JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.94.41.23

130.94.41.23 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 75%: ?

75%

ISP	LIGHT NODE LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS154177
Domain Name	lightnode.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.94.41.23

Whois 130.94.41.23

IP Abuse Reports for 130.94.41.23:

This IP address has been reported a total of 20 times from 12 distinct sources. 130.94.41.23 was first reported on July 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dispaisyenterprises	2026-07-27 20:09:47 (1 hour ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (9 bytes of payload); 44444 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (9 bytes of payload); 44444 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 ras07	2026-07-27 20:00:07 (1 hour ago)	Brute force SSH login attempts.	Brute-Force SSH
🇩🇪 femboy.cat	2026-07-27 19:56:13 (1 hour ago)	Port scan to tcp/10083 from 130.94.41.23	Brute-Force
🇬🇧 NarcTix	2026-07-27 18:14:07 (2 hours ago)	2026-07-27T18:14:06.404166+00:00 sshd[35850]: Invalid user ubuntu from 130.94.41.23 port 51569 ...	Brute-Force SSH
🇺🇸 Saber1	2026-07-27 17:56:08 (3 hours ago)	Successful SSH login observed on Cowrie honeypot. Targeted username: ubuntu. Observed at: 2026-07-27 ... show more Successful SSH login observed on Cowrie honeypot. Targeted username: ubuntu. Observed at: 2026-07-27T17:55:31.089563Z. Session: 25453f73eca4. show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 17:43:40 (3 hours ago)	130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; ... show more 130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 12:38:38 14239 sshd[30580]: Invalid user ubuntu from 130.94.41.23 port 52185 Jul 27 12:38:40 14239 sshd[30580]: Failed password for invalid user ubuntu from 130.94.41.23 port 52185 ssh2 Jul 27 12:28:50 14239 sshd[25157]: Invalid user ubuntu from 209.99.187.198 port 50700 Jul 27 12:28:52 14239 sshd[25157]: Failed password for invalid user ubuntu from 209.99.187.198 port 50700 ssh2 Jul 27 12:43:35 14239 sshd[846]: Invalid user ubuntu from 27.74.253.185 port 58539 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 NetWatch	2026-07-27 17:26:51 (3 hours ago)	The IP 130.94.41.23 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇺🇸 bigscoots.com	2026-07-27 17:09:48 (4 hours ago)	130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; ... show more 130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 17:09:37 23452 sshd[17493]: Invalid user ubuntu from 130.94.41.23 port 54796 Jul 27 16:59:50 23452 sshd[12459]: Invalid user ubuntu from 103.143.207.31 port 59125 Jul 27 16:59:52 23452 sshd[12459]: Failed password for invalid user ubuntu from 103.143.207.31 port 59125 ssh2 Jul 27 16:54:49 23452 sshd[9971]: Invalid user ubuntu from 9.169.195.159 port 35062 Jul 27 16:54:51 23452 sshd[9971]: Failed password for invalid user ubuntu from 9.169.195.159 port 35062 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 r	2026-07-27 16:57:45 (4 hours ago)	Jul 27 16:57:44 panel sshd[20698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 27 16:57:44 panel sshd[20698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.41.23 show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-27 16:41:31 (4 hours ago)	[16:41] Attempted SSH login with credentials ubuntu:1**z	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 14:16:39 (6 hours ago)	130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 09:01:14 15368 sshd[7573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.77.114 user=root Jul 27 09:01:17 15368 sshd[7573]: Failed password for root from 51.79.77.114 port 48546 ssh2 Jul 27 09:16:30 15368 sshd[15915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.225.253.2 user=root Jul 27 09:11:24 15368 sshd[13160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.41.23 user=root Jul 27 09:11:26 15368 sshd[13160]: Failed password for root from 130.94.41.23 port 61103 ssh2 IP Addresses Blocked: 51.79.77.114 (CA/Canada/ns569480.ip-51-79-77.net) 74.225.253.2 (IN/India/-) show less	Brute-Force SSH
🇩🇪 Bigbear3	2026-07-27 13:54:03 (7 hours ago)	Report-by-bigbear3	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 13:17:19 (7 hours ago)	130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 07:51:57 15127 sshd[3507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.139.139.5 user=root Jul 27 07:52:00 15127 sshd[3507]: Failed password for root from 41.139.139.5 port 61700 ssh2 Jul 27 08:17:11 15127 sshd[16926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.41.23 user=root Jul 27 08:12:05 15127 sshd[14306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.39.79 user=root Jul 27 08:12:07 15127 sshd[14306]: Failed password for root from 174.138.39.79 port 36590 ssh2 IP Addresses Blocked: 41.139.139.5 (KE/Kenya/41-139-139-5.safaricombusiness.co.ke) show less	Brute-Force SSH
Anonymous	2026-07-27 13:12:24 (8 hours ago)	130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 130.94.41.23 (SG/Singapore/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 27 23:12:10 syd2 sshd[1571021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.116.110.1 user=root Jul 27 22:57:25 syd2 sshd[1568685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.41.23 user=root Jul 27 22:57:27 syd2 sshd[1568685]: Failed password for root from 130.94.41.23 port 52168 ssh2 Jul 27 22:51:58 syd2 sshd[1567589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.171.82.24 user=root Jul 27 22:51:59 syd2 sshd[1567589]: Failed password for root from 113.171.82.24 port 8435 ssh2 IP Addresses Blocked: 103.116.110.1 (ID/Indonesia/-) show less	Port Scan
🇺🇸 drewf.ink	2026-07-27 12:53:23 (8 hours ago)	[12:53] Attempted SSH login with credentials root:@d********56	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 45.78.194.186

🇪🇬 197.135.75.11

🇩🇪 167.94.146.43

🇸🇪 157.22.101.77

🇭🇰 118.193.40.88

🇻🇳 116.99.168.91

🇮🇩 69.5.20.205

🇳🇱 45.148.10.31

🇳🇱 195.178.110.227

🇩🇪 194.88.98.92

🇩🇪 150.241.113.163

🇩🇪 104.207.54.254

🇺🇸 54.173.150.134

🇺🇦 46.98.201.111

🇺🇸 44.204.80.36

🇺🇸 34.234.197.175

🇧🇪 198.235.24.134

🇺🇦 194.156.249.154

🇧🇷 177.174.109.143

🇵🇱 176.53.159.197