JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.130.113.9

102.130.113.9 was found in our database!

This IP was reported 405 times. Confidence of Abuse is 32%: ?

32%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	VPS Hostafrica
Usage Type	Data Center/Web Hosting/Transit
ASN	AS328364
Domain Name	hostafrica.co.za
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.130.113.9

Whois 102.130.113.9

IP Abuse Reports for 102.130.113.9:

This IP address has been reported a total of 405 times from 134 distinct sources. 102.130.113.9 was first reported on August 20th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Marizapalos	2026-06-03 09:28:00 (5 days ago)	Form Spam	Email Spam
🇺🇸 xmission.com	2026-05-29 09:06:44 (1 week ago)	Blocked by UFW (TCP on 60210) Source port: 9001 TTL: 40 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 60210) Source port: 9001 TTL: 40 Packet length: 52 TOS: 0x08 This report (for 102.130.113.9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-28 06:36:45 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 102.130.113.9 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 102.130.113.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 02:36:38.035087 2026] [security2:error] [pid 30946:tid 30946] [client 102.130.113.9:37446] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|guardiancns.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "guardiancns.com"] [uri "/dump.sql"] [unique_id "ahfidqM-rrY7158MdQ494gAAAAQ"], referer: guardiancns.com/dump.sql show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-05-27 15:00:10 (1 week ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack
Anonymous	2026-05-05 23:00:13 (1 month ago)	2026-05-05 17:00:05,898 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 2026-05-0 ... show more 2026-05-05 17:00:05,898 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 2026-05-05 19:00:55,171 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 2026-05-05 22:00:01,458 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 2026-05-06 00:00:05,823 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 2026-05-06 02:00:13,493 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.113.9 show less	Brute-Force
🇦🇺 aranguren.org	2026-05-01 14:10:29 (1 month ago)	102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /rest/version HTTP/1.1" 404 986 "-" "Mozilla/5.0 ... show more 102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /rest/version HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0" 102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /cp/ HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /_assets/js/app.js HTTP/1.1" 404 986 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /catalog/view/javascript/opencart.js HTTP/1.1" 404 986 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 102.130.113.9 - - [02/May/2026:00:10:29 +1000] "GET /RServer/ HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36" 102.130.113.9 - - [02/ ... show less	Bad Web Bot
Anonymous	2026-04-24 18:00:03 (1 month ago)	2026-04-24 11:00:06,701 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 2026-04-24 1 ... show more 2026-04-24 11:00:06,701 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 2026-04-24 14:00:02,393 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 2026-04-24 16:00:23,920 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 2026-04-24 18:01:01,936 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 2026-04-24 21:00:02,887 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.113.9 show less	Brute-Force
🇪🇸 librebit	2026-04-17 03:26:53 (1 month ago)	Brute force	Brute-Force
🇪🇪 gnom4ik	2026-03-31 02:27:15 (2 months ago)	ban-reviewer auto report; ip=102.130.113.9; scenario=http:scan; verdict=valid_ban; confidence=0.92; ... show more ban-reviewer auto report; ip=102.130.113.9; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
Anonymous	2026-03-23 16:31:53 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-panel jail	Brute-Force
Anonymous	2026-03-17 17:00:03 (2 months ago)	2026-03-17 09:00:09,490 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 2026-03-1 ... show more 2026-03-17 09:00:09,490 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 2026-03-17 11:00:41,760 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 2026-03-17 14:00:01,741 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 2026-03-17 16:00:53,064 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 2026-03-17 19:00:01,956 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.113.9 show less	Brute-Force
Anonymous	2026-03-12 07:51:17 (2 months ago)	"GET /admin/database.tar.gz HTTP/1.1"	Hacking Web App Attack
🇩🇪 LRob.fr	2026-03-12 04:00:37 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-03-10 02:15:17 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇵🇱 IROK	2026-03-04 11:18:26 (3 months ago)	Malware/WebShell Scan blocked by ModSecurity ...	Hacking

Showing 1 to 15 of 405 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.55.146.54

🇸🇷 200.2.178.164

🇻🇳 171.244.201.80

🇺🇸 165.1.65.252

🇨🇳 124.239.170.163

🇷🇺 83.246.133.16

🇭🇺 62.77.224.67

🇨🇱 34.176.240.26

🇧🇪 34.62.211.200

🇰🇷 220.118.173.234

🇨🇳 218.25.89.208

🇩🇪 194.94.134.248

🇧🇬 193.24.211.107

🇨🇱 190.121.27.21

🇩🇪 185.237.97.248

🇸🇪 171.25.158.82

🇸🇬 134.209.100.109

🇸🇬 129.227.75.98

🇻🇳 113.187.236.60

🇨🇳 110.249.201.104