JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.180.196

130.12.180.196 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 100%: ?

100%

ISP	Virtualine Technologies
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	virtualine.org
Country	🇩🇪 Germany
City	Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.12.180.196

Whois 130.12.180.196

IP Abuse Reports for 130.12.180.196:

This IP address has been reported a total of 148 times from 112 distinct sources. 130.12.180.196 was first reported on June 18th 2026, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-19 15:52:04 (38 minutes ago)	Reported from Nginx log analysis 16. Log: 130.12.180.196 - - [19/Jun/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 16. Log: 130.12.180.196 - - [19/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15" "-" "NL The Netherlands Amsterdam" "AS202412" "Omegatech LTD" show less	Port Scan Brute-Force SSH
🇩🇪 D3vNu11	2026-06-19 15:12:44 (1 hour ago)	Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 1x -> Target Country: G ... show more Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 1x -> Target Country: Germany HTTPS show less	Hacking Web App Attack
🇩🇪 mediacenter	2026-06-19 14:35:56 (1 hour ago)	Brute force against web app nextcloud.	Brute-Force Web App Attack
🇩🇪 D3vNu11	2026-06-19 13:03:22 (3 hours ago)	Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 2x -> Target Country: F ... show more Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 2x -> Target Country: Frankreich HTTPS show less	Hacking Web App Attack
🇩🇪 ManagedStack	2026-06-19 13:00:01 (3 hours ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇧🇷 diego	2026-06-19 12:40:50 (3 hours ago)	[probe-68-69] 2026-06-19 12:22:05, Client: 130.12.180.196, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-06-19 12:22:05, Client: 130.12.180.196, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-19 12:28:57 (4 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10. ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.12 show less	Port Scan Web App Attack Bad Web Bot
🇧🇷 diego	2026-06-19 12:22:03 (4 hours ago)	[rede-164-29] 06/19/2026-09:22:03.259483, 130.12.180.196, Protocol: 6, ET DROP Spamhaus DROP Listed ... show more [rede-164-29] 06/19/2026-09:22:03.259483, 130.12.180.196, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 27 show less	Hacking
🇺🇸 ne1for23	2026-06-19 10:37:43 (5 hours ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 130.12.180.196 - - [19/Jun/2026:10:37:43 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0" "-" show less	Hacking
🇺🇸 Hulk Smash	2026-06-19 10:34:21 (5 hours ago)	Automated report, webserver-auth troll for exploits and/or SSH Attempts	Brute-Force Hacking
Anonymous	2026-06-19 09:52:05 (6 hours ago)	Reported from Nginx log analysis 6. Log: 130.12.180.196 - - [19/Jun/2026:xx:xx:xx 0200] "GET / HTTP ... show more Reported from Nginx log analysis 6. Log: 130.12.180.196 - - [19/Jun/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "-" "NL The Netherlands Amsterdam" "AS202412" "Omegatech LTD" show less	Port Scan Brute-Force SSH
🇺🇸 conrad10781	2026-06-19 09:35:09 (6 hours ago)	nginx-direct-ip	Port Scan
🇫🇮 mnazibo	2026-06-19 09:30:36 (7 hours ago)	Date: Jun 19 12:20:35 2026 EAT \| Reported IP: 130.12.180.196 mod_security \| id: 920350 \| DE/username ... show more Date: Jun 19 12:20:35 2026 EAT \| Reported IP: 130.12.180.196 mod_security \| id: 920350 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 xmission.com	2026-06-19 09:29:02 (7 hours ago)	Blocked by UFW (TCP on 80) Source port: 34848 TTL: 46 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 34848 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 130.12.180.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Admins@FBN	2026-06-19 09:23:27 (7 hours ago)	Threat Host blocked...	Hacking Exploited Host Port Scan

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.195.232.14

🇺🇸 205.210.31.40

🇳🇱 195.178.110.30

🇷🇺 188.113.182.218

🇲🇾 183.171.49.181

🇫🇮 147.185.133.1

🇺🇸 146.70.168.107

🇺🇸 146.70.166.187

🇹🇷 88.241.81.30

🇺🇦 78.26.172.75

🇺🇸 66.132.224.230

🇳🇱 45.148.10.121

🇷🇺 5.79.172.113

🇳🇱 195.178.110.26

🇺🇸 146.70.165.94

🇭🇰 119.28.49.103

🇨🇳 116.179.37.177

🇲🇾 49.124.151.43

🇺🇸 47.234.138.49

🇴🇲 37.40.238.201