169.1.202.121

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
27 reports
20 reporters · latest 12 hours ago
ISP
AFRIHOST SP (PTY) LTD
Usage Type
Fixed Line ISP
ASN
AS37611
Hostname(s)
169-1-202-121.ip.ahisp.co.za
Domain Name
afrihost.com
Country
🇿🇦 South Africa
City
Cape Town, Western Cape
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 11 🇨🇿 Czechia 4 🇲🇹 Malta 3
Most common categories Web App Attack 22 Brute-Force 14 Hacking 8 Bad Web Bot 7 VPN IP 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 Budyn
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_10 | Action: AWS API Call | Token ID: 53hmvky4jw5pgwl8xxid8p06l | Client tool: silentvs-hitworker/1
Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack
🇺🇸 johnp
Hostile web requests to a website: /wp-login.php (1 request, 2026-11-13 23:24:03 UTC to 2026-11-13 23:24:03 UTC). User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
Brute-Force Web App Attack
🇦🇺 QT
Unauthorised WordPress admin login attempted at 2026-11-12 11:54:42 +1000
Web App Attack
🇦🇺 Klaverstyn
Excessive HTTP request rate
Web App Attack
Anonymous
| [Dangerous/South Africa] Aggressive IP 169.1.202.121 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack Hacking SQL Injection
🇫🇷 dynamix
WordPress wp-login.php Brute Force Attack
Brute-Force Web App Attack
🇲🇹 Malta
Hacking Web App Attack Brute-Force
🇲🇽 octageeks.com
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 169.1.202.121 2026-11-02T11:16:24+0100 vpn Access-Reject station: 169.1.202.121
Brute-Force Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇬🇧 spamverify.com
Honeypot Hit: xmlrpc.php
Web Spam Blog Spam Bad Web Bot Web App Attack
🇲🇹 Malta
169.1.202.121 - - [28/Oct/2026:12:51:56 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇺🇸 lostswordfish.com
Wordfence waf block on registrymatters
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 66.132.172.43
🇷🇺 5.228.114.173
🇩🇪 212.30.36.43
🇳🇱 193.176.31.217
🇺🇸 143.244.155.101
🇺🇸 142.93.206.133
🇮🇳 115.97.52.36
🇸🇰 92.52.42.141
🇳🇱 34.178.58.226
🇮🇱 20.217.29.214
🇺🇸 20.46.242.228
🇩🇪 212.30.36.6
🇺🇸 206.81.2.216
🇻🇳 171.226.12.127
🇺🇸 162.216.150.152
feedback