AbuseIPDB » 12.251.130.22

Check an IP Address, Domain Name, or Subnet

e.g. 44.201.92.114, microsoft.com, or 5.188.10.0/24

12.251.130.22 was found in our database!

This IP was reported 4,572 times. Confidence of Abuse is 100%: ?

100%

ISP	AT&T Internet Services
Usage Type	Unknown
Domain Name	att.net
Country	United States of America
City	Long Beach, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 12.251.130.22

Whois 12.251.130.22

IP Abuse Reports for 12.251.130.22:

This IP address has been reported a total of 4,572 times from 455 distinct sources. 12.251.130.22 was first reported on September 3rd 2021, and the most recent report was 25 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
syokadmin	25 minutes ago	12.251.130.22 (US/United States/-), 2 distributed smtpauth attacks on account [swihjmie] in the last ... show more12.251.130.22 (US/United States/-), 2 distributed smtpauth attacks on account [swihjmie] in the last 3600 secs show less	Brute-Force
Fusl	59 minutes ago	received unsolicited smtp data stream: Date: Sun, 02 Apr 2023 05:56:10 +0200 From: conta ... show morereceived unsolicited smtp data stream: Date: Sun, 02 Apr 2023 05:56:10 +0200 From: [email protected] Subject: =?UTF-8?B?Y29udGFjdHZwdTFtdWZAbmNjbWFtLnJndy5saTtjb250YWN0dnB1MW11ZkBu?= =?UTF-8?B?Y2NtYW0ucmd3LmxpO0MxMjM0O21haWwuYWRkci5lczsyNTswO0xPR0lO?= To: [email protected] show less	Email Spam
rsiddall	3 hours ago	2023-04-01T21:05:59.920041linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 ... show more2023-04-01T21:05:59.920041linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]rion.net>, method=PLAIN, rip=12.251.130.22, lip=138.197.106.165, TLS, session=<J5JjC1D4+tEM+4IW> 2023-04-01T21:35:00.549079linnet.elirion.net dovecot[1543]: auth-worker(27952): sql([email protected],12.251.130.22,<aaJDc1D48tkM+4IW>): Password mismatch 2023-04-01T21:35:02.797633linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=12.251.130.22, lip=138.197.106.165, TLS, session=<aaJDc1D48tkM+4IW> ... show less	Brute-Force
rsiddall	9 hours ago	2023-04-01T15:17:17.733248linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 ... show more2023-04-01T15:17:17.733248linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=12.251.130.22, lip=138.197.106.165, session=<PB5CLEv48ZQM+4IW> 2023-04-01T15:35:27.818416linnet.elirion.net dovecot[1543]: auth-worker(27952): sql([email protected],12.251.130.22,<3optbUv4iu0M+4IW>): unknown user 2023-04-01T15:35:29.930286linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=12.251.130.22, lip=138.197.106.165, TLS, session=<3optbUv4iu0M+4IW> ... show less	Brute-Force
Thomas Anderson	9 hours ago		Hacking Brute-Force Web App Attack
rsiddall	14 hours ago	2023-04-01T10:43:43.931834linnet.elirion.net dovecot[1543]: auth-worker(27952): sql([email protected] ... show more2023-04-01T10:43:43.931834linnet.elirion.net dovecot[1543]: auth-worker(27952): sql([email protected],12.251.130.22,<BkcgWkf4MsAM+4IW>): unknown user 2023-04-01T10:43:46.050075linnet.elirion.net dovecot[1543]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=12.251.130.22, lip=138.197.106.165, TLS: Disconnected, session=<BkcgWkf4MsAM+4IW> 2023-04-01T10:51:45.094589linnet.elirion.net dovecot[1543]: auth-worker(27952): sql([email protected],12.251.130.22,<4EPLdkf4gaAM+4IW>): unknown user ... show less	Brute-Force
cticom.ms	14 hours ago	Email Auth Brute force attack 3/3 in last day	Brute-Force
Anonymous	15 hours ago	IMAP password guessing	Brute-Force
lavnet.net	16 hours ago	Apr 1 11:58:24 angela postfix/smtps/smtpd[2600869]: warning: unknown[12.251.130.22]: SASL LOGIN aut ... show moreApr 1 11:58:24 angela postfix/smtps/smtpd[2600869]: warning: unknown[12.251.130.22]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 1 11:58:24 angela postfix/smtps/smtpd[2600869]: lost connection after AUTH from unknown[12.251.130.22] Apr 1 11:58:24 angela postfix/smtps/smtpd[2600869]: disconnect from unknown[12.251.130.22] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force Web App Attack
jasperedv.de	22 hours ago	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
Paul Smith	23 hours ago	Email Auth Brute force attack 4/4 in last day	Brute-Force
Honzas	01 Apr 2023	Automatic report:31.03.2023 12:05:58. Port:465	Email Spam
basing	31 Mar 2023	2023-03-31 01:58:44 kb SASL PLAIN auth failed: rhost=12.251.130.22...	Brute-Force
Anonymous	31 Mar 2023	IMAP password guessing	Brute-Force
maxxsense	31 Mar 2023	(postfix-unknown) Failed postfix unknown login with username [redacted] from 12.251.130.22 (US/Unite ... show more(postfix-unknown) Failed postfix unknown login with username [redacted] from 12.251.130.22 (US/United States/-) show less	Hacking