JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.23.212.130

Recent Activity

Abuse Confidence Score

36% Elevated

21 reports

18 reporters · latest 6 days ago

ISP: Puerto Rico Telephone Company
Usage Type: Mobile ISP
ASN: AS10396
Hostname(s): 65-23-212-130.prtc.net
Domain Name: prtc.net
Country: 🇵🇷 Puerto Rico
City: Juana Diaz, Juana Diaz

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 18 distinct reporters

First reported

July 6th 2024

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇩🇪 Germany 1 🇪🇸 Spain 1

Most common categories Port Scan 3 Web App Attack 2 Fraud VoIP 2 Brute-Force 1 FTP Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetGuard	2026-10-31 17:51:12 UTC · (6 days ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-29T01:41:17.22+00:00 Attacker IP: 65.23.212.130 \| Port: 5060 \| Country: Puerto Rico Honeypot: sentrypeer \| Attack: unknown Activity: 2 ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-29T01:41:17.22+00:00 Attacker IP: 65.23.212.130 \| Port: 5060 \| Country: Puerto Rico Honeypot: sentrypeer \| Attack: unknown Activity: 2 hits on port 5060 between 2026-10-29T01:41:17.22+00:00 and 2026-10-29T01:41:21.866+00:00 (6h window 2026-10-29T00:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇺🇸 NetGuard	2026-10-30 15:41:51 UTC · (1 week ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-28T02:53:22.814+00:00 Attacker IP: 65.23.212.130 \| Port: 5060 \| Country: Puerto Rico Honeypot: sentrypeer \| Attack: unknown Activity: 3 ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-28T02:53:22.814+00:00 Attacker IP: 65.23.212.130 \| Port: 5060 \| Country: Puerto Rico Honeypot: sentrypeer \| Attack: unknown Activity: 3 hits on port 5060 between 2026-10-28T02:53:22.814+00:00 and 2026-10-28T02:53:42.402+00:00 (6h window 2026-10-28T00:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
Anonymous	2026-10-29 01:41:54 UTC · (1 week ago)	2026-10-27T22:53:32.850752-04:00 localhost kernel: [124909.605533] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=65.23.212.130 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=235 ID=6481 PROTO=UDP SPT=44195 DPT=1 ... show more 2026-10-27T22:53:32.850752-04:00 localhost kernel: [124909.605533] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=65.23.212.130 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=235 ID=6481 PROTO=UDP SPT=44195 DPT=111 LEN=48 2026-10-28T21:41:39.406034-04:00 localhost kernel: [206994.240159] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=65.23.212.130 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=235 ID=46387 PROTO=UDP SPT=57763 DPT=111 LEN=48 2026-10-28T21:41:53.764429-04:00 localhost kernel: [207008.597435] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=65.23.212.130 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x40 TTL=238 ID=1576 PROTO=UDP SPT=44878 DPT=111 LEN=48 show less	Port Scan
🇩🇪 NxtGenIT	2026-10-29 01:41:28 UTC · (1 week ago)	Sentrypeer Honeypot hit, SIP Method: OPTIONS, User Agent: NOT_FOUND	FTP Brute-Force
🇪🇸 raiolanetworks.com	2026-10-28 05:43:36 UTC · (1 week ago)	Honeypot detection: SIP/VoIP fraud. 2 events observed. Reported automatically from a honeypot sensor.	Fraud VoIP Brute-Force
🇺🇸 ShadowWhisperer	2026-10-28 03:08:29 UTC · (1 week ago)	SIP port scan / probe. OPTIONS probe ua=	Port Scan Fraud VoIP
🇫🇷 uthul	2026-10-28 02:53:58 UTC · (1 week ago)	T-Pot honeypot: 1 hits on ports [5060] (automated)	Port Scan Hacking
🇺🇸 ipblock.com	2025-06-18 05:38:00 UTC · (1 year ago)	IPBlock protected site ID [4055-d][s=04]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2025-01-01 20:56:43 UTC · (1 year ago)	WordPress login attempt	Brute-Force
🇨🇦 JuicyJ	2024-11-12 12:29:02 UTC · (1 year ago)	Looking for WordPress vulnerabilities	Web App Attack
🇳🇿 Tripwire	2024-11-09 02:05:43 UTC · (1 year ago)	Wordpress login scanning	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-11-09 00:36:35 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 65.23.212.130 (65-23-212-130.prtc.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 19:36:28.688528 2024] [security2:error] [pid 25794:tid 25794] [client 6 ... show more (mod_security) mod_security (id:225170) triggered by 65.23.212.130 (65-23-212-130.prtc.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 19:36:28.688528 2024] [security2:error] [pid 25794:tid 25794] [client 65.23.212.130:54747] [client 65.23.212.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.newdirectionsinmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zy6ujDpdN8O9rgTst1gLoAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2024-10-19 21:30:53 UTC · (2 years ago)	Blocked user enumeration attempt	Hacking
🇳🇿 Tripwire	2024-09-13 21:53:04 UTC · (2 years ago)	Wordpress login scanning	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2024-09-13 01:05:46 UTC · (2 years ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.232

🇬🇧 185.247.137.229

🇷🇺 185.193.199.76

🇵🇰 103.18.14.158

🇫🇷 91.231.89.69

🇧🇬 79.124.58.74

🇺🇸 34.169.54.47

🇺🇸 34.102.126.230

🇺🇸 2606:4700:3031::ac43:c728

🇦🇷 190.244.24.186

🇰🇿 95.56.48.218

🇳🇱 45.74.28.6

🇧🇪 35.210.191.123

🇺🇸 34.59.79.171

🇺🇸 4.236.164.40

🇺🇸 3.131.24.55

🇸🇬 47.128.110.199

🇨🇦 45.198.224.110

🇺🇸 216.226.175.201

🇺🇸 216.49.19.146