JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.253.35.2

102.253.35.2 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 25%: ?

25%

ISP	Telkom SA Limited
Usage Type	Mobile ISP
ASN	AS37457
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.253.35.2

Whois 102.253.35.2

IP Abuse Reports for 102.253.35.2:

This IP address has been reported a total of 17 times from 13 distinct sources. 102.253.35.2 was first reported on November 21st 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 pixelmemory.us	2026-10-22 15:02:22 (17 hours ago)	2026-10-22T15:00:15 102.253.35.2 GET /Photos/Outdoors/2020-04-07%20Pink%20Moon/raw/DSC03307.ARW.xmp ... show more 2026-10-22T15:00:15 102.253.35.2 GET /Photos/Outdoors/2020-04-07%20Pink%20Moon/raw/DSC03307.ARW.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 LRob	2026-10-21 13:08:35 (1 day ago)	Code forge crawl (headless) \| path: /WP/email-toolkit/commits/commit/bda92c1212b2768359363d8d7231ea7 ... show more Code forge crawl (headless) \| path: /WP/email-toolkit/commits/commit/bda92c1212b2768359363d8d7231ea784f991666/docs \| src_port: 53136 show less	Bad Web Bot
Anonymous	2026-10-12 01:34:41 (1 week ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-26 08:42:06 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-20 04:45:38 (2 months ago)	Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a ... show more Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/11377/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvY2F0YWxvZ3NlYXJjaC9yZXN1bHQvP2lwdGVsX2FwcGxpY2F0aW9uPTE3OSZhbXA7bW9kZT1saXN0JmFtcDtxPWV4Kzkw/form_key/7cA3DRAQ11ZDXvvg/ \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 1_1_5 like Mac OS X) AppleWebKit/534.2 (KHTML, like Gecko) FxiOS/14.6v9139.0 Mobile/17E887 Safari/534.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇷🇸 Scan	2026-08-20 02:00:44 (2 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 Zkillu	2026-08-19 20:04:08 (2 months ago)	UDP flood (DDoS) vs AS215599: 404 pkts / 0.58 MB to UDP 80 across 105 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 404 pkts / 0.58 MB to UDP 80 across 105 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 20:04:08 (2 months ago)	UDP flood (DDoS) vs AS215599: 404 pkts / 0.58 MB to UDP 80 across 105 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 404 pkts / 0.58 MB to UDP 80 across 105 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-01 09:35:44 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-29 05:48:47 (3 months ago)	102.253.35.2 \| Port: 13559 \| DNS: 8ta-253-35-02.telkomadsl.co.za 2026-06-29T13:48:46+08:00 Africa/Jo ... show more 102.253.35.2 \| Port: 13559 \| DNS: 8ta-253-35-02.telkomadsl.co.za 2026-06-29T13:48:46+08:00 Africa/Johannesburg \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /ms?8c9d9eafcf98e99=708 \| Ref: https://xxxxxx \| Country: ZA/South Africa/+02:00 IP City: Johannesburg Windows a132a4de5e4b73c3-JNB/Johannesburg, South Africa 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇩 hermawan	2026-06-28 07:59:27 (3 months ago)	1782633559.023156 102.253.35.2 103.166.156.58 65535_2-4-8-1-3_1280_10 2026-06-28 14:59:19 WIB ...	Email Spam Hacking
🇮🇩 hermawan	2026-06-11 23:53:39 (4 months ago)	1781222007.644756 102.253.35.2 103.166.156.58 65535_2-4-8-1-3_1280_6 2026-06-12 06:53:27 WIB ...	Email Spam Hacking
Anonymous	2026-02-04 22:07:46 (8 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-12-15 07:08:28 (10 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
Anonymous	2025-12-08 12:56:00 (10 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.17

🇳🇱 178.16.55.167

🇨🇳 117.176.131.211

🇮🇹 95.245.15.85

🇮🇹 93.71.161.202

🇮🇹 93.70.230.30

🇫🇷 91.196.152.184

🇫🇷 91.196.152.126

🇫🇷 85.217.140.48

🇪🇸 46.253.45.10

🇺🇦 2a03:2880:f165:89:face:b00c:0:79f4

🇵🇾 200.50.159.0

🇷🇺 194.8.129.16

🇺🇸 185.198.240.70

🇻🇳 171.238.68.38

🇹🇭 113.53.176.11

🇲🇦 105.157.157.124

🇮🇹 93.66.86.184

🇫🇷 91.196.152.125

🇧🇬 91.191.209.46