JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.23.199.54

102.23.199.54 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 20%: ?

20%

ISP	TOUCHNET TELECOMMUNICATIONS CC
Usage Type	Fixed Line ISP
ASN	AS328548
Domain Name	touchnet.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.23.199.54

Whois 102.23.199.54

IP Abuse Reports for 102.23.199.54:

This IP address has been reported a total of 3 times from 3 distinct sources. 102.23.199.54 was first reported on August 4th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 15:57:11 (4 hours ago)	(mod_security) mod_security (id:210350) triggered by 102.23.199.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.23.199.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:57:03.663963 2026] [security2:error] [pid 25080:tid 25080] [client 102.23.199.54:51848] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|holgerfeld.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "holgerfeld.com"] [uri "/"] [unique_id "aqq8T3kqkbhdnJRx_skGUQAAAA4"], referer: https://energycapitalinvestments.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 09:08:31 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A315&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A329&f%5B3%5D=digest_key_terms%3A521&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B495%5D=495 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-04 08:46:21 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~322,152,145/tag_ids~338,339,417,225,278/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 show less	DDoS Attack Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 152.52.197.130

🇮🇷 78.38.84.140

🇰🇷 218.154.239.50

🇨🇳 218.29.231.106

🇧🇷 177.180.61.74

🇮🇩 103.121.196.250

🇳🇱 45.148.10.157

🇺🇸 44.244.226.255

🇺🇸 34.75.118.169

🇺🇸 20.80.93.101

🇺🇸 195.184.76.68

🇮🇩 163.7.6.114

🇸🇦 142.154.1.26

🇺🇸 136.66.136.96

🇳🇱 89.248.167.131

🇫🇷 85.217.140.42

🇺🇸 44.246.251.188

🇺🇸 44.223.17.17

🇺🇸 40.119.46.5

🇺🇸 18.116.101.220