AbuseIPDB » 130.61.178.196

130.61.178.196 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 57%: ?

57%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 130.61.178.196

Whois 130.61.178.196

IP Abuse Reports for 130.61.178.196:

This IP address has been reported a total of 42 times from 22 distinct sources. 130.61.178.196 was first reported on December 11th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Study Bitcoin 🤗	2025-01-14 05:16:27 (17 hours ago)	Port probe to tcp/2375 [srv124]	Port Scan
rtbh.com.tr	2024-12-14 20:52:43 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
urnilxfgbez	2024-12-13 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
RAP	2024-12-13 19:18:16 (1 month ago)	2024-12-13 19:18:16 UTC Unauthorized activity to TCP port 22. SSH	SSH
diego	2024-12-13 17:45:59 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
rtbh.com.tr	2024-12-13 16:52:47 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
MPL	2024-12-13 16:35:56 (1 month ago)	tcp/80 (2 or more attempts)	Port Scan
Study Bitcoin 🤗	2024-12-13 16:07:02 (1 month ago)	Port probe to tcp/23 (telnet) [srv135]	Port Scan Hacking
thefoofighter	2024-12-13 12:55:00 (1 month ago)	[Fri Dec 13 12:54:58.827956 2024] [:error] [pid 4162257] [client 130.61.178.196:48302] [client 130.6 ... show more[Fri Dec 13 12:54:58.827956 2024] [:error] [pid 4162257] [client 130.61.178.196:48302] [client 130.61.178.196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 51)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/hello.world"] [unique_id "Z1wuoj6OkHdGQGMIyxpazAAAAAg"] [Fri Dec 13 12:55:00.206804 2024] [:error] [pid 4162257] [client 130.61.178.196:48302] [client 130.61.178.196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_ ... show less	Bad Web Bot Web App Attack
RAP	2024-12-13 12:16:00 (1 month ago)	Probing web services for vulnerabilities	Port Scan
diego	2024-12-13 10:15:27 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
Lia	2024-12-13 10:02:41 (1 month ago)	[UFW] 443 (TCP)	Port Scan Web App Attack
ghostwarriors	2024-12-13 06:20:37 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
pr0vieh	2024-12-13 05:40:09 (1 month ago)	2024-12-13T05:38:34.302762+00:00 Linux15 sshd[240852]: Failed password for root from 130.61.178.196 ... show more2024-12-13T05:38:34.302762+00:00 Linux15 sshd[240852]: Failed password for root from 130.61.178.196 port 44058 ssh2 2024-12-13T05:38:55.546849+00:00 Linux15 sshd[243431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.178.196 user=root 2024-12-13T05:38:57.577030+00:00 Linux15 sshd[243431]: Failed password for root from 130.61.178.196 port 36006 ssh2 2024-12-13T05:39:18.003058+00:00 Linux15 sshd[245436]: Invalid user cx from 130.61.178.196 port 55708 2024-12-13T05:39:18.005225+00:00 Linux15 sshd[245436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.178.196 2024-12-13T05:39:19.858933+00:00 Linux15 sshd[245436]: Failed password for invalid user cx from 130.61.178.196 port 55708 ssh2 2024-12-13T05:39:41.998505+00:00 Linux15 sshd[248065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.178.196 user=root 2024-12-13T05:39:44.344901+00:00 Linux15 s ... show less	Brute-Force SSH
rtbh.com.tr	2024-12-13 04:52:47 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force