JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.130.232.23

102.130.232.23 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 28%: ?

28%

ISP	DATATECH SARL
Usage Type	Fixed Line ISP
ASN	AS21271
Domain Name	datatech.net.ml
Country	🇲🇱 Mali
City	Bamako, Bamako

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.130.232.23

Whois 102.130.232.23

IP Abuse Reports for 102.130.232.23:

This IP address has been reported a total of 64 times from 32 distinct sources. 102.130.232.23 was first reported on August 12th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-19 13:06:02 (1 week ago)	NOQUEUE - IP: 102.130.232.23 - Jun 19 15:06:02 plesk postfix/smtpd[928026]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 102.130.232.23 - Jun 19 15:06:02 plesk postfix/smtpd[928026]: NOQUEUE: reject: RCPT from unknown[102.130.232.23]: 554 5.7.1 Service unavailable; Client host [102.130.232.23] blocked using dnsbl-1.uceprotect.net; IP 102.130.232.23 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=102.130.232.23; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<102.130.232.23> show less	Email Spam
🇪🇸 librebit	2026-06-18 08:42:11 (1 week ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇨🇭 Origon	2026-06-11 14:09:50 (2 weeks ago)	NOQUEUE - IP: 102.130.232.23 - Jun 11 16:09:50 plesk postfix/smtpd[3610663]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 102.130.232.23 - Jun 11 16:09:50 plesk postfix/smtpd[3610663]: NOQUEUE: reject: RCPT from unknown[102.130.232.23]: 554 5.7.1 Service unavailable; Client host [102.130.232.23] blocked using dnsbl-1.uceprotect.net; IP 102.130.232.23 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=102.130.232.23; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[102.130.232.23]> show less	Email Spam
🇨🇿 interconnect.cz	2026-06-07 19:20:00 (3 weeks ago)	[07/Jun/2026 21:19:59] IP address 102.130.232.23 found in DNS blacklist SpamHaus SBL-XBL, mail from ... show more [07/Jun/2026 21:19:59] IP address 102.130.232.23 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 21:19:59] IP address 102.130.232.23 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 21:19:59] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 102.130.232.23 ... show less	Brute-Force Email Spam
🇩🇪 filstal.org	2026-05-31 08:26:02 (1 month ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇨🇭 Origon	2026-05-29 21:09:49 (1 month ago)	NOQUEUE - IP: 102.130.232.23 - May 29 23:09:49 plesk postfix/smtpd[1486751]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 102.130.232.23 - May 29 23:09:49 plesk postfix/smtpd[1486751]: NOQUEUE: reject: RCPT from unknown[102.130.232.23]: 554 5.7.1 Service unavailable; Client host [102.130.232.23] blocked using dnsbl-1.uceprotect.net; IP 102.130.232.23 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=102.130.232.23; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<102.130.232.23> show less	Email Spam
🇩🇪 filstal.org	2026-05-26 18:45:19 (1 month ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇩🇪 H. Hampel	2026-05-26 12:01:05 (1 month ago)	Spam Score: 27	Email Spam
🇳🇱 AutoBlockIP	2026-05-15 18:03:51 (1 month ago)	Suspicious behaviour detected (tcp/25)	Port Scan Hacking Brute-Force
🇺🇸 Arjan_S	2026-05-15 14:12:50 (1 month ago)	Found in DMARC reports	Spoofing
🇪🇸 www.pk25.com	2026-04-21 19:19:25 (2 months ago)	2026-04-21 20:26:31 H=(102.130.232.23) [102.130.232.23] sender verify fail for <[email protected] ... show more 2026-04-21 20:26:31 H=(102.130.232.23) [102.130.232.23] sender verify fail for <[email protected]>: Unrouteable address 2026-04-21 20:26:31 H=(102.130.232.23) [102.130.232.23] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-04-21 21:19:25 H=(102.130.232.23) [102.130.232.23] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
Anonymous	2026-04-11 22:17:00 (2 months ago)	Email spam	Email Spam
🇳🇱 Cloud86 B.V.	2026-04-11 15:39:06 (2 months ago)	categories: Email Spam	Email Spam
🇺🇸 TPI-Abuse	2025-10-09 15:01:45 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 102.130.232.23 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.130.232.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 11:01:39.666233 2025] [security2:error] [pid 21309:tid 21309] [client 102.130.232.23:45519] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOfOU18SCoLP2EzyV1pY7gAAAAE"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-09 03:47:36 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 102.130.232.23 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 102.130.232.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 23:47:31.750445 2025] [security2:error] [pid 21677:tid 21677] [client 102.130.232.23:58635] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fundaciondamashcc.org.ec\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOcwU3SKSL6rvoicW12FOQAAAAk"], referer: https://fundaciondamashcc.org.ec/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.187.169.232

🇧🇷 179.63.50.227

🇮🇩 103.255.163.170

🇷🇴 80.94.92.55

🇯🇴 46.185.191.197

🇺🇸 44.209.113.59

🇺🇸 44.52.81.165

🇺🇸 179.61.192.160

🇮🇩 160.25.119.39

🇳🇱 158.94.210.203

🇨🇳 111.53.184.228

🇨🇳 110.80.136.142

🇩🇪 69.5.169.243

🇧🇿 45.227.254.154

🇺🇸 44.201.6.17

🇬🇧 35.203.210.177

🇺🇸 20.127.200.74

🇧🇪 198.235.24.201

🇷🇴 193.32.162.71

🇷🇺 188.168.17.189