AbuseIPDB » 102.130.245.109

102.130.245.109 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 21%: ?

21%

ISP	nCloud.Africa
Usage Type	Fixed Line ISP
ASN	AS328426
Hostname(s)	net-102-130-245-1.zonkewifi.co.za
Domain Name	ncloud.africa
Country	South Africa
City	Emalahleni, Mpumalanga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 102.130.245.109

Whois 102.130.245.109

IP Abuse Reports for 102.130.245.109:

This IP address has been reported a total of 51 times from 26 distinct sources. 102.130.245.109 was first reported on March 23rd 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
unhfree.net	2025-02-27 14:22:55 (3 weeks ago)	Feb 27 11:00:12 canopus postfix/smtpd[2043546]: too many errors after RCPT from unknown[102.130.245. ... show moreFeb 27 11:00:12 canopus postfix/smtpd[2043546]: too many errors after RCPT from unknown[102.130.245.109] Feb 27 15:22:49 canopus postfix/smtpd[2074823]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 27 15:22:49 canopus postfix/smtpd[2074823]: too many errors after RCPT from unknown[102.130.245.109] Feb 27 15:22:54 canopus postfix/smtpd[2074765]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 27 15:22:54 canopus postfix/smtpd[2074765]: too many errors after RCPT from unknown[102.130.245.109] ... show less	Brute-Force Exploited Host
FeG Deutschland	2025-02-19 17:34:01 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
unhfree.net	2025-02-19 16:02:27 (1 month ago)	Feb 19 15:49:08 canopus postfix/smtpd[1267461]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: ... show moreFeb 19 15:49:08 canopus postfix/smtpd[1267461]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 19 15:49:08 canopus postfix/smtpd[1267461]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 19 15:49:08 canopus postfix/smtpd[1267461]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Feb 19 15:49:08 canopus postfix/smtpd[1267461]: NOQUEUE: reject: RCPT from unknown[102.130.245.109]: 554 5.7.1 <o ... show less	Brute-Force Exploited Host
Anonymous	2025-02-15 15:38:27 (1 month ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
syokadmin	2025-02-15 06:07:15 (1 month ago)	102.130.245.109 (ZA/South Africa/net-102-130-245-1.zonkewifi.co.za), 6 distributed SMTP Logins on ac ... show more102.130.245.109 (ZA/South Africa/net-102-130-245-1.zonkewifi.co.za), 6 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
syokadmin	2025-02-09 11:24:58 (1 month ago)	102.130.245.109 (ZA/South Africa/net-102-130-245-1.zonkewifi.co.za), 5 distributed SMTP Logins on ac ... show more102.130.245.109 (ZA/South Africa/net-102-130-245-1.zonkewifi.co.za), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
ThreatBook.io	2025-01-29 22:15:35 (1 month ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/102.130.245.109<b ... show moreThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/102.130.245.109 2025-01-29 02:25:19 /phpmyadmin.css.php?nocache=4515061346ltr show less	Web App Attack
JimArchon72	2024-12-21 00:30:01 (3 months ago)	2024/12/21 00:28:59 "GET /wp-login.php?wp_lang=en_US HTTP/1.1"	Web App Attack
Anonymous	2024-12-11 12:55:55 (3 months ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
Anonymous	2024-12-03 09:25:41 (3 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-10-01 13:02:29 (5 months ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
TZNOC	2024-09-29 16:01:10 (5 months ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
oncord	2024-09-23 17:53:09 (5 months ago)	Form spam	Web Spam
oncord	2024-09-17 19:05:08 (6 months ago)	Form spam	Web Spam
oncord	2024-09-12 22:34:27 (6 months ago)	Form spam	Web Spam