JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 102.211.23.136

102.211.23.136 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 26%: ?

26%

ISP	National Oil Company of Malawi Ltd
Usage Type	Commercial
ASN	AS329333
Domain Name	nocma.mw
Country	🇲🇼 Malawi
City	Lilongwe, Central Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 102.211.23.136

Whois 102.211.23.136

IP Abuse Reports for 102.211.23.136:

This IP address has been reported a total of 84 times from 45 distinct sources. 102.211.23.136 was first reported on March 22nd 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 PetePK	2026-06-10 14:29:03 (19 hours ago)	Probed 3 time(s): TCP/445	Port Scan
🇹🇷 Threat.live	2026-06-05 07:55:04 (6 days ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 xmission.com	2026-05-19 01:43:06 (3 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 54407 TTL: 105 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 54407 TTL: 105 Packet length: 52 TOS: 0x08 This report (for 102.211.23.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-18 16:23:16 (3 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 51428 TTL: 105 Packet length: 48 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 51428 TTL: 105 Packet length: 48 TOS: 0x08 This report (for 102.211.23.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-18 05:39:34 (3 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 63337 TTL: 105 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 63337 TTL: 105 Packet length: 52 TOS: 0x08 This report (for 102.211.23.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-17 09:13:27 (3 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 61813 TTL: 105 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 61813 TTL: 105 Packet length: 52 TOS: 0x08 This report (for 102.211.23.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-04-30 13:27:05 (1 month ago)	fail2ban:firewall:2026-04-30T15:27:02.577734+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-04-30T15:27:02.577734+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=102.211.23.136 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=16224 DF PROTO=TCP SPT=62112 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 2026-04-30T15:27:03.333970+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=102.211.23.136 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=16278 DF PROTO=TCP SPT=62112 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇵🇱 sefinek.net	2026-04-22 21:07:21 (1 month ago)	Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefi ... show more Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 LotPhantom	2026-04-10 08:43:45 (2 months ago)	2026-04-10T08:43:36.102535+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-04-10T08:43:36.102535+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=102.211.23.136 DST=157.230.217.55 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=32263 DF PROTO=TCP SPT=63927 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 2026-04-10T08:43:45.128973+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=102.211.23.136 DST=157.230.217.55 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=658 DF PROTO=TCP SPT=63927 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇨🇦 Tanados	2026-04-06 08:07:28 (2 months ago)	Blocked by UFW [1433/tcp] Source port: 56301 TTL: 108 Packet length: 48 TOS: 0x00 This report was g ... show more Blocked by UFW [1433/tcp] Source port: 56301 TTL: 108 Packet length: 48 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 polycoda	2026-04-05 02:21:19 (2 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-03-26 13:21:22 (2 months ago)	DBFilter:Repeated invalid access to unused databases	SQL Injection Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-03-24 19:10:35 (2 months ago)	DBFilter:Repeated invalid access to unused databases	SQL Injection Port Scan
🇦🇹 urnilxfgbez	2026-03-20 23:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 oonux.net	2026-02-01 07:14:29 (4 months ago)	RouterOS: Scanning detected TCP 102.211.23.136:58668 > x.x.x.x:1433	Port Scan

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.48.128.86

🇹🇼 122.117.19.237

🇱🇹 81.30.98.158

🇳🇱 45.148.10.152

🇳🇱 206.189.9.27

🇸🇾 191.44.125.39

🇳🇱 89.105.195.118

🇺🇸 45.61.187.220

🇳🇱 5.255.98.242

🇰🇷 221.142.251.135

🇰🇿 185.233.3.95

🇦🇷 179.60.228.74

🇩🇪 178.104.49.69

🇺🇸 172.253.85.210

🇨🇳 120.246.79.180

🇩🇪 8.209.96.179

🇷🇴 2.57.122.177

🇷🇴 2.57.121.112

🇨🇳 218.88.203.178

🇦🇷 200.112.129.43