JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.181.189

130.12.181.189 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 0%: ?

ISP	Netiface LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197769
Domain Name	abusehandler.net
Country	🇩🇪 Germany
City	Bad Reichenhall, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.12.181.189

Whois 130.12.181.189

IP Abuse Reports for 130.12.181.189:

This IP address has been reported a total of 125 times from 20 distinct sources. 130.12.181.189 was first reported on February 1st 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-03-04 00:38:25 (3 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-0 ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-03-03 00:03:56 ["uname -s -v -n -r"] 2026-03-03 00:04:20 ["uname -s -v -n -r"] 2026-03-03 00:03:20 ["uname -s -v -n -r"] 2026-03-03 00:04:01 ["uname -s -v -n -r"] 2026-03-03 00:03:11 ["uname -s -v -n -r"] 2026-03-03 00:03:36 ["uname -s -v -n -r"] 2026-03-03 00:03:12 ["uname -s -v -n -r"] 2026-03-03 00:03:18 ["uname -s -v -n -r"] 2026-03-03 00:03:27 ["uname -s -v -n -r"] 2026-03-03 00:04:19 ["uname -s -v -n -r"] show less	Brute-Force
Anonymous	2026-03-04 00:10:18 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇳 ThreatBook.io	2026-03-03 00:51:19 (3 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-0 ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-03-02 00:05:08 ["uname -s -v -n -r"] 2026-03-02 00:04:57 ["uname -s -v -n -r"] 2026-03-02 00:06:40 ["uname -s -v -n -r"] 2026-03-02 00:05:20 ["uname -s -v -n -r"] 2026-03-02 00:06:18 ["uname -s -v -n -r"] 2026-03-02 00:05:48 ["uname -s -v -n -r"] 2026-03-02 00:06:06 ["uname -s -v -n -r"] 2026-03-02 00:05:40 ["uname -s -v -n -r"] show less	Brute-Force
🇨🇳 ThreatBook.io	2026-03-02 00:20:47 (3 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-0 ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-03-01 00:05:39 ["uname -s -v -n -r"] 2026-03-01 00:05:10 ["uname -s -v -n -r"] 2026-03-01 00:05:28 ["uname -s -v -n -r"] 2026-03-01 00:05:50 ["uname -s -v -n -r"] 2026-03-01 00:06:06 ["uname -s -v -n -r"] 2026-03-01 00:05:04 ["uname -s -v -n -r"] 2026-03-01 00:06:06 ["uname -s -v -n -r"] show less	SSH
🇦🇺 GE	2026-03-01 23:48:25 (3 months ago)	2026-03-02T10:48:19.246443+11:00 smtp.geddy.au sshd-session[218385]: pam_unix(sshd:auth): authentica ... show more 2026-03-02T10:48:19.246443+11:00 smtp.geddy.au sshd-session[218385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.12.181.189 user=root 2026-03-02T10:48:21.584772+11:00 smtp.geddy.au sshd-session[218385]: Failed password for root from 130.12.181.189 port 57784 ssh2 2026-03-02T10:48:22.616866+11:00 smtp.geddy.au sshd-session[218393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.12.181.189 user=root 2026-03-02T10:48:25.117806+11:00 smtp.geddy.au sshd-session[218393]: Failed password for root from 130.12.181.189 port 57796 ssh2 ... show less	SSH
🇨🇳 kipfel★	2026-03-01 19:04:39 (3 months ago)	2026-03-02T03:04:18.313448+08:00 self-dedi-wyse-5070-tna sshd-session[2293387]: Invalid user ubuntu ... show more 2026-03-02T03:04:18.313448+08:00 self-dedi-wyse-5070-tna sshd-session[2293387]: Invalid user ubuntu from 130.12.181.189 port 50224 2026-03-02T03:04:24.924440+08:00 self-dedi-wyse-5070-tna sshd-session[2293391]: Invalid user ubuntu from 130.12.181.189 port 51210 2026-03-02T03:04:38.315076+08:00 self-dedi-wyse-5070-tna sshd-session[2293421]: Invalid user ubuntu from 130.12.181.189 port 53178 ... show less	Brute-Force SSH
🇰🇷 forgeban	2026-03-01 16:24:43 (3 months ago)	Session Report (UTC: 2026-03-01T16:24:42.690Z) Session Duration: 2026-03-01T16:24:36.687Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T16:24:42.690Z) Session Duration: 2026-03-01T16:24:36.687Z - 2026-03-01T16:24:42.690Z Client: SSH-2.0-Go Source Port: 38840 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - debug_channel - session_close - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - session_close - debug_channel - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2026-03-01 15:43:21 (3 months ago)	Session Report (UTC: 2026-03-01T15:43:20.883Z) Session Duration: 2026-03-01T15:43:15.881Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T15:43:20.883Z) Session Duration: 2026-03-01T15:43:15.881Z - 2026-03-01T15:43:20.883Z Client: SSH-2.0-Go Source Port: 54152 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - session_close - debug_channel - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - debug_channel - session_close - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2026-03-01 15:01:57 (3 months ago)	Session Report (UTC: 2026-03-01T15:01:57.493Z) Session Duration: 2026-03-01T15:01:53.487Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T15:01:57.493Z) Session Duration: 2026-03-01T15:01:53.487Z - 2026-03-01T15:01:57.493Z Client: SSH-2.0-Go Source Port: 60170 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - session_close - debug_channel - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - debug_channel - session_close - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2026-03-01 14:21:04 (3 months ago)	Session Report (UTC: 2026-03-01T14:21:03.934Z) Session Duration: 2026-03-01T14:21:00.930Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T14:21:03.934Z) Session Duration: 2026-03-01T14:21:00.930Z - 2026-03-01T14:21:03.934Z Client: SSH-2.0-Go Source Port: 59926 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - debug_channel - session_close - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - session_close - debug_channel - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2026-03-01 12:12:17 (3 months ago)	Session Report (UTC: 2026-03-01T12:12:16.978Z) Session Duration: 2026-03-01T12:12:12.975Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T12:12:16.978Z) Session Duration: 2026-03-01T12:12:12.975Z - 2026-03-01T12:12:16.978Z Client: SSH-2.0-Go Source Port: 59092 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - session_close - debug_channel - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - session_close - debug_channel - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2026-03-01 11:30:42 (3 months ago)	Session Report (UTC: 2026-03-01T11:30:42.093Z) Session Duration: 2026-03-01T11:30:39.089Z - 2026-03- ... show more Session Report (UTC: 2026-03-01T11:30:42.093Z) Session Duration: 2026-03-01T11:30:39.089Z - 2026-03-01T11:30:42.093Z Client: SSH-2.0-Go Source Port: 57370 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: uname -s -v -n -r - session_close - debug_channel - session - debug_channel_request - Command executed: grep "model name" /proc/cpuinfo \| cut -d ' ' -f3- \| awk '{print $1,$2,$3,$4,$5,$6,$7,$8,$9,$10}' \| head -1 - debug_channel - session_close - session - debug_channel_request - Command executed: nproc --all - session_close - connection_close show less	Hacking Brute-Force SSH
Anonymous	2026-03-01 00:05:21 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇳 kipfel★	2026-02-28 18:36:52 (3 months ago)	2026-03-01T02:36:17.060447+08:00 self-dedi-wyse-5070-tna sshd-session[2152044]: Invalid user ubuntu ... show more 2026-03-01T02:36:17.060447+08:00 self-dedi-wyse-5070-tna sshd-session[2152044]: Invalid user ubuntu from 130.12.181.189 port 59312 2026-03-01T02:36:34.520864+08:00 self-dedi-wyse-5070-tna sshd-session[2152066]: Invalid user ubuntu from 130.12.181.189 port 46742 2026-03-01T02:36:51.354810+08:00 self-dedi-wyse-5070-tna sshd-session[2152097]: Invalid user ubuntu from 130.12.181.189 port 38138 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-02-27 23:49:43 (3 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-0 ... show more ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/130.12.181.189 2026-02-27 00:21:08 ["uname -s -v -n -r"] 2026-02-27 00:01:06 ["uname -s -v -n -r"] 2026-02-27 00:00:43 ["uname -s -v -n -r"] 2026-02-27 00:21:27 ["uname -s -v -n -r"] 2026-02-27 00:21:17 ["uname -s -v -n -r"] 2026-02-27 00:01:31 ["uname -s -v -n -r"] 2026-02-27 00:23:13 ["uname -s -v -n -r"] show less	Brute-Force

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.163

🇺🇸 165.154.173.141

🇨🇳 114.106.134.200

🇨🇦 72.251.5.158

🇺🇸 43.130.90.166

🇳🇬 2620:171:c5:f001:9999::240

🇬🇹 190.151.130.5

🇳🇱 176.65.132.50

🇵🇭 103.235.95.95

🇮🇹 95.233.229.21

🇺🇸 66.132.195.35

🇳🇱 45.148.10.141

🇬🇧 194.164.91.60

🇩🇪 95.169.191.176

🇮🇹 95.110.181.28

🇮🇹 83.224.150.13

🇺🇸 52.168.141.47

🇵🇱 51.83.161.132

🇫🇷 2001:41d0:8:9a33::1

🇳🇱 176.65.148.244