AbuseIPDB » 102.39.63.120

102.39.63.120 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 20%: ?

20%

ISP	Vox Telecom
Usage Type	Fixed Line ISP
ASN	AS11845
Domain Name	vox.co.za
Country	South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 102.39.63.120

Whois 102.39.63.120

IP Abuse Reports for 102.39.63.120:

This IP address has been reported a total of 16 times from 8 distinct sources. 102.39.63.120 was first reported on March 17th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
el-brujo	2025-06-10 04:34:16 (1 week ago)	06/10/2025-06:34:15.917665 102.39.63.120 Protocol: 6 GPL POLICY SOCKS Proxy attempt	Port Scan
nowyouknow	2025-06-10 00:11:23 (1 week ago)	(From [email protected])	Phishing Web Spam
nowyouknow	2025-06-07 23:13:28 (2 weeks ago)	(From [email protected])	Phishing Web Spam
nowyouknow	2025-05-20 21:20:18 (1 month ago)	(From [email protected])	Phishing Web Spam
el-brujo	2025-05-20 12:59:46 (1 month ago)	05/20/2025-14:59:46.759289 102.39.63.120 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
TPI-Abuse	2025-05-01 03:07:39 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 102.39.63.120 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 102.39.63.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 23:07:34.025902 2025] [security2:error] [pid 12924:tid 12924] [client 102.39.63.120:46721] [client 102.39.63.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBLldnAoOb4NkWGMRu-YZgAAAAI"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
unhfree.net	2025-04-29 09:09:03 (1 month ago)	Apr 29 09:06:38 canopus postfix/smtpd[1872479]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 5 ... show moreApr 29 09:06:38 canopus postfix/smtpd[1872479]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 09:06:38 canopus postfix/smtpd[1872479]: too many errors after RCPT from unknown[102.39.63.120] Apr 29 09:36:53 canopus postfix/smtpd[1872334]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 29 09:36:53 canopus postfix/smtpd[1872334]: too many errors after RCPT from unknown[102.39.63.120] Apr 29 11:09:02 canopus postfix/smtpd[1894507]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minute ... show less	Brute-Force Exploited Host
ThreatBook.io	2025-04-24 01:04:44 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.39.63.120	Brute-Force
unhfree.net	2025-04-22 03:05:56 (2 months ago)	Apr 22 04:48:13 canopus postfix/smtpd[1176308]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 5 ... show moreApr 22 04:48:13 canopus postfix/smtpd[1176308]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 22 04:48:13 canopus postfix/smtpd[1176308]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 22 04:48:13 canopus postfix/smtpd[1176308]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 22 04:48:13 canopus postfix/smtpd[1176308]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient ad ... show less	Brute-Force Exploited Host
unhfree.net	2025-04-04 03:15:24 (2 months ago)	Apr 4 01:05:53 canopus postfix/smtpd[3510126]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 5 ... show moreApr 4 01:05:53 canopus postfix/smtpd[3510126]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 4 01:05:53 canopus postfix/smtpd[3510126]: too many errors after RCPT from unknown[102.39.63.120] Apr 4 03:02:11 canopus postfix/smtpd[3509990]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 4 03:02:11 canopus postfix/smtpd[3509990]: too many errors after RCPT from unknown[102.39.63.120] Apr 4 05:15:24 canopus postfix/smtpd[3543274]: NOQUEUE: reject: RCPT from unknown[102.39.63.120]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reache ... show less	Brute-Force Exploited Host
rh24	2025-04-02 13:15:35 (2 months ago)	(contact-forms) Failed contact-forms trigger with match [redacted] from 102.39.63.120 (ZA/South Afri ... show more(contact-forms) Failed contact-forms trigger with match [redacted] from 102.39.63.120 (ZA/South Africa/-): (CF_ENABLE) show less	Hacking
ThreatBook.io	2025-03-31 01:47:24 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.39.63.120	Brute-Force
Savvii	2025-03-25 18:29:51 (2 months ago)	20 attempts against mh_ha-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
ThreatBook.io	2025-03-25 01:29:11 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/102.39.63.120	Brute-Force
FeG Deutschland	2025-03-22 12:17:32 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 17	Exploited Host Web App Attack

Showing 1 to 15 of 16 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

116.105.219.194

35.185.59.178

176.29.27.153

190.203.114.176

209.38.121.119

107.150.0.3

104.152.52.139

121.229.206.21

146.190.22.201

220.250.11.152

207.231.108.67

117.15.88.45

192.83.150.74

81.192.87.130

52.178.188.49

85.206.169.20

15.235.182.49

103.86.198.253

117.213.56.196

192.99.37.124