JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

130.61.40.167

Neutral Activity

Abuse Confidence Score

0% Low Risk

41 reports

35 reporters · latest 3 months ago

ISP: Oracle Public Cloud
Usage Type: Data Center/Web Hosting/Transit
ASN: AS31898
Domain Name: oracleemaildelivery.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

130.61.40.167 has been reported 41 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

41 from 35 distinct reporters

First reported

May 23rd 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-05-23 01:08:34 UTC · (5 months ago)	20 attempts against mh-ssh on snow	Brute-Force SSH
🇨🇦 dpinse	2026-05-23 01:06:51 UTC · (5 months ago)	Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1	Hacking
🇺🇸 bigscoots.com	2026-05-23 00:59:45 UTC · (5 months ago)	(sshd) Failed SSH login from 130.61.40.167 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 22 19:58:20 15238 sshd[24329]: Invalid user admin from 130.61.40.167 port 36228 May 22 19:58:22 15238 sshd[24329]: ... show more (sshd) Failed SSH login from 130.61.40.167 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 22 19:58:20 15238 sshd[24329]: Invalid user admin from 130.61.40.167 port 36228 May 22 19:58:22 15238 sshd[24329]: Failed password for invalid user admin from 130.61.40.167 port 36228 ssh2 May 22 19:58:56 15238 sshd[24341]: Invalid user orangepi from 130.61.40.167 port 42816 May 22 19:58:58 15238 sshd[24341]: Failed password for invalid user orangepi from 130.61.40.167 port 42816 ssh2 May 22 19:59:30 15238 sshd[24445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.40.167 user=root show less	Brute-Force SSH
🇫🇷 EDSL	2026-05-23 00:54:30 UTC · (5 months ago)	[mail.edsl.fr] Banned by Fail2ban (Jail: syswarden-revshell)	Web App Attack Hacking
🇩🇪 ipcop.net	2026-05-23 00:44:23 UTC · (5 months ago)	2026-05-23T02:42:46.901987+02:00 guestgw-router01.remscheid.de sshd-session[2835761]: Connection closed by authenticating user admin 130.61.40.167 port 33714 [preauth] 2026-05-23T02:43:19.804643+02:00 guestgw-router01.remscheid.de sshd-session[283583 ... show more 2026-05-23T02:42:46.901987+02:00 guestgw-router01.remscheid.de sshd-session[2835761]: Connection closed by authenticating user admin 130.61.40.167 port 33714 [preauth] 2026-05-23T02:43:19.804643+02:00 guestgw-router01.remscheid.de sshd-session[2835836]: Invalid user orangepi from 130.61.40.167 port 33932 2026-05-23T02:43:19.941504+02:00 guestgw-router01.remscheid.de sshd-session[2835836]: Connection closed by invalid user orangepi 130.61.40.167 port 33932 [preauth] 2026-05-23T02:43:51.589810+02:00 guestgw-router01.remscheid.de sshd-session[2835918]: Connection closed by authenticating user root 130.61.40.167 port 54450 [preauth] 2026-05-23T02:44:21.844043+02:00 guestgw-router01.remscheid.de sshd-session[2835992]: Connection closed by authenticating user root 130.61.40.167 port 37516 [preauth] show less	Brute-Force
🇺🇸 hieronymousch	2026-05-23 00:41:50 UTC · (5 months ago)	2026-05-23T02:40:37.892486+02:00 hosting.defencegeeks.net sshd-session[2546501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.40.167 2026-05-23T02:40:40.231795+02:00 hosting.defencegeeks.net sshd-sess ... show more 2026-05-23T02:40:37.892486+02:00 hosting.defencegeeks.net sshd-session[2546501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.40.167 2026-05-23T02:40:40.231795+02:00 hosting.defencegeeks.net sshd-session[2546501]: Failed password for invalid user orangepi from 130.61.40.167 port 38678 ssh2 2026-05-23T02:41:12.030847+02:00 hosting.defencegeeks.net sshd-session[2547500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.40.167 user=root 2026-05-23T02:41:14.204331+02:00 hosting.defencegeeks.net sshd-session[2547500]: Failed password for root from 130.61.40.167 port 55886 ssh2 2026-05-23T02:41:47.446508+02:00 hosting.defencegeeks.net sshd-session[2548661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.40.167 user=root 2026-05-23T02:41:49.652264+02:00 hosting.defencegeeks.net sshd-session[2548661]: Failed password for root from 130.61.40.167 port ... show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2026-05-23 00:38:59 UTC · (5 months ago)	2026-05-23T00:34:36.272430+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1706548]: Invalid user admin from 130.61.40.167 port 41720 2026-05-23T00:35:08.684774+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1706622]: Invalid user orangepi from 130.61.40.167 port ... show more 2026-05-23T00:34:36.272430+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1706548]: Invalid user admin from 130.61.40.167 port 41720 2026-05-23T00:35:08.684774+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1706622]: Invalid user orangepi from 130.61.40.167 port 43902 2026-05-23T00:38:58.283920+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1706969]: Invalid user test from 130.61.40.167 port 60300 ... show less	Brute-Force SSH
🇺🇸 Tect.host	2026-05-23 00:32:32 UTC · (5 months ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇺🇸 gglobatech	2026-05-23 00:26:01 UTC · (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-42013	Web App Attack Hacking
🇩🇪 tentwentyfour	2026-05-23 00:21:06 UTC · (5 months ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇺🇸 xmission.com	2026-05-23 00:16:35 UTC · (5 months ago)	Blocked by UFW (TCP on 2375) Source port: 44044 TTL: 58 Packet length: 40 TOS: 0x00 This report (for 130.61.40.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan

Showing 31 to 41 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 177.228.196.153

🇨🇳 116.179.32.198

🇨🇳 106.12.75.58

🇫🇷 92.204.241.254

🇺🇸 91.230.168.218

🇨🇦 85.217.149.3

🇷🇴 80.94.95.115

🇮🇷 37.32.5.252

🇬🇧 31.14.254.77

🇩🇪 23.132.164.185

🇺🇸 172.203.218.174

🇵🇱 162.158.172.180

🇭🇰 150.5.149.18

🇫🇮 147.185.133.255

🇺🇸 143.244.144.230

🇯🇵 118.194.228.167

🇮🇳 117.214.74.133

🇺🇸 104.129.56.27

🇺🇸 162.216.149.87

🇵🇱 162.158.172.8