JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.0.102.131

212.0.102.131 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 47%: ?

47%

ISP	ERION MANTENIMIENTO FERROVIARIO
Usage Type	Fixed Line ISP
ASN	AS8220
Domain Name	colt.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.0.102.131

Whois 212.0.102.131

IP Abuse Reports for 212.0.102.131:

This IP address has been reported a total of 104 times from 48 distinct sources. 212.0.102.131 was first reported on January 26th 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 rnl	2026-07-21 05:48:32 (19 hours ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇵🇹 rnl	2026-07-19 05:26:52 (2 days ago)	postfix	Brute-Force Email Spam
🇪🇸 www.pk25.com	2026-07-15 07:52:51 (6 days ago)	2026-07-15 00:19:29 H=(212.0.102.131) [212.0.102.131] sender verify fail for <kssqka888@adycoaduanas ... show more 2026-07-15 00:19:29 H=(212.0.102.131) [212.0.102.131] sender verify fail for <[email protected]>: Unrouteable address 2026-07-15 00:19:29 H=(212.0.102.131) [212.0.102.131] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-07-15 09:52:51 H=(212.0.102.131) [212.0.102.131] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇩🇪 EGP Abuse Dept	2026-07-10 01:15:39 (1 week ago)	Scanning for port/service exploits on tpc-001.mach3builders.nl	Port Scan Hacking
Anonymous	2026-07-06 22:20:02 (2 weeks ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇩🇪 filstal.org	2026-07-06 01:46:07 (2 weeks ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇨🇭 Origon	2026-07-05 17:18:55 (2 weeks ago)	NOQUEUE - IP: 212.0.102.131 - Jul 5 19:17:04 plesk postfix/smtpd[3278691]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 212.0.102.131 - Jul 5 19:17:04 plesk postfix/smtpd[3278691]: NOQUEUE: reject: RCPT from unknown[212.0.102.131]: 554 5.7.1 Service unavailable; Client host [212.0.102.131] blocked using dnsbl-1.uceprotect.net; IP 212.0.102.131 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=212.0.102.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<212.0.102.131> show less	Email Spam
Anonymous	2026-07-05 17:16:44 (2 weeks ago)	2026-07-05T19:16:42.822160+02:00 gollum postfix/smtpd[1610104]: NOQUEUE: reject: RCPT from unknown[2 ... show more 2026-07-05T19:16:42.822160+02:00 gollum postfix/smtpd[1610104]: NOQUEUE: reject: RCPT from unknown[212.0.102.131]: 554 5.7.1 Service unavailable; Client host [212.0.102.131] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/212.0.102.131 / Listed by XBL, see https://check.spamhaus.org/query/ip/212.0.102.131; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<212.0.102.131> ... show less	Email Spam
🇮🇹 VHosting	2026-07-01 02:42:52 (2 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 Origon	2026-06-17 02:22:23 (1 month ago)	NOQUEUE - IP: 212.0.102.131 - Jun 17 04:22:23 plesk postfix/smtpd[788429]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 212.0.102.131 - Jun 17 04:22:23 plesk postfix/smtpd[788429]: NOQUEUE: reject: RCPT from unknown[212.0.102.131]: 554 5.7.1 Service unavailable; Client host [212.0.102.131] blocked using dnsbl-1.uceprotect.net; IP 212.0.102.131 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=212.0.102.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<212.0.102.131> show less	Email Spam
Anonymous	2026-06-15 14:56:33 (1 month ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇨🇭 Origon	2026-06-11 10:25:20 (1 month ago)	NOQUEUE - IP: 212.0.102.131 - Jun 11 12:25:20 plesk postfix/smtpd[3368945]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 212.0.102.131 - Jun 11 12:25:20 plesk postfix/smtpd[3368945]: NOQUEUE: reject: RCPT from unknown[212.0.102.131]: 554 5.7.1 Service unavailable; Client host [212.0.102.131] blocked using dnsbl-1.uceprotect.net; IP 212.0.102.131 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=212.0.102.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[212.0.102.131]> show less	Email Spam
🇨🇿 Honzas	2026-06-07 17:36:19 (1 month ago)	Automatic report:07.06.2026 17:36:19. Port:25	Email Spam
🇨🇭 Origon	2026-05-31 09:14:36 (1 month ago)	NOQUEUE - IP: 212.0.102.131 - May 31 11:14:36 plesk postfix/smtpd[718490]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 212.0.102.131 - May 31 11:14:36 plesk postfix/smtpd[718490]: NOQUEUE: reject: RCPT from unknown[212.0.102.131]: 554 5.7.1 Service unavailable; Client host [212.0.102.131] blocked using dnsbl-1.uceprotect.net; IP 212.0.102.131 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=212.0.102.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<212.0.102.131> show less	Email Spam
🇩🇪 Viveronese	2026-05-31 06:53:25 (1 month ago)	SASL LOGIN authentication failed	Brute-Force

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.16.238.49

🇬🇧 193.46.0.169

🇷🇺 185.59.247.150

🇬🇧 154.16.44.146

🇨🇳 150.255.53.203

🇫🇷 91.231.89.194

🇳🇱 77.83.39.10

🇺🇸 70.183.235.23

🇭🇰 46.247.61.37

🇧🇩 202.4.122.181

🇬🇧 195.206.182.208

🇺🇸 195.140.179.60

🇬🇧 195.96.139.58

🇨🇳 183.150.183.227

🇭🇰 152.32.128.204

🇨🇳 150.255.89.57

🇹🇭 125.24.91.60

🇺🇸 76.31.7.28

🇮🇩 43.133.140.5

🇺🇸 216.25.89.122