JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.213.179.104

102.213.179.104 was found in our database!

This IP was reported 505 times. Confidence of Abuse is 100%: ?

100%

ISP	ADC
Usage Type	Fixed Line ISP
ASN	AS329261
Domain Name	nextthingnetworks.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.213.179.104

Whois 102.213.179.104

IP Abuse Reports for 102.213.179.104:

This IP address has been reported a total of 505 times from 139 distinct sources. 102.213.179.104 was first reported on March 1st 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-09-11 06:50:19 (10 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-11 06:41:39 (10 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇩🇪 rh24	2026-09-11 04:29:38 (12 hours ago)	(xmlrpc_405) XMLRPC-Bot 405 102.213.179.104 (KE/Kenya/-)	Hacking
🇩🇪 Marc	2026-09-10 21:46:03 (19 hours ago)	102.213.179.104 - - [10/Sep/2026:23:45:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4846 "-" "Jetpack b ... show more 102.213.179.104 - - [10/Sep/2026:23:45:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4846 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 102.213.179.104 - - [10/Sep/2026:23:45:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4847 "-" "Jetpack by WordPress.com" 102.213.179.104 - - [10/Sep/2026:23:46:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4846 "-" "Jetpack/12.5; WordPress/6.3; http://site48264088.com" show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-10 14:00:33 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 RH5	2026-09-10 10:44:50 (1 day ago)	Restricted URL probing (/xmlrpc.php) (UTC 2026-09-10 10:44)	Web App Attack
🇹🇷 ycoskun41	2026-09-10 04:44:24 (1 day ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-09-09 18:07:02 (1 day ago)	Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇲🇹 Malta	2026-09-09 01:03:25 (2 days ago)	102.213.179.104 - - [09/Sep/2026:03:03:24 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack/13.0; WordPres ... show more 102.213.179.104 - - [09/Sep/2026:03:03:24 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack/13.0; WordPress/6.3; http://site94136442.com" show less	Hacking Web App Attack
🇭🇷 bubausluge	2026-09-08 21:29:55 (2 days ago)	Blocked by https://aegis.hr — Aegis Single-Hit: WordPress wlwmanifest Probe - (MITRE T1595.001), 300 ... show more Blocked by https://aegis.hr — Aegis Single-Hit: WordPress wlwmanifest Probe - (MITRE T1595.001), 300 attempts, Period: 2026-09-08 05:03:37 to 2026-09-08 05:31:27 show less	Port Scan
🇸🇪 ljo	2026-09-08 10:27:08 (3 days ago)	102.213.179.104 - - [08/Sep/2026:12:25:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "WordPress ... show more 102.213.179.104 - - [08/Sep/2026:12:25:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "WordPress.com; https://wordpress.com" 102.213.179.104 - - [08/Sep/2026:12:25:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/13.0; WordPress/6.4; http://site24205128.com" 102.213.179.104 - - [08/Sep/2026:12:25:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 102.213.179.104 - - [08/Sep/2026:12:26:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 102.213.179.104 - - [08/Sep/2026:12:26:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack by WordPress.com" 102.213.179.104 - - [08/Sep/2026:12:26:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/12.5; WordPress/6.1; http://site75790422.com" 102.213.179.104 - - [08/Sep/2026:12:26:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2509 "-" "Jetpack/12.0; WordPress/6.3; http://site96404979.com" 102.213.179.104 - - [08/S ... show less	Web App Attack
🇫🇮 bittiguru.fi	2026-09-08 07:51:42 (3 days ago)	102.213.179.104 - [08/Sep/2026:10:51:32 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18961 "-" "Jetpack/13 ... show more 102.213.179.104 - [08/Sep/2026:10:51:32 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18961 "-" "Jetpack/13.0; WordPress/6.3; http://site61708525.com" "-" 102.213.179.104 - [08/Sep/2026:10:51:41 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18048 "-" "Jetpack by WordPress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-09-08 07:36:27 (3 days ago)	102.213.179.104 - [08/Sep/2026:10:36:18 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18961 "-" "Jetpack/12 ... show more 102.213.179.104 - [08/Sep/2026:10:36:18 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18961 "-" "Jetpack/12.1; WordPress/6.2; http://site57358686.com" "-" 102.213.179.104 - [08/Sep/2026:10:36:27 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18048 "-" "WordPress.com; https://wordpress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-09-07 22:14:04 (3 days ago)		Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-07 11:29:41 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 505 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 172.68.119.154

🇯🇵 172.68.119.29

🇻🇳 164.52.105.37

🇺🇸 136.107.95.27

🇦🇴 105.175.227.129

🇲🇦 105.67.130.154

🇺🇸 34.172.207.235

🇺🇸 2607:f8b0:4004:1002::128

🇨🇦 208.111.67.36

🇦🇷 201.213.169.194

🇳🇱 195.178.110.30

🇺🇦 176.105.200.223

🇵🇱 176.53.159.198

🇺🇸 172.86.114.38

🇮🇳 122.166.253.226

🇷🇺 109.195.50.100

🇺🇸 66.132.186.185

🇲🇼 41.75.123.75

🇰🇷 34.64.154.24

🇺🇸 2600:1f14:1285:4501:cd52:5e3:3f16:1145