JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.254.69.12

102.254.69.12 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 48%: ?

48%

ISP	Telkom SA Ltd.
Usage Type	Mobile ISP
ASN	AS37457
Domain Name	telkom.co.za
Country	🇿🇦 South Africa
City	Pretoria, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.254.69.12

Whois 102.254.69.12

IP Abuse Reports for 102.254.69.12:

This IP address has been reported a total of 19 times from 14 distinct sources. 102.254.69.12 was first reported on December 18th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ipoac.nl	2026-10-17 11:42:06 (1 hour ago)	-:443 102.254.69.12 - - [17/Oct/2026:13:42:05 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 5935 "-" "Moz ... show more -:443 102.254.69.12 - - [17/Oct/2026:13:42:05 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 5935 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/97.0.0.0 Safari/537.36" show less	Bad Web Bot
Anonymous	2026-10-16 19:54:32 (16 hours ago)	WordPress login / xmlrpc probing across multiple sites	Web App Attack
🇩🇪 pltcldvlpr	2026-10-16 15:22:18 (21 hours ago)	CMS/framework probe: 102.254.69.12 - - [16/Oct/2026:17:22:17 +0200] "POST /xmlrpc.php HTTP/1.1" 404 ... show more CMS/framework probe: 102.254.69.12 - - [16/Oct/2026:17:22:17 +0200] "POST /xmlrpc.php HTTP/1.1" 404 1499 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" asn=37457 org="Telkom SA Ltd." country=ZA ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-10-16 08:34:57 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 Tha_14	2026-10-15 07:32:30 (2 days ago)	Limit on login attempts is reached	Brute-Force
🇩🇪 LRob	2026-10-08 05:53:50 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-08 05:38:25 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 102.254.69.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 102.254.69.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 01:38:17.638629 2026] [security2:error] [pid 28461:tid 28461] [client 102.254.69.12:62111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|faeriespringsfarm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "faeriespringsfarm.com"] [uri "/"] [unique_id "ascsSXWb-3Csuj_RtAONQAAAAAU"], referer: https://createbacklinksfree.space/dir/powerful-seo-backlinks-69703 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 12:12:05 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 08:27:57 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 07:03:06 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-03 12:15:38 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-24 10:58:29 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-31 23:30:37 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-01 05:40:55 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 16:46:28 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 136.144.160.104

🇨🇳 120.237.113.139

🇨🇳 114.132.92.120

🇮🇳 103.88.76.27

🇺🇸 98.173.235.234

🇳🇱 95.97.25.198

🇵🇱 45.138.12.89

🇨🇦 34.19.156.226

🇺🇸 23.94.155.110

🇰🇷 20.214.147.109

🇺🇸 216.73.160.21

🇧🇷 190.2.78.2

🇨🇳 118.242.18.19

🇦🇴 105.168.234.5

🇱🇦 103.43.76.239

🇰🇿 95.58.255.251

🇦🇪 94.202.91.253

🇦🇷 66.60.27.123

🇮🇳 38.137.58.158

🇨🇳 36.163.118.106