JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.181.51

130.12.181.51 was found in our database!

This IP was reported 280 times. Confidence of Abuse is 0%: ?

ISP	Netiface LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197769
Domain Name	abusehandler.net
Country	🇸🇮 Slovenia
City	Maribor, Urban Municipality of Maribor

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.12.181.51

Whois 130.12.181.51

IP Abuse Reports for 130.12.181.51:

This IP address has been reported a total of 280 times from 66 distinct sources. 130.12.181.51 was first reported on January 17th 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-24 17:37:11 (6 months ago)	Blocked by UFW (TCP on 25) Source port: 55887 TTL: 105 Packet length: 52 TOS: 0x0A This report (for ... show more Blocked by UFW (TCP on 25) Source port: 55887 TTL: 105 Packet length: 52 TOS: 0x0A This report (for 130.12.181.51) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
Anonymous	2026-04-24 15:45:23 (6 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇷🇸 Smel	2026-04-21 01:19:13 (6 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇪🇸 librebit	2026-04-18 22:40:26 (6 months ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
Anonymous	2026-04-18 01:23:40 (6 months ago)	Fail2Ban report from Agria Informatika Ltd.	Brute-Force SSH
🇧🇷 SvrAdmin	2026-04-16 04:23:58 (6 months ago)	[101] (smtpauth) Failed SMTP AUTH login from 130.12.181.51 (DE/Germany/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 130.12.181.51 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-16 01:14:49 dovecot_login authenticator failed for H=(IqlSM6ncwF) [130.12.181.51]:55563: 535 Incorrect authentication data ([email protected]) 2026-04-16 01:16:56 dovecot_login authenticator failed for H=(qwMvPw) [130.12.181.51]:51310: 535 Incorrect authentication data ([email protected]) 2026-04-16 01:19:22 dovecot_login authenticator failed for H=(uA1QZw7S) [130.12.181.51]:53062: 535 Incorrect authentication data ([email protected]) 2026-04-16 01:19:47 dovecot_login authenticator failed for H=(oYh3RIvS) [130.12.181.51]:59064: 535 Incorrect authentication data ([email protected]) 2026-04-16 01:23:55 dovecot_login authenticator failed for H=(e0fW2j) [130.12.181.51]:53356: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇬🇧 openstrike.co.uk	2026-04-14 22:51:21 (6 months ago)	Email auth failures (120)	Brute-Force
🇷🇴 iulianh	2026-04-14 19:42:44 (6 months ago)	25,465,587	Brute-Force SSH
🇿🇦 maximonline.co.za	2026-04-14 10:17:05 (6 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇪🇸 librebit	2026-04-14 09:54:55 (6 months ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇫🇮 iamxorum	2026-04-14 06:00:35 (6 months ago)	2026-04-14T06:00:35.281517+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-04-14T06:00:35.281517+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=130.12.181.51 DST=46.62.222.43 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=27686 DF PROTO=TCP SPT=59207 DPT=3389 WINDOW=65280 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
🇩🇪 mueller-nils.com	2026-04-14 00:38:55 (6 months ago)	Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat ... show more Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat Apr 14 02:38:54 [host] postfix/smtpd[20560]: warning: unknown[130.12.181.51]: SASL LOGIN authenticat show less	Hacking Brute-Force
🇺🇸 drewf.ink	2026-04-14 00:34:11 (6 months ago)	[00:34] Port scanning. Port(s) scanned: TCP/25	Port Scan
🇸🇪 donarev419	2026-04-14 00:31:52 (6 months ago)	Port scan detected on port 25 (connection without data transfer)	Port Scan
🇩🇪 sorgenfrei-it.com	2026-04-14 00:30:08 (6 months ago)	2026-04-14T02:29:52.134534+02:00 mainserver postfix/smtpd[3563580]: warning: unknown[130.12.181.51]: ... show more 2026-04-14T02:29:52.134534+02:00 mainserver postfix/smtpd[3563580]: warning: unknown[130.12.181.51]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-14T02:29:58.292321+02:00 mainserver postfix/smtpd[3563580]: warning: unknown[130.12.181.51]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-14T02:30:08.088780+02:00 mainserver postfix/smtpd[3563580]: warning: unknown[130.12.181.51]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force

Showing 1 to 15 of 280 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.116.252.112

🇩🇪 147.45.197.169

🇺🇸 107.174.250.240

🇦🇺 103.214.20.52

🇺🇸 92.119.19.11

🇺🇸 35.149.175.11

🇷🇺 31.184.195.246

🇺🇸 20.65.170.9

🇭🇰 8.210.238.210

🇬🇧 193.163.125.215

🇰🇿 185.233.3.95

🇧🇷 181.218.172.74

🇨🇱 181.162.140.190

🇧🇷 177.223.38.159

🇳🇱 152.42.143.147

🇫🇮 147.185.133.59

🇩🇪 109.160.32.169

🇬🇧 92.41.213.159

🇺🇸 73.142.15.93

🇺🇸 64.62.197.160