AbuseIPDB » 130.180.8.149

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.125.76, microsoft.com, or 5.188.10.0/24

130.180.8.149 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 35%: ?

35%

ISP	Vodafone NRW GmbH
Usage Type	Fixed Line ISP
Hostname(s)	ip-130-180-008-149.um40.pools.vodafone-ip.de
Domain Name	unitymedia.de
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 130.180.8.149

Whois 130.180.8.149

IP Abuse Reports for 130.180.8.149:

This IP address has been reported a total of 10 times from 9 distinct sources. 130.180.8.149 was first reported on March 24th 2022, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ChillScanner	11 hours ago	1 probe(s) @ TCP(80)	Port Scan
no1knows.com	24 Jun 2022	2022/06/24 11:37:58 [error] 2584428#2584428: 254696 FastCGI sent in stderr: "Primary script unknown ... show more2022/06/24 11:37:58 [error] 2584428#2584428: 254696 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 130.180.8.149, server: _, request: "GET /phppma/index.php?lang=en HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "90.255.227.108" 2022/06/24 11:37:58 [error] 2584428#2584428: 254696 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 130.180.8.149, server: _, request: "GET /phpmyadmin4/index.php?lang=en HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "90.255.227.108" 2022/06/24 11:37:59 [error] 2584428#2584428: 254696 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 130.180.8.149, server: _, request: "GET /PMA/index.php?lang=en HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "90.255.227.108" ... show less	Brute-Force Bad Web Bot
CollideTech	21 Jun 2022	found poking around where they should not be	Bad Web Bot Web App Attack
Anonymous	11 Jun 2022	port scan and connect, tcp 80 (http)	Port Scan
InfinitzHost	23 May 2022	Logs: (directadmin) Failed DirectAdmin phpMyAdmin login from 130.180.8.149 (DE/Germany/ip-130-180-00 ... show moreLogs: (directadmin) Failed DirectAdmin phpMyAdmin login from 130.180.8.149 (DE/Germany/ip-130-180-008-149.um40.pools.vodafone-ip.de): 3 in the last 3600 secs; May 23 01:20:32 phpmyadmin: user denied: nas (mysql-denied) from 130.180.8.149 May 23 01:20:33 phpmyadmin: user denied: wordpress (mysql-denied) from 130.180.8.149 May 23 01:20:34 phpmyadmin: user denied: shopdb (mysql-denied) from 130.180.8.149 show less	Hacking Brute-Force
blik2108	18 May 2022	beta.sleepylizard.com:80 130.180.8.149 - - [18/May/2022:12:04:51 +0100] "GET /phpMyAdmin_/index.php? ... show morebeta.sleepylizard.com:80 130.180.8.149 - - [18/May/2022:12:04:51 +0100] "GET /phpMyAdmin_/index.php?lang=en HTTP/1.1" 301 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" beta.sleepylizard.com:80 130.180.8.149 - - [18/May/2022:12:04:51 +0100] "GET /phpMyAdmin5/index.php?lang=en HTTP/1.1" 301 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" beta.sleepylizard.com:80 130.180.8.149 - - [18/May/2022:12:04:54 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 301 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" beta.sleepylizard.com:80 130.180.8.149 - - [18/May/2022:12:04:55 +0100] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 301 589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" beta.sleep ... show less	Brute-Force Web App Attack
MageHost.pro	15 Apr 2022	10 attempts against mh-pma-try-ban on rose	Web App Attack
MageHost.pro	15 Apr 2022	12 attempts against mh-pma-try-ban on bean	Web App Attack
MateHekur	02 Apr 2022	2022-04-03 04:11:54 -- 130.180.8.149 GET /phpMyAdmin_/index.php?lang=en	Web App Attack
tg_de	24 Mar 2022	119 attempts since 24.03.2022 07:19:56 CET - last search for: /db/db-admin/index.php?lang=en	Web App Attack