JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.249.36.22

102.249.36.22 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Telkom SA Limited
Usage Type	Fixed Line ISP
ASN	AS37457
Hostname(s)	8ta-249-36-22.telkomadsl.co.za
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Gqeberha, Eastern Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.249.36.22

Whois 102.249.36.22

IP Abuse Reports for 102.249.36.22:

This IP address has been reported a total of 28 times from 23 distinct sources. 102.249.36.22 was first reported on October 28th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 reportingbot	2026-07-14 12:35:00 (11 hours ago)	WordPress admin webpage brute force login attempts	Brute-Force Bad Web Bot Exploited Host Web App Attack Hacking
Anonymous	2026-07-14 03:31:05 (20 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 oralunal	2026-07-13 21:57:21 (1 day ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-13 05:20:05 (1 day ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 01:40:43 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 102.249.36.22 (8ta-249-36-22.telkomadsl.co.za): ... show more (mod_security) mod_security (id:240335) triggered by 102.249.36.22 (8ta-249-36-22.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 21:40:37.564963 2026] [security2:error] [pid 12236:tid 12236] [client 102.249.36.22:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 102.249.36.22 (+1 hits since last alert)\|avaliantlife.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "avaliantlife.com"] [uri "/xmlrpc.php"] [unique_id "alRCFRWxZwdzeypaMUrI3AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-12 13:32:30 (2 days ago)	102.249.36.22 - - [12/Jul/2026:15:32:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by ... show more 102.249.36.22 - - [12/Jul/2026:15:32:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" 102.249.36.22 - - [12/Jul/2026:15:32:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 102.249.36.22 - - [12/Jul/2026:15:32:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇺🇸 integrantservices.com	2026-07-11 13:31:19 (3 days ago)	(wordpress) Failed wordpress login from 102.249.36.22 (8ta-249-36-22.telkomadsl.co.za)	Brute-Force
🇳🇱 ipoac.nl	2026-07-11 12:34:19 (3 days ago)	2026-07-11T14:34:18.487892+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown ... show more 2026-07-11T14:34:18.487892+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown user 5fm from 102.249.36.22 show less	Web App Attack
🇬🇧 Steve	2026-07-11 01:48:58 (3 days ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-10 21:10:28 (4 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ZA/South Africa/8ta-249-36-22.telkomadsl.co.za	Web App Attack
🇩🇪 dbmwebdesign	2026-07-10 14:00:04 (4 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 4server	2026-07-10 09:43:32 (4 days ago)	[FriJul1011:43:27.2122892026][security2:error][pid1136428:tid1136525][client102.249.36.22:0]ModSecur ... show more [FriJul1011:43:27.2122892026][security2:error][pid1136428:tid1136525][client102.249.36.22:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"pluriball.ch\"][uri\"/xmlrpc.php\"][unique_id\"alC-v9hIQfdGRXgz7fkJWgAAAMs\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-10 07:48:18 (4 days ago)	102.249.36.22 - - [10/Jul/2026:03:47:36 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "Jetpack/13. ... show more 102.249.36.22 - - [10/Jul/2026:03:47:36 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "Jetpack/13.0; WordPress/6.2; http://site59060358.com" 102.249.36.22 - - [10/Jul/2026:03:47:46 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "WordPress.com; https://wordpress.com" 102.249.36.22 - - [10/Jul/2026:03:47:57 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "Jetpack by WordPress.com" 102.249.36.22 - - [10/Jul/2026:03:48:07 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "Jetpack/12.5; WordPress/6.4; http://site74599184.com" 102.249.36.22 - - [10/Jul/2026:03:48:18 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5050 "-" "Jetpack/12.5; WordPress/6.1; http://site19558855.com" ... show less	Web App Attack
🇺🇸 IndigoRidge	2026-07-09 18:30:02 (5 days ago)	102.249.36.22 - - [09/Jul/2026:14:29:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack by ... show more 102.249.36.22 - - [09/Jul/2026:14:29:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack by WordPress.com" 102.249.36.22 - - [09/Jul/2026:14:29:29 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack/13.0; WordPress/6.1; http://site88742040.com" 102.249.36.22 - - [09/Jul/2026:14:29:40 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack/12.0; WordPress/6.4; http://site20829120.com" 102.249.36.22 - - [09/Jul/2026:14:29:50 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack by WordPress.com" 102.249.36.22 - - [09/Jul/2026:14:30:01 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "Jetpack by WordPress.com" ... show less	Web App Attack
🇱🇻 garmtech.com	2026-07-09 17:16:12 (5 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 81.19.216.78

🇳🇱 91.92.40.239

🇺🇸 66.132.224.21

🇵🇰 151.123.253.11

🇧🇷 136.248.121.226

🇮🇳 117.206.235.117

🇨🇦 85.217.149.24

🇱🇧 80.77.189.83

🇳🇱 45.148.10.157

🇳🇱 45.148.10.151

🇧🇷 205.210.31.153

🇩🇪 165.232.64.6

🇺🇸 81.30.98.194

🇮🇩 36.76.138.87

🇷🇴 2.57.122.238

🇦🇷 186.130.87.67

🇩🇪 185.242.3.195

🇨🇦 165.140.229.134

🇷🇺 37.190.61.175

🇨🇳 182.116.126.32