JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.180.91.158

130.180.91.158 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Vodafone West GmbH
Usage Type	Fixed Line ISP
ASN	AS3209
Hostname(s)	srv02.its-ds.de
Domain Name	unitymedia.de
Country	🇩🇪 Germany
City	Bad Lippspringe, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.180.91.158

Whois 130.180.91.158

IP Abuse Reports for 130.180.91.158:

This IP address has been reported a total of 28 times from 22 distinct sources. 130.180.91.158 was first reported on June 18th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-06-18 17:41:13 (7 hours ago)	Jun 18 19:34:34 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<HlTwlopU8NmC ... show more Jun 18 19:34:34 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<HlTwlopU8NmCtFue>): unknown user Jun 18 19:34:36 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=<HlTwlopU8NmCtFue> Jun 18 19:34:49 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<1kiRl4pUBJOCtFue>): unknown user Jun 18 19:34:51 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=<1kiRl4pUBJOCtFue> Jun 18 19:41:12 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<xIGpropUlNKCtFue>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-18 17:03:07 (7 hours ago)	2026-06-18 11:16:24,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 130.180.91.158 2 ... show more 2026-06-18 11:16:24,563 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 130.180.91.158 2026-06-18 15:28:06,615 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 130.180.91.158 2026-06-18 19:03:06,459 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 130.180.91.158 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 15:15:29 (9 hours ago)	Jun 18 17:13:30 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<3BlmnohUyoC ... show more Jun 18 17:13:30 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<3BlmnohUyoCCtFue>): unknown user Jun 18 17:13:32 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=<3BlmnohUyoCCtFue> Jun 18 17:14:25 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<voWyoYhUMqOCtFue>): unknown user Jun 18 17:14:27 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=<voWyoYhUMqOCtFue> Jun 18 17:15:28 odin dovecot: auth-worker(3431): sql([email protected],130.180.91.158,<kP52pYhUrpiCtFue>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 14:26:27 (10 hours ago)	2026-06-18T17:26:27.322130+03:00 radionet dovecot: auth: passwd-file([email protected],130.180.91.158,<F ... show more 2026-06-18T17:26:27.322130+03:00 radionet dovecot: auth: passwd-file([email protected],130.180.91.158,<FNMm9odU0OKCtFue>): unknown user show less	Brute-Force
Anonymous	2026-06-18 13:13:57 (11 hours ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 6 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇫🇷 Batz	2026-06-18 12:13:38 (12 hours ago)	[130.180.91.158] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇩🇪 onlyops.app	2026-06-18 12:00:16 (12 hours ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇳🇱 Godert Jan van Manen	2026-06-18 11:35:34 (13 hours ago)	Jun 18 13:30:37 odin dovecot: auth-worker(20585): sql([email protected],130.180.91.158,<rRhZgYVUC ... show more Jun 18 13:30:37 odin dovecot: auth-worker(20585): sql([email protected],130.180.91.158,<rRhZgYVUCJiCtFue>): unknown user Jun 18 13:30:39 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=<rRhZgYVUCJiCtFue> Jun 18 13:33:21 odin dovecot: auth-worker(20585): sql([email protected],130.180.91.158,</O4ci4VU5o2CtFue>): unknown user Jun 18 13:33:23 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=178.162.131.122, session=</O4ci4VU5o2CtFue> Jun 18 13:35:33 odin dovecot: auth-worker(20585): sql([email protected],130.180.91.158,<NGX8koVULtCCtFue>): unknown user show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 11:16:51 (13 hours ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:08:43 (13 hours ago)	Too many failed attempts / attacks from 130.180.91.158	Brute-Force Port Scan Email Spam
🇦🇹 AustrianSimon	2026-06-18 11:04:34 (13 hours ago)	18 Jun 2026 11:04:34UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 18 Jun 2026 11:04:34UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 130.180.91.158 show less	Brute-Force
🇩🇪 ecs.ge	2026-06-18 10:59:46 (13 hours ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
Anonymous	2026-06-18 10:51:32 (13 hours ago)	(PERMBLOCK) 130.180.91.158 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Po ... show more (PERMBLOCK) 130.180.91.158 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
🇬🇧 Mendip_Defender	2026-06-18 10:22:26 (14 hours ago)	Jun 18 10:17:14 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 18 10:17:14 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=188.246.206.60, session=<jl03pINUltCCtFue> Jun 18 11:22:20 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=130.180.91.158, lip=188.246.206.60, session=<LSoCjYRUKoeCtFue> ... show less	Brute-Force
🇧🇷 dominioz	2026-06-18 09:59:48 (14 hours ago)	130.180.91.158 [2464] 06:47:17 Authentication [POP3] - Result=0, [email protected], Method= ... show more 130.180.91.158 [2464] 06:47:17 Authentication [POP3] - Result=0, [email protected], Method=0 130.180.91.158 [2464] 06:59:45 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 91.230.168.3

🇹🇭 45.194.70.252

🇺🇸 45.33.115.116

🇭🇺 188.156.86.94

🇺🇸 162.216.149.247

🇩🇪 142.93.97.47

🇵🇱 104.165.13.100

🇷🇴 80.94.92.184

🇺🇸 62.132.18.142

🇨🇳 52.81.39.218

🇭🇰 43.132.215.237

🇻🇳 27.79.44.3

🇬🇧 217.154.38.181

🇷🇴 193.32.162.83

🇷🇺 185.10.63.235

🇯🇵 153.239.5.136

🇺🇸 152.32.235.227

🇺🇸 152.32.207.124

🇺🇸 92.204.128.218

🇷🇴 92.118.39.213