JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.221.29.107

102.221.29.107 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 81%: ?

81%

ISP	Broadspectrum Limited
Usage Type	Fixed Line ISP
ASN	AS328797
Domain Name	broadspectrumltd.com
Country	🇬🇭 Ghana
City	Accra, Greater Accra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.221.29.107

Whois 102.221.29.107

IP Abuse Reports for 102.221.29.107:

This IP address has been reported a total of 49 times from 27 distinct sources. 102.221.29.107 was first reported on May 20th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-15 17:25:59 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 13:25:52.477380 2026] [security2:error] [pid 17227:tid 17227] [client 102.221.29.107:55378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.29.107 (+1 hits since last alert)\|graciousholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "graciousholding.com"] [uri "/xmlrpc.php"] [unique_id "ajA1oA0HSpnU-SwCee9HmQAAAGU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-15 16:23:20 (13 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC -	Web App Attack
🇩🇪 pscriptos	2026-06-15 10:11:36 (19 hours ago)	{"ClientAddr":"102.221.29.107:49959","ClientHost":"102.221.29.107","ClientPort":"49959","ClientUsern ... show more {"ClientAddr":"102.221.29.107:49959","ClientHost":"102.221.29.107","ClientPort":"49959","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":130741673,"OriginContentSize":418,"OriginDuration":124093487,"OriginStatus":403,"Overhead":6648186,"RequestAddr":"www.cleveradmin.de","RequestContentSize":728,"RequestCount":223416,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-15T12:11:15.149486155+02:00","StartUTC":"2026-06-15T10:11:15.149486155Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-15T12:11:15+02:00"} {"ClientAddr":"102.221.29.107:49959","ClientHost":"102.221.29.107 ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 09:11:18 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:11:10.152027 2026] [security2:error] [pid 16402:tid 16402] [client 102.221.29.107:58426] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.29.107 (+1 hits since last alert)\|bluemarineboats.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bluemarineboats.com"] [uri "/xmlrpc.php"] [unique_id "ai_BrsdSLnHXZgjNsJvsXAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 soverin	2026-06-10 17:24:07 (5 days ago)	spam	Email Spam
Anonymous	2026-06-10 09:54:18 (5 days ago)	102.221.29.107 - - [10/Jun/2026:17:54:17 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by ... show more 102.221.29.107 - - [10/Jun/2026:17:54:17 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Bad Web Bot Web App Attack
🇳🇱 soverin	2026-06-08 23:18:06 (1 week ago)	spam	Email Spam
🇳🇱 soverin	2026-06-07 21:29:02 (1 week ago)	spam	Email Spam
🇳🇱 soverin	2026-06-05 15:06:33 (1 week ago)	spam	Email Spam
🇨🇭 Mario Bretscher	2026-06-05 05:02:15 (1 week ago)	Jun 5 07:02:04 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3031456]: Authentication failure for ... show more Jun 5 07:02:04 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3031456]: Authentication failure for marbre! from 102.221.29.107 Jun 5 07:02:13 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3031373]: Authentication failure for marbre! from 102.221.29.107 ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-06-04 21:05:26 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:05:18.349250 2026] [security2:error] [pid 15635:tid 15751] [client 102.221.29.107:11012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.29.107 (+1 hits since last alert)\|hoffmanandassoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hoffmanandassoc.com"] [uri "/xmlrpc.php"] [unique_id "aiHojkeyVpSIan2mHiAoBQAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-06-04 10:20:44 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 integrantservices.com	2026-06-04 10:00:19 (1 week ago)	(wordpress) Failed wordpress login from 102.221.29.107 (GH/Ghana/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-04 07:48:40 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 102.221.29.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:48:36.198744 2026] [security2:error] [pid 6002:tid 6002] [client 102.221.29.107:61857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.29.107 (+1 hits since last alert)\|ramseycountycorruption.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ramseycountycorruption.com"] [uri "/xmlrpc.php"] [unique_id "aiEt1NRrIDj5WzmUgzQZ_QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 20:48:13 (1 week ago)		Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 188.213.92.180

🇲🇽 187.191.48.5

🇫🇮 147.185.133.24

🇸🇪 90.231.51.54

🇳🇱 31.14.32.4

🇫🇷 158.220.111.161

🇵🇭 124.217.61.183

🇳🇿 121.73.162.155

🇱🇧 109.233.21.109

🇵🇱 87.251.64.147

🇨🇳 36.135.100.48

🇺🇸 2604:a940:302:118:0:40::

🇲🇴 182.93.50.90

🇮🇷 151.234.202.251

🇨🇳 124.227.31.68

🇸🇬 118.139.164.171

🇮🇩 103.154.77.48

🇳🇱 45.148.10.240

🇮🇳 27.123.104.78

🇰🇷 221.162.175.253