JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.182.254

130.12.182.254 was found in our database!

This IP was reported 541 times. Confidence of Abuse is 10%: ?

10%

ISP	Netiface LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197769
Domain Name	abusehandler.net
Country	🇩🇪 Germany
City	Bad Reichenhall, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.12.182.254

Whois 130.12.182.254

IP Abuse Reports for 130.12.182.254:

This IP address has been reported a total of 541 times from 105 distinct sources. 130.12.182.254 was first reported on January 23rd 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 stom	2026-01-25 04:40:36 (4 months ago)	2026-01-25T04:40:33.606171ls1.tom2.co.uk postfix/smtpd[9393]: warning: unknown[130.12.182.254]: SASL ... show more 2026-01-25T04:40:33.606171ls1.tom2.co.uk postfix/smtpd[9393]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam Brute-Force
🇫🇷 dwmp	2026-01-25 04:28:35 (4 months ago)	Jan 24 23:56:57 webcore postfix/smtpd[894306]: warning: unknown[130.12.182.254]: SASL LOGIN authenti ... show more Jan 24 23:56:57 webcore postfix/smtpd[894306]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure Jan 25 02:44:53 webcore postfix/smtpd[930017]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure Jan 25 05:28:33 webcore postfix/smtpd[983327]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 vhnmn	2026-01-25 04:19:22 (4 months ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
🇫🇷 dwmp	2026-01-25 04:12:56 (4 months ago)	2026-01-24T23:40:01.591564+01:00 galileo.dwmp.it postfix/smtpd[2151753]: warning: unknown[130.12.182 ... show more 2026-01-24T23:40:01.591564+01:00 galileo.dwmp.it postfix/smtpd[2151753]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure, sasl_username=admin 2026-01-25T02:29:01.177791+01:00 galileo.dwmp.it postfix/smtpd[2160682]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure, sasl_username=admin 2026-01-25T05:12:55.002866+01:00 galileo.dwmp.it postfix/smtpd[2168802]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure, sasl_username=admin ... show less	Brute-Force
🇳🇱 olen.net	2026-01-25 04:12:54 (4 months ago)	Fail2Ban - poseidon - Brute Force	Brute-Force
🇺🇸 pixelmemory.us	2026-01-25 04:05:54 (4 months ago)	2026-01-24T08:23:03.886168-08:00 pixelmemory auth[934258]: pam_unix(dovecot:auth): authentication fa ... show more 2026-01-24T08:23:03.886168-08:00 pixelmemory auth[934258]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=130.12.182.254 2026-01-24T14:32:29.339409-08:00 pixelmemory auth[959584]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=130.12.182.254 2026-01-24T17:21:46.264848-08:00 pixelmemory auth[970468]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=130.12.182.254 2026-01-24T20:05:53.203846-08:00 pixelmemory auth[981214]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=130.12.182.254 ... show less	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-01-25 03:42:20 (4 months ago)	Jan 24 21:42:17 mail postfix/smtpd[22953]: warning: unknown[130.12.182.254]: SASL LOGIN authenticati ... show more Jan 24 21:42:17 mail postfix/smtpd[22953]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 stom	2026-01-25 03:39:12 (4 months ago)	2026-01-25T03:39:08.426288ls2.tom2.co.uk postfix/smtpd[29367]: warning: unknown[130.12.182.254]: SAS ... show more 2026-01-25T03:39:08.426288ls2.tom2.co.uk postfix/smtpd[29367]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure ... show less	Email Spam Brute-Force
🇺🇸 MSchienle	2026-01-25 03:13:02 (4 months ago)	Jan 24 21:10:42 customvisuals postfix/smtpd[45316]: warning: unknown[130.12.182.254]: SASL LOGIN aut ... show more Jan 24 21:10:42 customvisuals postfix/smtpd[45316]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Email Spam
🇩🇪 mnpx	2026-01-25 02:40:55 (4 months ago)	SMTP login attempt (3× over 6h:27m); first seen here 2026-01-23T15:06Z	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-01-25 02:30:59 (4 months ago)	Jan 24 20:30:55 mail postfix/smtpd[19437]: warning: unknown[130.12.182.254]: SASL LOGIN authenticati ... show more Jan 24 20:30:55 mail postfix/smtpd[19437]: warning: unknown[130.12.182.254]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇭🇺 Silu	2026-01-25 02:25:52 (4 months ago)	mail send or login attack	Brute-Force
🇬🇧 David Gebler	2026-01-25 02:07:11 (4 months ago)	Jan 25 02:07:11 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jan 25 02:07:11 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=130.12.182.254 show less	Email Spam Brute-Force
🇬🇧 andypiper	2026-01-25 02:00:31 (4 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇧🇷 LM Security	2026-01-25 02:00:03 (4 months ago)	2026-01-24 22:45:09 dovecot_login authenticator failed for H=([130.12.182.254]) [130.12.182.254]:630 ... show more 2026-01-24 22:45:09 dovecot_login authenticator failed for H=([130.12.182.254]) [130.12.182.254]:63000: 535 Incorrect authentication data (set_id=admin) 2026-01-24 19:56:50 dovecot_login authenticator failed for H=([130.12.182.254]) [130.12.182.254]:57890: 535 Incorrect authentication data (set_id=admin) show less	Brute-Force

Showing 406 to 420 of 541 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.212.244.18

🇦🇪 151.253.89.13

🇫🇮 147.185.133.196

🇳🇱 5.83.128.43

🇨🇳 223.223.183.182

🇺🇸 216.25.89.84

🇰🇷 210.99.124.119

🇺🇸 208.109.240.82

🇻🇪 200.82.223.100

🇬🇧 193.163.125.169

🇦🇷 186.38.26.5

🇨🇳 180.76.234.93

🇩🇪 167.94.146.38

🇮🇳 163.223.54.21

🇺🇸 162.216.149.49

🇭🇰 152.32.226.205

🇨🇳 118.212.120.239

🇧🇩 103.158.206.141

🇻🇳 103.154.62.14

🇰🇿 95.59.142.69