130.12.180.165

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
1,426 reports
533 reporters ยท latest 13 minutes ago
ISP
Virtualine Technologies
Usage Type
Data Center/Web Hosting/Transit
ASN
AS6461
Domain Name
virtualine.org
Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Aachen, North Rhine-Westphalia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
1,426 from 533 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 315 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 284 ๐Ÿ‡ซ๐Ÿ‡ท France 122
Most common categories Web App Attack 970 Bad Web Bot 382 Hacking 301 Brute-Force 263 Port Scan 250
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ dvaydor
Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.env. Source blocked at the firewall.
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ฎ โ˜ |ส‚ษงฤ…ษ–ฦกแฟณ|โ˜ 
[2026-11-01 14:04:35 UTC] Vulnerability/exploit scanning detected from 130.12.180.165 () PATHS: unknown
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ dvaydor
Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.env. Source blocked at the firewall.
Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
Anonymous
Scanner hitting /.env on n8p.osef.cloud () โ€” aaguard
Brute-Force Port Scan
๐Ÿ‡บ๐Ÿ‡ธ dvaydor
Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.env. Source blocked at the firewall.
Web App Attack
๐Ÿ‡ช๐Ÿ‡ธ Gem
Unauthorized web scan.
Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
๐Ÿ‡บ๐Ÿ‡ธ dvaydor
Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.env. Source blocked at the firewall.
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Holger
Bruteforce WebAttack
Brute-Force Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
๐Ÿ‡บ๐Ÿ‡ธ dvaydor
Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.env. Source blocked at the firewall.
Web App Attack
Anonymous
Scanner hitting /.env on n8p.osef.cloud () โ€” aaguard
Brute-Force Port Scan
๐Ÿ‡จ๐Ÿ‡ฑ Fernando Soto
WAF propio vps1 (CL): sensx3 score 12 en 1h. sondeo rutas sensibles.
Web App Attack
Anonymous
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.2
๐Ÿ‡บ๐Ÿ‡ธ 142.248.83.111
๐Ÿ‡จ๐Ÿ‡ณ 120.224.179.194
๐Ÿ‡ฆ๐Ÿ‡ซ 74.118.81.174
๐Ÿ‡บ๐Ÿ‡ธ 71.6.238.164
๐Ÿ‡จ๐Ÿ‡ณ 42.203.168.4
๐Ÿ‡บ๐Ÿ‡ธ 2604:a880:400:d1:0:5:5293:8001
๐Ÿ‡ญ๐Ÿ‡ฐ 223.197.146.169
๐Ÿ‡ซ๐Ÿ‡ท 201.24.175.73
๐Ÿ‡ฆ๐Ÿ‡ท 181.9.206.96
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.29
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.58
๐Ÿ‡จ๐Ÿ‡ณ 120.229.243.228
๐Ÿ‡จ๐Ÿ‡ณ 120.193.161.107
๐Ÿ‡ฉ๐Ÿ‡ช 86.107.77.145
๐Ÿ‡ท๐Ÿ‡ธ 77.105.37.219
๐Ÿ‡บ๐Ÿ‡ธ 70.169.11.214
๐Ÿ‡ณ๐Ÿ‡ต 43.245.93.97
๐Ÿ‡บ๐Ÿ‡ธ 38.148.92.89
๐Ÿ‡บ๐Ÿ‡ธ 8.234.211.14