JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.130.117.167

102.130.117.167 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 10%: ?

10%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	HA-VPS-NET
Usage Type	Data Center/Web Hosting/Transit
ASN	AS328364
Hostname(s)	sortie-tor.a-n-o-n-y-m-e.net
Domain Name	hostafrica.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.130.117.167

Whois 102.130.117.167

IP Abuse Reports for 102.130.117.167:

This IP address has been reported a total of 145 times from 46 distinct sources. 102.130.117.167 was first reported on April 18th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-17 13:45:12 (6 days ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-05-06 01:00:03 (1 month ago)	2026-05-05 19:00:01,755 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 2026-05 ... show more 2026-05-05 19:00:01,755 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 2026-05-05 21:00:04,822 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 2026-05-05 23:00:05,958 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 2026-05-06 01:00:52,192 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 2026-05-06 04:00:02,433 fail2ban.actions [3625835]: NOTICE [tor] Ban 102.130.117.167 show less	Brute-Force
Anonymous	2026-04-24 18:00:04 (1 month ago)	2026-04-24 11:00:06,747 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 2026-04-24 ... show more 2026-04-24 11:00:06,747 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 2026-04-24 14:00:02,457 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 2026-04-24 16:00:23,961 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 2026-04-24 18:01:01,980 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 2026-04-24 21:00:02,953 fail2ban.actions [7718]: NOTICE [tor] Ban 102.130.117.167 show less	Brute-Force
🇪🇪 gnom4ik	2026-04-12 04:38:56 (2 months ago)	ban-reviewer auto report; ip=102.130.117.167; scenario=http:scan; verdict=valid_ban; confidence=0.92 ... show more ban-reviewer auto report; ip=102.130.117.167; scenario=http:scan; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high show less	Port Scan Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-04-09 02:52:11 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 102.130.117.167 (sortie-tor.a-n-o-n-y-m-e.net): ... show more (mod_security) mod_security (id:210350) triggered by 102.130.117.167 (sortie-tor.a-n-o-n-y-m-e.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:52:03.892233 2026] [security2:error] [pid 700571:tid 700571] [client 102.130.117.167:30847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|inexpensivecommerce.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inexpensivecommerce.com"] [uri "/cpanel/"] [unique_id "adcUU94PPoxpAaWrv5CZWgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-03-31 21:55:48 (2 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 102.130.117.167 - - [31/Mar/2026 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 102.130.117.167 - - [31/Mar/2026:22:55:46 +0100] GET / HTTP/1.1 403 2914 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8 Mobile/15E148 Safari/604.1 show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-28 22:59:14 (2 months ago)	Auto-ban: >3000 req/min op 2026-03-28	Web App Attack SSH Hacking
Anonymous	2026-03-23 16:31:53 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-panel jail	Brute-Force
Anonymous	2026-03-17 17:00:06 (3 months ago)	2026-03-17 09:00:09,582 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 2026-03 ... show more 2026-03-17 09:00:09,582 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 2026-03-17 11:00:41,800 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 2026-03-17 14:00:01,828 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 2026-03-17 16:00:53,108 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 2026-03-17 19:00:01,996 fail2ban.actions [3511917]: NOTICE [tor] Ban 102.130.117.167 show less	Brute-Force
🇩🇪 LRob.fr	2026-03-12 11:30:18 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇮🇳 liveaspankaj	2026-03-07 19:31:49 (3 months ago)	DDoS attack: 143 requests in 5m (GET / or repair.php).	DDoS Attack
🇺🇸 xmission.com	2026-03-02 22:41:28 (3 months ago)	Blocked by UFW (TCP on 9999) Source port: 60099 TTL: 44 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9999) Source port: 60099 TTL: 44 Packet length: 60 TOS: 0x00 This report (for 102.130.117.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇫🇮 gnom4ik	2026-02-22 02:51:35 (4 months ago)	ban-reviewer auto report; ip=102.130.117.167; scenario=http:scan; verdict=valid_ban; confidence=0.90 ... show more ban-reviewer auto report; ip=102.130.117.167; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) detected in abuseipdb_context; High frequency of decisions for this IP in lookback window show less	Port Scan
🇦🇺 oncord	2026-02-19 11:31:17 (4 months ago)	Form spam	Web Spam
🇸🇬 dankmemer3920	2026-01-26 10:57:48 (4 months ago)	CrowdSec: import to_import.txt- 56363 ips	Port Scan

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.94.25.243

🇧🇪 198.235.24.166

🇩🇿 197.200.3.17

🇮🇩 125.164.197.88

🇨🇳 121.18.220.74

🇭🇰 103.229.125.106

🇻🇳 103.154.62.14

🇭🇰 101.36.122.186

🇬🇧 81.107.167.54

🇺🇸 44.197.61.184

🇺🇸 20.150.193.52

🇹🇼 198.235.24.110

🇹🇼 198.235.24.104

🇦🇺 170.64.130.197

🇺🇸 159.203.173.21

🇩🇪 157.230.28.141

🇹🇭 125.27.13.41

🇮🇳 122.176.156.82

🇨🇳 117.146.148.187

🇨🇳 112.94.252.6