JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.181.227

130.12.181.227 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 100%: ?

100%

ISP	Netiface LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197769
Domain Name	abusehandler.net
Country	🇩🇪 Germany
City	Berchtesgaden, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.12.181.227

Whois 130.12.181.227

IP Abuse Reports for 130.12.181.227:

This IP address has been reported a total of 129 times from 108 distinct sources. 130.12.181.227 was first reported on February 17th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-06-15 18:11:57 (3 hours ago)	hae-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇺🇸 ipblock.com	2026-06-15 15:40:00 (6 hours ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-06-15 14:58:33 (6 hours ago)	Web attack from 130.12.181.227	Web App Attack
🇬🇧 spamverify.com	2026-06-15 14:13:49 (7 hours ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇹 neo72	2026-06-15 14:01:12 (7 hours ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
🇳🇱 MacLotsen	2026-06-15 13:58:51 (7 hours ago)	130.12.181.227 - - [15/Jun/2026:15:58:41 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://elle ... show more 130.12.181.227 - - [15/Jun/2026:15:58:41 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 130.12.181.227 - - [15/Jun/2026:15:58:42 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" 130.12.181.227 - - [15/Jun/2026:15:58:44 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.12.181.227 - - [15/Jun/2026:15:58:44 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.12.181.227 - - [15/Jun/2026:15:58:45 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://elle ... show less	Web App Attack Brute-Force
🇫🇷 SpaceHost-Server	2026-06-15 13:52:45 (7 hours ago)	130.12.181.227 - - [15/Jun/2026:15:52:34 +0200] "POST /wp-login.php HTTP/1.1" 200 8050 "https://star ... show more 130.12.181.227 - - [15/Jun/2026:15:52:34 +0200] "POST /wp-login.php HTTP/1.1" 200 8050 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 130.12.181.227 - - [15/Jun/2026:15:52:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8057 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 130.12.181.227 - - [15/Jun/2026:15:52:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8052 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TAY	2026-06-15 13:49:26 (7 hours ago)	130.12.181.227 - - [15/Jun/2026:21:49:22 +0800] "POST /wp-login.php HTTP/1.1" 200 8562 "https://life ... show more 130.12.181.227 - - [15/Jun/2026:21:49:22 +0800] "POST /wp-login.php HTTP/1.1" 200 8562 "https://lifetunes.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 130.12.181.227 - - [15/Jun/2026:21:49:24 +0800] "POST /wp-login.php HTTP/1.1" 200 2790 "https://lifetunes.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 130.12.181.227 - - [15/Jun/2026:21:49:26 +0800] "POST /wp-login.php HTTP/1.1" 200 2791 "https://lifetunes.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force
🇨🇦 electronico	2026-06-15 13:45:08 (7 hours ago)	130.12.181.227 - - [16/Jun/2026:00:40:24 +1100] "GET /wp-admin/ HTTP/1.1" 302 4258 "-" "Mozilla/5.0 ... show more 130.12.181.227 - - [16/Jun/2026:00:40:24 +1100] "GET /wp-admin/ HTTP/1.1" 302 4258 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 130.12.181.227 - - [16/Jun/2026:00:45:03 +1100] "POST /wp-login.php HTTP/1.1" 403 5922 "https://cttmd.nc/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.12.181.227 - - [16/Jun/2026:00:45:07 +1100] "POST /wp-login.php HTTP/1.1" 403 2107 "https://cttmd.nc/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 etu brutus	2026-06-15 13:36:30 (8 hours ago)	130.12.181.227 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇳🇱 i-turnradio.nl	2026-06-15 13:27:59 (8 hours ago)	2026-06-15 @ 15:27:59 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇨🇦 KIsmay	2026-06-15 13:15:26 (8 hours ago)	Jun 15 09:13:27 www4 WPAudit[1993413]: 130.12.181.227 servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; ... show more Jun 15 09:13:27 www4 WPAudit[1993413]: 130.12.181.227 servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" aios:x8sad7xzcasd6xzc5** FAIL Jun 15 09:13:30 www4 WPAudit[1993413]: 130.12.181.227 servicesfyi.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" theballettheatre:5$7h7JoeskB FAIL Jun 15 09:13:31 www4 WPAudit[1993413]: 130.12.181.227 servicesfyi.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" administratoir:Activestrokes@2023 FAIL Jun 15 09:13:33 www4 WPAudit[1993413]: 130.12.181.227 servicesfyi.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" archive_user:ztGUeqICCA$]1]3E6o(V FAIL Jun 15 09:15:26 www4 WPAudit[1997984]: 130.12.181.227 www.terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0. ... show less	Brute-Force Web App Attack
Anonymous	2026-06-15 12:46:19 (8 hours ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-06-15 12:39:59 (9 hours ago)	2026-06-15T14:39:57.701632+02:00 milkyway wordpress(learncryptography.pw)[3861593]: Authentication a ... show more 2026-06-15T14:39:57.701632+02:00 milkyway wordpress(learncryptography.pw)[3861593]: Authentication attempt for unknown user aios from 130.12.181.227 2026-06-15T14:39:58.459931+02:00 milkyway wordpress(learncryptography.pw)[3861593]: Authentication attempt for unknown user theballettheatre from 130.12.181.227 2026-06-15T14:39:59.196227+02:00 milkyway wordpress(learncryptography.pw)[3861593]: Authentication attempt for unknown user administratoir from 130.12.181.227 ... show less	Brute-Force Web App Attack
🇳🇱 BlueWire Hosting	2026-06-15 12:34:34 (9 hours ago)	Wordpress brute force attempt	Brute-Force Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.212.91.18

🇩🇪 213.209.159.56

🇻🇪 190.202.149.154

🇩🇪 172.71.164.106

🇨🇳 115.191.22.111

🇮🇳 115.111.249.140

🇺🇸 66.132.195.59

🇨🇳 58.50.193.94

🇸🇬 43.156.60.15

🇧🇪 34.77.207.171

🇺🇸 2600:1f18:5b75:b802:a151:24c1:3651:577c

🇧🇷 205.210.31.167

🇺🇸 192.129.183.139

🇨🇳 112.32.138.180

🇺🇸 35.243.173.90

🇺🇸 2607:f8b0:4001:c0a::124

🇩🇪 213.209.159.228

🇬🇧 193.163.125.106

🇨🇴 186.31.95.163

🇵🇭 165.154.58.251