JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.129.247.188

Recent Activity

Abuse Confidence Score

40% Elevated

17 reports

11 reporters · latest 6 days ago

ISP: Huize Telecom Malaysia
Usage Type: Fixed Line ISP
ASN: AS20001
Domain Name: huize.asia
Country: 🇺🇸 United States of America
City: Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

17 from 11 distinct reporters

First reported

August 15th 2026

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇫🇷 France 4 🇩🇪 Germany 3 🇮🇩 Indonesia 3

Most common categories Web App Attack 9 Bad Web Bot 5 Hacking 5 Email Spam 3 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-11-07 12:19:46 UTC · (6 days ago)	[Sat Nov 07 19:19:46.094759 2026] [security2:error] [pid 250401:tid 139734856746688] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset- ... show more [Sat Nov 07 19:19:46.094759 2026] [security2:error] [pid 250401:tid 139734856746688] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/tel:+62341461388"] [unique_id "au8XYm8ahjdIC3NtiaVELAAAAQ0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[250445] [foKMvgYq8L8] [au8XYm8ahjdIC3NtiaVELA ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-11-06 06:17:42 UTC · (1 week ago)	[Fri Nov 06 13:17:41.314644 2026] [security2:error] [pid 59760:tid 139782504040128] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4 ... show more [Fri Nov 06 13:17:41.314644 2026] [security2:error] [pid 59760:tid 139782504040128] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/prakiraan-musim/4155-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/tel:+62341461595 request_line = GET /index.php/prakiraan-musim/4155-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4155-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/tel:+62341461595"] [unique_id "au1xBY4mMJTL ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-11-06 02:45:38 UTC · (1 week ago)	[Fri Nov 06 09:45:37.601207 2026] [security2:error] [pid 109713:tid 140165846656704] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset- ... show more [Fri Nov 06 09:45:37.601207 2026] [security2:error] [pid 109713:tid 140165846656704] [client 102.129.247.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/2047-klimatologi/analisis-klimatologi/monitoring-kekeringan-dengan-metode-indeks-presipitasi-terstandarisasi-spi/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/2047-klimatologi/analisis-klimatologi/monitoring-kekeringan-dengan-metode-indeks-presipitasi-terstandarisasi-spi/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/2047-klimatologi/analisis-klimatologi/monitoring-k ... show less	Email Spam Hacking
🇩🇪 expandmade.com	2026-10-31 00:43:58 UTC · (2 weeks ago)	detect header anomalies [31/Oct/2026:00:43:58 "GET /tour-cervecero-en-budapest-cerveza-artesanal-y-ruin-pubs"]	Web App Attack
🇫🇷 Campus France	2026-10-30 16:33:40 UTC · (2 weeks ago)	[Fri Oct 30 17:33:29.861997 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat [Fri Oct 30 17:33:31.932578 2026] [php:error] [pid 3646769] [client 102.129.247.188:1438 ... show more [Fri Oct 30 17:33:29.861997 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat [Fri Oct 30 17:33:31.932578 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat [Fri Oct 30 17:33:33.872816 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat [Fri Oct 30 17:33:37.122713 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat [Fri Oct 30 17:33:39.470238 2026] [php:error] [pid 3646769] [client 102.129.247.188:14387] script '/var/www/html/brume.org/index.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-10-26 07:54:47 UTC · (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇫🇷 masterguru	2026-10-24 14:57:03 UTC · (2 weeks ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(GoogleOther\|amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot\|OPR/\|Edg/\|EdgA/\|EdgiOS/\|Vivaldi/\|SamsungBrowser/\|YaBrowser/)" against "REQUEST_HEADERS:User-Agent" required. (780532-133)	Hacking
🇩🇪 FeG Deutschland	2026-10-22 20:09:17 UTC · (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 17:13:01 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 102.129.247.188 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:12:57.196936 2026] [security2:error] [pid 11251:tid 11251] [client 102.129.247.188:6298 ... show more (mod_security) mod_security (id:210730) triggered by 102.129.247.188 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:12:57.196936 2026] [security2:error] [pid 11251:tid 11251] [client 102.129.247.188:62983] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brickyardinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brickyardinn.com"] [uri "/mail to: [email protected]"] [unique_id "atOsmZP6ZN_HLJl2qZEpCQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-10 13:39:15 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.goblinpot.space \| URI: /.git/HEAD \| UA: Mozi ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.goblinpot.space \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-09 15:58:21 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.astropot.space \| URI: /.env \| UA: Mozilla/ ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.astropot.space \| URI: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-09 09:16:03 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.teddypot.pro \| URI: /.env \| UA: Mozilla/5. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.teddypot.pro \| URI: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-10-05 03:42:06 UTC · (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇫🇷 spot	2026-10-04 07:52:38 UTC · (1 month ago)	102.129.247.188 - - [04/Oct/2026:08:52:38 +0100] "GET /./../../viewforum.php?f=25&sid=1f20ced9fd8773704ed163b4093a4748 HTTP/1.1" 400 4695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Saf ... show more 102.129.247.188 - - [04/Oct/2026:08:52:38 +0100] "GET /./../../viewforum.php?f=25&sid=1f20ced9fd8773704ed163b4093a4748 HTTP/1.1" 400 4695 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Web App Attack VPN IP
🇫🇷 conseilgouz	2026-09-27 09:01:42 UTC · (1 month ago)	scw-Joomla User : try to access forms...	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.85

🇹🇭 203.170.192.251

🇦🇷 201.180.119.130

🇺🇸 216.25.124.26

🇳🇱 192.42.116.47

🇺🇸 185.61.223.91

🇸🇦 79.170.53.30

🇺🇸 65.49.1.147

🇧🇪 35.210.11.30

🇧🇪 34.38.190.31

🇺🇸 20.171.192.133

🇫🇮 213.232.122.70

🇲🇾 121.122.244.154

🇫🇷 91.231.89.110

🇺🇸 66.132.172.151

🇧🇪 35.210.254.127

🇫🇷 91.196.152.10

🇺🇸 162.35.102.79

🇸🇪 90.230.212.29

🇫🇷 88.187.215.199