JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.221.34.99

Recent Activity

Abuse Confidence Score

21% Elevated

15 reports

13 reporters · latest 2 days ago

ISP: Angani Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS37684
Domain Name: angani.co
Country: 🇰🇪 Kenya
City: Nairobi, Nairobi County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 13 distinct reporters

First reported

May 10th 2025

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 2 🇧🇷 Brazil 1 🇨🇦 Canada 1

Most common categories Brute-Force 4 Exploited Host 3 Web App Attack 1 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-13 09:46:12 UTC · (2 days ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇧🇷 ICS Labs	2026-10-21 14:40:09 UTC · (3 weeks ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-21 UTC.	Brute-Force Exploited Host
🇨🇿 unhfree.net	2026-10-20 19:30:53 UTC · (3 weeks ago)	Oct 20 21:30:40 canopus postfix/smtpd[1559962]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.2 ... show more Oct 20 21:30:40 canopus postfix/smtpd[1559962]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.221.34.99 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.221.34.99; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<IEIPlNx> Oct 20 21:30:43 canopus postfix/smtpd[1559962]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.221.34.99 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.221.34.99; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<e3CKxP> Oct 20 21:30:46 canopus postfix/smtpd[1559962]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamh ... show less	Brute-Force Exploited Host
🇿🇦 maximonline.co.za	2026-10-20 19:30:16 UTC · (3 weeks ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇨🇿 unhfree.net	2026-09-17 10:09:11 UTC · (1 month ago)	Sep 17 12:09:01 canopus postfix/smtpd[1444167]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.2 ... show more Sep 17 12:09:01 canopus postfix/smtpd[1444167]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.221.34.99 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.221.34.99; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dJK4tLH> Sep 17 12:09:03 canopus postfix/smtpd[1444073]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/102.221.34.99 / Listed by XBL, see https://check.spamhaus.org/query/ip/102.221.34.99; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<nZmUfoV> Sep 17 12:09:06 canopus postfix/smtpd[1444167]: NOQUEUE: reject: RCPT from unknown[102.221.34.99]: 554 5.7.1 Service unavailable; Client host [102.221.34.99] blocked using zen.spam ... show less	Brute-Force Exploited Host
Anonymous	2026-06-04 04:31:19 UTC · (5 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇮🇩 xveil	2026-06-03 02:08:39 UTC · (5 months ago)	2026-06-03T09:08:36.864612 mail-honeypot postfix/submission/smtpd[17005]: warning: unknown[102.221.34.99]: SASL LOGIN authentication failed: authentication failure ...	Brute-Force
🇪🇸 sshtmp	2026-05-23 22:52:10 UTC · (5 months ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 85 \| First: 2026-05-19T02:32:58+02:00 \| Last: 2026-05-24T00:52:10+02:00 Samples: POST /xmlrpc.php [200]	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 01:22:01 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 102.221.34.99 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 21:21:53.715816 2026] [security2:error] [pid 8494:tid 8494] [client 102.221.34.99:59908] Mod ... show more (mod_security) mod_security (id:240335) triggered by 102.221.34.99 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 21:21:53.715816 2026] [security2:error] [pid 8494:tid 8494] [client 102.221.34.99:59908] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.34.99 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "agu7MVlJ00XkXiX91R2dYgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-04-29 00:45:52 UTC · (6 months ago)	102.221.34.99 - - [29/Apr/2026:0 ...	Brute-Force
🇮🇹 [email protected]	2026-04-28 23:37:36 UTC · (6 months ago)	[Wed Apr 29 01:37:35.914110 2026] [authz_core:error] [pid 4152699:tid 4152749] [client 102.221.34.99:51331] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php ...	Brute-Force Web App Attack
🇩🇪 MBombeck	2026-04-13 18:04:36 UTC · (7 months ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
Anonymous	2026-04-13 15:28:07 UTC · (7 months ago)	access denied too many times (more than 12 attempts in 60 seconds) ...	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-02-11 08:14:17 UTC · (9 months ago)	(mod_security) mod_security (id:240335) triggered by 102.221.34.99 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 03:14:10.116933 2026] [security2:error] [pid 17692:tid 17692] [client 102.221.34.99:60410] M ... show more (mod_security) mod_security (id:240335) triggered by 102.221.34.99 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 03:14:10.116933 2026] [security2:error] [pid 17692:tid 17692] [client 102.221.34.99:60410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.221.34.99 (+1 hits since last alert)\|www.goddesskink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.goddesskink.com"] [uri "/new/xmlrpc.php"] [unique_id "aYw6UowN2WoNd93pFYf0WwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-10 12:58:23 UTC · (1 year ago)	Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.90

🇧🇷 177.66.185.122

🇨🇦 172.71.120.53

🇨🇳 112.29.109.174

🇩🇪 109.160.32.132

🇺🇸 34.153.18.236

🇩🇪 109.160.32.171

🇺🇸 100.29.192.88

🇹🇭 27.130.82.46

🇷🇴 2.57.121.25

🇺🇸 194.187.179.154

🇬🇧 193.176.29.11

🇷🇴 193.32.162.15

🇲🇽 189.203.145.47

🇨🇳 115.231.50.242

🇮🇳 103.248.120.6

🇷🇺 88.218.75.163

🇷🇴 80.94.95.116

🇺🇦 46.174.127.168

🇯🇵 35.187.199.63