108.198

🇨🇳 120.48.177.102

🇨🇳 116.179.32.28

🇨🇳 106.54.4.60

🇻🇳 103.160.4.157

🇮🇩 103.47.132.106

🇧🇬 91.148.190.150