AbuseIPDB » 130.61.18.196

130.61.18.196 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
Domain Name	oracleemaildelivery.com
Country	Germany
City	Frankfurt am Main, Hesse

Report 130.61.18.196

Whois 130.61.18.196

IP Abuse Reports for 130.61.18.196:

This IP address has been reported a total of 71 times from 47 distinct sources. 130.61.18.196 was first reported on November 11th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
pongohub.com	2024-11-16 23:00:25 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	Brute-Force SSH
rtbh.com.tr	2024-11-13 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-12 20:53:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
MPL	2024-11-12 08:53:43 (3 weeks ago)	tcp/80	Port Scan
MPL	2024-11-12 08:53:43 (3 weeks ago)	tcp/80	Port Scan
rtbh.com.tr	2024-11-12 08:53:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
alps.one	2024-11-12 08:28:24 (3 weeks ago)	Nov 12 09:26:24 cloud sshd[271092]: Invalid user cloud from 130.61.18.196 port 59910 Nov 12 09 ... show moreNov 12 09:26:24 cloud sshd[271092]: Invalid user cloud from 130.61.18.196 port 59910 Nov 12 09:27:34 cloud sshd[271112]: Invalid user prometheus from 130.61.18.196 port 57090 Nov 12 09:27:52 cloud sshd[271118]: Invalid user carey from 130.61.18.196 port 41754 Nov 12 09:28:07 cloud sshd[271121]: Invalid user cumulus from 130.61.18.196 port 54308 Nov 12 09:28:24 cloud sshd[271126]: Invalid user test4 from 130.61.18.196 port 38178 show less	Brute-Force SSH
blackpanther	2024-11-12 07:58:20 (3 weeks ago)	2024-11-12T08:57:07.748258+01:00 ns1..de sshd[81888]: Invalid user temp from 130.61.18.196 port 5174 ... show more2024-11-12T08:57:07.748258+01:00 ns1..de sshd[81888]: Invalid user temp from 130.61.18.196 port 51748 2024-11-12T08:57:35.585212+01:00 ns1..de sshd[81913]: Invalid user es from 130.61.18.196 port 45462 2024-11-12T08:58:19.707432+01:00 ns1..de sshd[81938]: Invalid user test01 from 130.61.18.196 port 33818 show less	Brute-Force SSH
VHosting	2024-11-12 07:51:00 (3 weeks ago)	Attempt from 130.61.18.196	Brute-Force SSH
RAP	2024-11-12 07:42:36 (3 weeks ago)	2024-11-12 07:42:36 UTC Unauthorized activity to TCP port 22. SSH	SSH
js-hosting.at	2024-11-12 07:37:03 (3 weeks ago)	SSH Brute-Force attacks	Brute-Force SSH
MPL	2024-11-12 07:10:59 (3 weeks ago)	tcp ports: 80,443 (4 or more attempts)	Port Scan
Anonymous	2024-11-12 06:38:27 (3 weeks ago)	Probing for vulnerabilities 130.61.18.196 - - [12/Nov/2024:06:38:04 +0000] "GET /vendor/phpunit/phpu ... show moreProbing for vulnerabilities 130.61.18.196 - - [12/Nov/2024:06:38:04 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 734 "-" "Custom-AsyncHttpClient" 130.61.18.196 - - [12/Nov/2024:06:38:08 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 734 "-" "Custom-AsyncHttpClient" 130.61.18.196 - - [12/Nov/2024:06:38:16 +0000] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 734 "-" "Custom-AsyncHttpClient" 130.61.18.196 - - [12/Nov/2024:06:38:19 +0000] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 734 "-" "Custom-AsyncHttpClient" 130.61.18.196 - - [12/Nov/2024:06:38:23 +0000] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 403 734 "-" "Custom-AsyncHttpClient" ... show less	Web App Attack
Study Bitcoin 🤗	2024-11-12 06:30:53 (3 weeks ago)	Port probe to tcp/80 (http) [srv134]	Port Scan Bad Web Bot Web App Attack
RAP	2024-11-12 06:25:49 (3 weeks ago)	2024-11-12 06:25:49 UTC Unauthorized activity to TCP port 22. SSH	SSH