JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.61.145.190

130.61.145.190 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 0%: ?

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.61.145.190

Whois 130.61.145.190

IP Abuse Reports for 130.61.145.190:

This IP address has been reported a total of 101 times from 48 distinct sources. 130.61.145.190 was first reported on October 18th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-02-21 23:22:56 (1 year ago)	Unauthorized web scan.	Web App Attack
🇦🇹 urnilxfgbez	2025-02-17 23:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 gu-alvareza	2025-02-17 07:05:16 (1 year ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
🇨🇿 Countryman	2025-02-17 04:23:41 (1 year ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 Starburst SysOp Team	2025-02-17 04:13:00 (1 year ago)	[Mon Feb 17 04:13:13.725205 2025] [:error] [pid 1863491:tid 1863564] [client 130.61.145.190:45956] [ ... show more [Mon Feb 17 04:13:13.725205 2025] [:error] [pid 1863491:tid 1863564] [client 130.61.145.190:45956] [client 130.61.145.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|207.244.236.120:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "207.244.236.120"] [uri "/hello.world"] [unique_id "Z7K3WV_ZPakpTtjOF1uOkQAAAJI"] show less	Hacking Brute-Force Web App Attack
🇩🇪 Admins@FBN	2025-02-17 04:07:07 (1 year ago)	FW-PortScan: Traffic Blocked srcport=61654 dstport=22	Port Scan Hacking SSH
🇳🇱 Study Bitcoin 🤗	2025-02-17 03:56:27 (1 year ago)	Port probe to tcp/443 (https) [srv129]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-02-17 03:32:06 (1 year ago)	Port probe to tcp/23 (telnet) [gda]	Port Scan Hacking
🇺🇸 RAP	2025-02-17 03:19:11 (1 year ago)	2025-02-17 03:19:11 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 bigscoots.com	2025-02-17 02:23:19 (1 year ago)	(sshd) Failed SSH login from 130.61.145.190 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 130.61.145.190 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 16 20:22:27 21773 sshd[27813]: Invalid user sales from 130.61.145.190 port 43492 Feb 16 20:22:30 21773 sshd[27813]: Failed password for invalid user sales from 130.61.145.190 port 43492 ssh2 Feb 16 20:22:50 21773 sshd[27815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.145.190 user=root Feb 16 20:22:52 21773 sshd[27815]: Failed password for root from 130.61.145.190 port 56112 ssh2 Feb 16 20:23:10 21773 sshd[27871]: Invalid user admin from 130.61.145.190 port 40814 show less	Brute-Force SSH
🇺🇸 MPL	2025-02-17 02:21:15 (1 year ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2025-02-17 01:56:55 (1 year ago)	(mod_security) mod_security (id:218420) triggered by 130.61.145.190 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218420) triggered by 130.61.145.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 20:56:48.559899 2025] [security2:error] [pid 2377456:tid 2377456] [client 130.61.145.190:41568] [client 130.61.145.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.206:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.206"] [uri "/hello.world"] [unique_id "Z7KXYD7j_RKyC5Y4qUSKtAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-02-17 00:49:45 (1 year ago)	list.rtbh.com.tr report: tcp/2222, tcp/23	Brute-Force
Anonymous	2025-02-17 00:16:39 (1 year ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇫🇷 Murazaki	2025-02-16 23:02:27 (1 year ago)	130.61.145.190 - - [16/Feb/2025:19:36:12 +0100] "zyxel.selfrep;rm+-rf+zyxelselfrep%3b%23&remoteSubmi ... show more 130.61.145.190 - - [16/Feb/2025:19:36:12 +0100] "zyxel.selfrep;rm+-rf+zyxelselfrep%3b%23&remoteSubmit=Save" 500 170 "-" "-" "-" ... show less	Hacking

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 103.189.235.114

🇭🇰 103.20.223.56

🇵🇰 103.19.252.39

🇳🇱 45.156.87.204

🇧🇪 34.14.93.109

🇺🇸 31.59.40.94

🇺🇸 159.223.159.88

🇺🇸 148.153.32.126

🇨🇳 112.126.62.31

🇸🇬 103.189.234.9

🇮🇩 103.188.177.46

🇲🇾 103.187.26.126

🇻🇳 103.153.254.96

🇵🇱 83.219.248.100

🇳🇱 45.148.10.152

🇯🇵 43.163.244.98

🇺🇸 23.165.184.245

🇺🇸 20.168.7.169

🇺🇸 196.51.187.140

🇫🇷 185.135.137.194