JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.185.123.55

130.185.123.55

Recent Activity

162 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

ARVANCLOUD GLOBAL TECHNOLOGIES L.L.C

Usage Type

Data Center/Web Hosting/Transit

ASN

AS57568

Domain Name

arvancloud.ae

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 130.185.123.55:

This IP address has been reported a total of 162 times from 102 distinct sources. 130.185.123.55 was first reported on August 20th 2026, and the most recent report was 38 seconds ago. In the last 60 days, the top reporter locations were: Germany with 41 reports; United States of America with 40 reports; France with 23 reports. The most common categories in these recent reports were: Web App Attack 124 times; Brute-Force 84 times; Bad Web Bot 29 times; Hacking 24 times; Port Scan 7 times; Other 16 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-29 14:21:42 (38 seconds ago)	WordPress login brute-force \| path: /wp-login.php \| 2026-08-29 14:21 UTC	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-08-29 13:20:06 (1 hour ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇫🇷 Yepngo	2026-08-29 13:03:47 (1 hour ago)	130.185.123.55 - - [29/Aug/2026:15:03:46 +0200] "POST /wp-login.php HTTP/2.0" 200 12510 "https://yep ... show more 130.185.123.55 - - [29/Aug/2026:15:03:46 +0200] "POST /wp-login.php HTTP/2.0" 200 12510 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 12:41:32 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 130.185.123.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 130.185.123.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 08:41:26.161438 2026] [security2:error] [pid 875:tid 875] [client 130.185.123.55:53736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|guarinofurnituredesigns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "guarinofurnituredesigns.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apLTdmaCDhoZOkSr51cxcwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bsoft.de	2026-08-29 11:59:11 (2 hours ago)	130.185.123.55 - - [29/Aug/2026:13:24:18 +0200] "GET /wp-login.php HTTP/1.1" 404 205479 "https://bol ... show more 130.185.123.55 - - [29/Aug/2026:13:24:18 +0200] "GET /wp-login.php HTTP/1.1" 404 205479 "https://bolte.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:13:24:19 +0200] "GET /wp-login.php HTTP/1.1" 404 205396 "https://bolte.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:13:59:10 +0200] "GET /wp-login.php HTTP/1.1" 404 67243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 soc-yk	2026-08-29 11:54:16 (2 hours ago)	Type: suspicious_network_activity Risk: 89 Events: 186 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 89 Events: 186 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇹🇷 oalver	2026-08-29 11:27:51 (2 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-29. Risk score: 60/100. show less	Web App Attack
🇷🇴 SpamStopper	2026-08-29 10:16:58 (4 hours ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-08-29 10:08:17 (4 hours ago)	(wordpress) Failed wordpress login from 130.185.123.55 (AE/United Arab Emirates/-): (CF_ENABLE)	Brute-Force
🇧🇪 brechtr	2026-08-29 09:56:11 (4 hours ago)	[Press84-BanHammer] bad username — Sourced from: brechtryckaert.com — Request: POST /wp-login.php	Brute-Force
🇫🇮 KnightIndustries	2026-08-29 09:53:50 (4 hours ago)	2026-08-29T11:53:49.841866+02:00 milkyway wordpress(learncryptography.pw)[809263]: Authentication at ... show more 2026-08-29T11:53:49.841866+02:00 milkyway wordpress(learncryptography.pw)[809263]: Authentication attempt for unknown user noxxi from 130.185.123.55 2026-08-29T11:53:49.874109+02:00 milkyway wordpress(learncryptography.pw)[797822]: Authentication attempt for unknown user mysticknightuk from 130.185.123.55 2026-08-29T11:53:49.901323+02:00 milkyway wordpress(learncryptography.pw)[809273]: Authentication failure for macminty from 130.185.123.55 ... show less	Brute-Force Web App Attack
Anonymous	2026-08-29 09:13:19 (5 hours ago)	[Sat Aug 29 11:13:18.385234 2026] [authz_core:error] [pid 1637:tid 1827] [client 130.185.123.55:4313 ... show more [Sat Aug 29 11:13:18.385234 2026] [authz_core:error] [pid 1637:tid 1827] [client 130.185.123.55:43130] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Sat Aug 29 11:13:18.417131 2026] [authz_core:error] [pid 10571:tid 10621] [client 130.185.123.55:43146] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Sat Aug 29 11:13:18.439705 2026] [authz_core:error] [pid 7160:tid 7202] [client 130.185.123.55:43148] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Sat Aug 29 11:13:18.473269 2026] [authz_core:error] [pid 19453:tid 19577] [client 130.185.123.55:43158] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 Marc	2026-08-29 09:08:54 (5 hours ago)	130.185.123.55 - - [29/Aug/2026:10:15:38 +0200] "GET /wp-login.php HTTP/2.0" 200 3448 "-" "Mozilla/5 ... show more 130.185.123.55 - - [29/Aug/2026:10:15:38 +0200] "GET /wp-login.php HTTP/2.0" 200 3448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:10:15:38 +0200] "GET /wp-login.php HTTP/2.0" 200 3448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:10:15:39 +0200] "POST /wp-login.php HTTP/2.0" 200 3285 "https://alsarnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:10:15:39 +0200] "POST /wp-login.php HTTP/2.0" 200 3284 "https://alsarnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 130.185.123.55 - - [29/Aug/2026:11:08:53 +0200] "GET /wp-login.php HTTP/2.0" 200 3321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-08-29 09:04:57 (5 hours ago)	(y3) Failed access -byebye- from 130.185.123.55 (AE/United Arab Emirates/-): (CF_ENABLE)	Hacking
🇬🇧 Aetherweb Ark	2026-08-29 08:29:21 (5 hours ago)	(mod_security) mod_security (id:949110) triggered by 130.185.123.55 (AE/United Arab Emirates/-): N i ... show more (mod_security) mod_security (id:949110) triggered by 130.185.123.55 (AE/United Arab Emirates/-): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::165

🇳🇱 185.242.226.62

🇺🇸 71.6.146.186

🇨🇳 27.18.84.143

🇺🇸 23.95.25.225

10.244.56.249

🇺🇸 4.148.1.92

🇬🇧 193.163.125.235

172.20.105.109

🇺🇸 162.216.150.28

🇺🇸 147.185.132.44

🇧🇩 103.112.54.86

🇷🇸 93.87.10.150

🇺🇸 70.89.116.5

🇳🇱 45.148.10.62

🇺🇸 44.215.219.236

🇨🇳 36.250.221.148

🇬🇧 35.203.211.17

🇸🇬 35.197.158.4

🇷🇺 5.189.238.149