JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.22.171.132

102.22.171.132 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 73%: ?

73%

ISP	GVA Rwanda Ltd
Usage Type	Fixed Line ISP
ASN	AS36924
Domain Name	gva.africa
Country	🇷🇼 Rwanda
City	Kigali, Kigali

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.22.171.132

Whois 102.22.171.132

IP Abuse Reports for 102.22.171.132:

This IP address has been reported a total of 16 times from 14 distinct sources. 102.22.171.132 was first reported on September 9th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-08-30 20:30:02 (13 hours ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 dynamix	2026-08-30 19:23:15 (14 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-30 10:58:48 (22 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC RW/Rwanda/-	Web App Attack
Anonymous	2026-08-29 09:01:07 (2 days ago)	[redacted] 102.22.171.132 - - [29/Aug/2026:11:00:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 102.22.171.132 - - [29/Aug/2026:11:00:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 102.22.171.132 - - [29/Aug/2026:11:00:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site34165453.com" [redacted] 102.22.171.132 - - [29/Aug/2026:11:00:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 102.22.171.132 - - [29/Aug/2026:11:00:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site61182159.com" [redacted] 102.22.171.132 - - [29/Aug/2026:11:01:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" ... show less	Hacking Web App Attack
🇩🇪 rh24	2026-08-29 09:01:00 (2 days ago)	(xmlrpc_405) XMLRPC-Bot 405 102.22.171.132 (RW/Rwanda/-)	Hacking
🇩🇪 pscriptos	2026-08-28 11:11:25 (2 days ago)	{"ClientAddr":"102.22.171.132:29699","ClientHost":"102.22.171.132","ClientPort":"29699","ClientUsern ... show more {"ClientAddr":"102.22.171.132:29699","ClientHost":"102.22.171.132","ClientPort":"29699","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":125503146,"OriginContentSize":418,"OriginDuration":122686497,"OriginStatus":403,"Overhead":2816649,"RequestAddr":"www.cleveradmin.de","RequestContentSize":716,"RequestCount":5234084,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-08-28T13:11:04.314524622+02:00","StartUTC":"2026-08-28T11:11:04.314524622Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-08-28T13:11:04+02:00"} {"ClientAddr":"102.22.171.132:29699","ClientHost":"102.22.171.13 ... show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-08-27 15:07:38 (3 days ago)	102.22.171.132 - - [27/Aug/2026:11:05:03 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress. ... show more 102.22.171.132 - - [27/Aug/2026:11:05:03 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress.com; https://wordpress.com" 102.22.171.132 - - [27/Aug/2026:11:05:57 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress.com; https://wordpress.com" 102.22.171.132 - - [27/Aug/2026:11:06:30 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress.com; https://wordpress.com" 102.22.171.132 - - [27/Aug/2026:11:07:25 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress.com; https://wordpress.com" 102.22.171.132 - - [27/Aug/2026:11:07:35 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5092 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇲🇹 Malta	2026-08-27 14:56:14 (3 days ago)	102.22.171.132 - - [27/Aug/2026:16:56:14 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https:// ... show more 102.22.171.132 - - [27/Aug/2026:16:56:14 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇺🇸 gui-ying233	2026-08-27 11:10:17 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-24 07:04:57 (1 week ago)	WordPress login brute-force \| path: /xmlrpc.php \| 2026-08-24 07:04 UTC	Brute-Force Web App Attack
🇩🇪 rh24	2026-08-22 18:36:21 (1 week ago)	(wordpress) Failed wordpress login from 102.22.171.132 (RW/Rwanda/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-08-21 05:06:40 (1 week ago)	Trying to access config files	Web App Attack
🇧🇪 madeit	2026-08-19 11:32:53 (1 week ago)		Web App Attack
🇺🇸 Jason Howell	2026-08-19 08:21:01 (1 week ago)	102.22.171.132 - - [19/Aug/2026:03:20:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by ... show more 102.22.171.132 - - [19/Aug/2026:03:20:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by WordPress.com" 102.22.171.132 - - [19/Aug/2026:03:20:27 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "WordPress.com; https://wordpress.com" 102.22.171.132 - - [19/Aug/2026:03:20:38 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 102.22.171.132 - - [19/Aug/2026:03:20:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4358 "-" "Jetpack/13.0; WordPress/6.1; http://site34170090.com" 102.22.171.132 - - [19/Aug/2026:03:21:00 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack/12.1; WordPress/6.2; http://site35310375.com" ... show less	Web App Attack
Anonymous	2026-08-19 07:06:06 (1 week ago)	Trying to access config files	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 157.10.45.192

🇨🇦 85.217.149.73

🇩🇪 193.124.20.253

🇦🇷 186.38.26.5

🇮🇩 163.7.1.156

🇵🇭 119.92.229.195

🇵🇱 91.222.71.25

🇬🇧 87.236.176.210

🇺🇸 67.211.223.122

🇧🇪 35.205.80.224

🇨🇦 20.220.211.172

🇺🇸 2607:f8b0:400c:c14::128

🇧🇷 205.210.31.233

🇲🇽 187.191.23.72

🇨🇦 174.2.97.202

🇺🇸 172.236.112.125

🇺🇸 152.32.205.7

🇧🇩 114.130.98.229

🇳🇱 91.92.40.176

🇪🇸 83.42.134.26