102.68.120.58

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
207 reports
116 reporters · latest 1 day ago
ISP
Too Much Wifi
Usage Type
Fixed Line ISP
ASN
AS328480
Domain Name
toomuchwifi.co.za
Country
🇿🇦 South Africa
City
Cape Town, Western Cape
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
207 from 116 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 18 🇩🇪 Germany 14 🇨🇿 Czechia 8
Most common categories Web App Attack 31 Brute-Force 27 Bad Web Bot 20 Hacking 13 SSH 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
POST /xmlrpc.php HTTP/1.1 ...
Brute-Force
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 RAP
2026-11-12 12:54:48 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇩🇪 D3vNu11
Level: (LOW): Web Attacker via Cowrie IOC Country: South Africa 1x -> Target Country: Frankreich SSH
Hacking Brute-Force SSH
🇪🇸 librebit
Brute force
Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T12:02:52Z.
Bad Web Bot
🇺🇸 lostswordfish.com
Wordfence waf block on registrymatters
Web App Attack
🇫🇷 ingroscart.it
(wordpress) Failed wordpress login from 102.68.120.58 (ZA/South Africa/Western Cape/Cape Town/-/[redacted])
Brute-Force
🇹🇷 ugurcoskun
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-11-05 04:02
SSH Brute-Force
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 102.68.120.58 2026-11-05T00:39:33+0100 vpn Access-Reject station: 102.68.120.58
Brute-Force Web App Attack
🇩🇪 ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
🇩🇪 throny
Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 191.253.28.189
🇱🇾 102.211.7.162
🇸🇪 83.219.198.230
🇺🇸 70.184.75.15
🇺🇸 34.9.251.221
🇺🇸 5.183.254.67
🇺🇸 162.216.149.247
🇫🇮 157.22.44.87
🇩🇿 154.240.200.62
🇨🇳 117.50.44.85
🇸🇮 102.220.161.85
🇵🇰 101.53.229.247
🇧🇬 79.124.58.74
🇩🇪 8.211.7.142
🇰🇷 222.109.132.225
🇳🇿 202.180.71.165
🇧🇷 189.84.139.12
🇺🇸 172.190.99.208
🇩🇪 159.89.27.191
🇷🇺 94.103.93.175
feedback