JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.239.209.12

169.239.209.12 was found in our database!

This IP was reported 188 times. Confidence of Abuse is 48%: ?

48%

ISP	Interworks
Usage Type	Fixed Line ISP
ASN	AS327983
Hostname(s)	mzanzi.interworks.co.za
Domain Name	interworks.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.239.209.12

Whois 169.239.209.12

IP Abuse Reports for 169.239.209.12:

This IP address has been reported a total of 188 times from 90 distinct sources. 169.239.209.12 was first reported on April 3rd 2021, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-07-03 05:06:56 (17 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-07-01 02:00:42 (2 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/diode-dynamics.html ua='Moz ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/diode-dynamics.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-29 08:47:27 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-20 17:11:28 (1 week ago)	Image scraping bot bypassing firewall/robots.txt restrictions in getImage.asp	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-10 22:06:14 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 nodepile	2026-06-07 11:16:15 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇮🇩 Konaa	2026-06-07 09:04:08 (3 weeks ago)	Jun 07 15:38:29 rapi wings[1730548]: 2026/06/07 15:38:16 http: TLS handshake error from 169.239.209. ... show more Jun 07 15:38:29 rapi wings[1730548]: 2026/06/07 15:38:16 http: TLS handshake error from 169.239.209.12:49970: tls: first record does not look like a TLS handshake Jun 07 15:38:29 rapi wings[1730548]: 2026/06/07 15:38:25 http: TLS handshake error from 169.239.209.12:51690: tls: first record does not look like a TLS handshake show less	Brute-Force Port Scan
Anonymous	2026-06-06 04:10:08 (3 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
Anonymous	2026-05-25 05:35:16 (1 month ago)	Attack Signature Blocked: /wishlist/index/add/product/1278/form_key/UFK7Gib1ZVU5BhKA/css/wt/include/ ... show more Attack Signature Blocked: /wishlist/index/add/product/1278/form_key/UFK7Gib1ZVU5BhKA/css/wt/include/en.png (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇺🇸 MPL	2026-05-24 00:05:21 (1 month ago)	tcp/23	Port Scan
🇮🇩 hermawan	2026-05-23 01:44:37 (1 month ago)	[Sat May 23 08:44:32.987861 2026] [security2:error] [pid 938063:tid 140471476143808] [client 169.239 ... show more [Sat May 23 08:44:32.987861 2026] [security2:error] [pid 938063:tid 140471476143808] [client 169.239.209.12:35616] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-tahunan Request Basename = infografis-tahunan"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "cap ... show less	Email Spam Hacking
🇧🇷 chronos	2026-05-21 16:51:11 (1 month ago)	Attempted unauthorized access to Telnet (port 23), likely brute force. \| Port: 23 \| Proto: TCP \| Loc ... show more Attempted unauthorized access to Telnet (port 23), likely brute force. \| Port: 23 \| Proto: TCP \| Location: South Africa, Cape Town show less	Hacking Brute-Force Exploited Host Port Scan
🇫🇷 security.rdmc.fr	2026-05-14 00:12:27 (1 month ago)	Port Scan Attack proto:TCP src:22397 dst:23	Port Scan
🇩🇪 bescared	2026-05-13 20:22:13 (1 month ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c0423ad6-	Port Scan

Showing 1 to 15 of 188 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.213

🇻🇳 116.99.175.122

🇭🇰 103.243.27.155

🇨🇳 60.223.251.132

🇮🇩 163.7.12.183

🇫🇷 161.97.98.104

🇬🇧 89.37.172.137

🇨🇳 58.221.60.25

🇺🇸 49.51.202.32

🇳🇱 45.153.34.235

🇰🇷 43.133.233.246

🇱🇰 220.247.224.226

🇨🇳 183.199.243.138

🇭🇰 112.118.113.52

🇱🇹 77.90.185.207

🇩🇪 64.89.163.90

🇨🇳 112.20.115.136

🇭🇰 104.208.72.142

🇸🇬 45.78.204.254

🇺🇸 20.221.68.159