AbuseIPDB » 102.252.50.3
102.252.50.3
This IP was reported 6 times. Confidence of
Abuse
is 15% : ?
ISP
Telkom SA Limited
Usage Type
Mobile ISP
ASN
AS37457
Hostname(s)
8ta-252-50-03.telkomadsl.co.za
Domain Name
telkom.co.za
Country
🇿🇦
South Africa
City
Durban, KwaZulu-Natal
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 102.252.50.3 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
102.252.50.3 was first reported on
March 16th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-18 15:57:10
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 102.252.50.3 (8ta-252-50-03.telkomadsl.co.za): ...
show more
(mod_security) mod_security (id:210350) triggered by 102.252.50.3 (8ta-252-50-03.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:57:05.246374 2026] [security2:error] [pid 846:tid 924] [client 102.252.50.3:42254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jevan1.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jevan1.com"] [uri "/"] [unique_id "aq1fUZAfzbF2UMdpTO3FsAAAAc4"], referer: https://bulkbacklinkanalysis.shop/dir/strong-seo-backlinks-106429
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-08 13:28:44
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T13:28:44Z.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-22 23:24:33
(1 month ago)
(mod_security) mod_security (id:217210) triggered by 102.252.50.3 (8ta-252-50-03.telkomadsl.co.za): ...
show more
(mod_security) mod_security (id:217210) triggered by 102.252.50.3 (8ta-252-50-03.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 19:24:27.271315 2026] [security2:error] [pid 2260712:tid 2260718] [client 102.252.50.3:49267] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||gafm.com|F|4"] [data "GET http://gafm.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gafm.com"] [uri "/"] [unique_id "amFRK4bOcIsbGW_DvSWwFwAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-04-07 17:35:09
(5 months ago)
IPS detection: Comtrend.VR-3033.Remote.Command.Injection
Hacking
🇨🇿
Countryman
2026-04-07 17:35:09
(5 months ago)
IPS detection: Comtrend.VR-3033.Remote.Command.Injection
Hacking
🇩🇪
Hazzard
2026-03-16 13:01:24
(6 months ago)
102.252.50.3 (ZA/South Africa/KwaZulu-Natal/Durban/8ta-252-50-03.telkomadsl.co.za/[redacted]
Brute-Force
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: