JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.219.27.217

102.219.27.217 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 13%: ?

13%

ISP	Vox Telecom
Usage Type	Fixed Line ISP
ASN	AS11845
Domain Name	vox.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.219.27.217

Whois 102.219.27.217

IP Abuse Reports for 102.219.27.217:

This IP address has been reported a total of 27 times from 14 distinct sources. 102.219.27.217 was first reported on January 23rd 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-27 10:37:24 (2 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.219.27.217 (102-219-27-217.vox.co.za): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 102.219.27.217 (102-219-27-217.vox.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 06:37:15.734920 2026] [security2:error] [pid 3441:tid 3441] [client 102.219.27.217:7818] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.pistonsociety.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pistonsociety.com"] [uri "/"] [unique_id "auB-20FMpMeF5sLrRUnwpgAAAAY"], referer: https://pistonsociety.com/about-us show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-29 13:58:50 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 14:20:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:36:50 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 17:32:09 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 10:36:02 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 20:52:20 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-25 09:06:56 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇻🇳 trung.fun	2026-08-21 01:29:47 (2 months ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-12 05:08:51 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-04 19:32:03 (2 months ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇺🇸 kosada.com	2026-08-01 07:07:47 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-27 22:00:15 (2 months ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/118/form_key/nQh2EIh8xNz81nl1/ \| UA: Mozilla/5.0 (Linux; Android 5.1.1) AppleWebKit/531.2 (KHTML, like Gecko) Chrome/13.0.888.0 Safari/531.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 04:21:05 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 102.219.27.217 (102-219-27-217.vox.co.za): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 102.219.27.217 (102-219-27-217.vox.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 23:21:01.807460 2026] [security2:error] [pid 18818:tid 18818] [client 102.219.27.217:29596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pointillistic.com\|F\|2"] [data ".bravecoolworld.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pointillistic.com"] [uri "/vmps-audio/www.bravecoolworld.com"] [unique_id "aZfhLYCTz-VLAcNTburTkwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-02-04 04:57:51 (8 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇷🇺 193.24.123.120

🇦🇺 170.64.139.153

🇷🇺 91.144.158.62

🇧🇪 35.195.141.222

🇧🇪 207.175.75.106

🇵🇰 203.101.186.199

🇰🇪 197.136.131.4

🇳🇱 195.178.110.137

🇳🇱 103.47.145.13

🇫🇮 95.217.20.85

🇺🇸 72.215.33.242

🇰🇷 59.11.246.91

🇨🇱 50.118.223.39

🇦🇺 34.151.143.191

🇨🇭 20.250.43.245

🇧🇷 201.63.223.141

🇧🇷 201.3.110.115

🇺🇸 147.185.132.109

🇺🇸 147.185.132.15