JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.130.101.130

200.130.101.130 was found in our database!

This IP was reported 208 times. Confidence of Abuse is 100%: ?

100%

ISP	Rede Nacional de Ensino e Pesquisa
Usage Type	University/College/School
ASN	AS1916
Domain Name	rnp.br
Country	🇧🇷 Brazil
City	Brasilia, Federal District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.130.101.130

Whois 200.130.101.130

IP Abuse Reports for 200.130.101.130:

This IP address has been reported a total of 208 times from 105 distinct sources. 200.130.101.130 was first reported on February 1st 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SCLwebadministrator	2026-09-02 07:57:00 (7 hours ago)	Bruteforce WordPress logins	Web App Attack Open Proxy Hacking
Anonymous	2026-09-02 00:10:37 (15 hours ago)	WordPress Brute Force	Hacking Brute-Force Web App Attack
Anonymous	2026-09-01 17:46:23 (21 hours ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 FeG Deutschland	2026-09-01 14:11:23 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇧🇪 taivas.nl	2026-09-01 04:33:31 (1 day ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-09-01 04:10:08 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 mnogoweb	2026-09-01 01:16:01 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 200.130.101.130 (BR/Brazil/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 200.130.101.130 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-08-31 18:24:26 login authenticator failed for (45.74.31.30) [200.130.101.130]: 535 Incorrect authentication data ([email protected]) 2026-08-31 18:42:46 login authenticator failed for (45.74.31.42) [200.130.101.130]: 535 Incorrect authentication data ([email protected]) 2026-08-31 18:47:16 login authenticator failed for (45.74.31.42) [200.130.101.130]: 535 Incorrect authentication data ([email protected]) 2026-08-31 18:48:04 login authenticator failed for (45.74.31.30) [200.130.101.130]: 535 Incorrect authentication data ([email protected]) 2026-08-31 19:15:59 login authenticator failed for (45.74.31.42) [200.130.101.130]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 dtorrer	2026-09-01 01:08:43 (1 day ago)	Brute-force general attack.	Brute-Force
🇦🇺 paulshipley.com.au	2026-09-01 01:04:15 (1 day ago)	valueaddedpromotions.com.au:443 200.130.101.130 - - [01/Sep/2026:11:04:12 +1000] "GET /?author=1 HTT ... show more valueaddedpromotions.com.au:443 200.130.101.130 - - [01/Sep/2026:11:04:12 +1000] "GET /?author=1 HTTP/1.1" 404 352365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇬🇧 andypiper	2026-09-01 01:00:14 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 conseilgouz	2026-09-01 00:35:56 (1 day ago)	hae-7 : Trying access unauthorized files/dir=>/wp-json/wp/v2/posts?per_page=20&_embed=author&amp ... show more hae-7 : Trying access unauthorized files/dir=>/wp-json/wp/v2/posts?per_page=20&_embed=author&_fields=_embedded show less	Hacking
🇺🇸 TPI-Abuse	2026-09-01 00:32:39 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 200.130.101.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 200.130.101.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:32:31.807915 2026] [security2:error] [pid 26221:tid 26221] [client 200.130.101.130:47233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aandbnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aandbnaturalfoods.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apYdH2Grt2RhnYkY2cfxQwAAAH4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-09-01 00:31:52 (1 day ago)	CloudFlare WAF REPORT: /wp-login.php	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-09-01 00:27:26 (1 day ago)	(PERMBLOCK) 200.130.101.130 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs (0- ... show more (PERMBLOCK) 200.130.101.130 (BR/Brazil/-) has had more than 4 temp blocks in the last 86400 secs (0-122) show less	Hacking
🇺🇸 Mundo Bueno	2026-09-01 00:16:45 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: BR \| UA: Mozilla/5.0 (Wi ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: BR \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa show less	Hacking Web App Attack

Showing 1 to 15 of 208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 105.156.165.194

100.79.62.92

🇺🇸 43.173.98.142

10.29.113.46

🇺🇸 203.168.151.253

🇿🇦 196.11.179.75

192.168.230.167

192.168.135.143

172.19.126.246

🇺🇸 154.36.69.30

🇧🇩 103.183.62.2

100.66.106.206

🇵🇱 95.156.241.118

10.120.223.124

10.87.233.54

🇺🇸 216.194.80.132

🇺🇸 198.13.224.166

192.168.115.63

🇲🇽 189.204.230.91

172.25.83.250