JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.0.130.59

156.0.130.59 was found in our database!

This IP was reported 884 times. Confidence of Abuse is 0%: ?

ISP	University of Energy and Natural Resources
Usage Type	University/College/School
ASN	AS328224
Domain Name	uenr.edu.gh
Country	🇬🇭 Ghana
City	Sunyani, Bono

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.0.130.59

Whois 156.0.130.59

IP Abuse Reports for 156.0.130.59:

This IP address has been reported a total of 884 times from 275 distinct sources. 156.0.130.59 was first reported on November 21st 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-11-24 20:10:06 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 nicosqc	2025-11-24 06:55:07 (6 months ago)	Invalid user odoo15 from 156.0.130.59 port 51414	Brute-Force SSH
🇩🇪 nicosqc	2025-11-24 06:55:07 (6 months ago)	Invalid user odoo15 from 156.0.130.59 port 51414	Brute-Force SSH
🇩🇪 nicosqc	2025-11-24 06:55:07 (6 months ago)	Invalid user odoo15 from 156.0.130.59 port 51414	Brute-Force SSH
🇩🇪 nicosqc	2025-11-24 06:55:07 (6 months ago)	Invalid user odoo15 from 156.0.130.59 port 51414	Brute-Force SSH
🇩🇪 Bigbear3	2025-11-24 06:45:57 (6 months ago)	Report-by-bigbear3	Brute-Force SSH
🇩🇪 chris_yooo	2025-11-24 03:03:51 (6 months ago)	Nov 23 21:41:36 proxmox-ve sshd[2779445]: Failed password for invalid user roots from 156.0.130.59 p ... show more Nov 23 21:41:36 proxmox-ve sshd[2779445]: Failed password for invalid user roots from 156.0.130.59 port 8284 ssh2 Nov 23 22:03:49 proxmox-ve sshd[2796121]: Connection from 156.0.130.59 port 18324 on 49.12.130.31 port 22 rdomain "" Nov 23 22:03:50 proxmox-ve sshd[2796121]: Invalid user zmarin from 156.0.130.59 port 18324 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-11-24 01:13:40 (6 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/156.0.130.59	SSH
🇩🇪 ghostwarriors	2025-11-23 17:50:20 (6 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 drodrig	2025-11-23 08:06:49 (6 months ago)	CrowdSec triggered: %!s(*string=0xc0083d05c0) (0 events)	Brute-Force
🇺🇸 bigscoots.com	2025-11-23 07:09:48 (6 months ago)	156.0.130.59 (GH/Ghana/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ... show more 156.0.130.59 (GH/Ghana/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 23 00:48:14 13811 sshd[8187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.130.59 user=root Nov 23 00:48:16 13811 sshd[8187]: Failed password for root from 156.0.130.59 port 51517 ssh2 Nov 23 01:09:32 13811 sshd[9807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.130.62 user=root Nov 23 01:00:47 13811 sshd[9118]: Failed password for root from 156.0.130.89 port 28191 ssh2 Nov 23 01:00:46 13811 sshd[9118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.130.89 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 LRNP	2025-11-23 04:42:54 (6 months ago)	2025-11-23T04:42:50.908769+00:00 helium sshd-session[3143004]: pam_unix(sshd:auth): authentication f ... show more 2025-11-23T04:42:50.908769+00:00 helium sshd-session[3143004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.130.59 2025-11-23T04:42:52.421522+00:00 helium sshd-session[3143004]: Failed password for invalid user term1 from 156.0.130.59 port 30514 ssh2 2025-11-23T04:42:53.931239+00:00 helium sshd-session[3143004]: Disconnected from invalid user term1 156.0.130.59 port 30514 [preauth] ... show less	Brute-Force SSH
🇬🇧 Deveroonie	2025-11-22 04:03:14 (6 months ago)	2025-11-22T04:03:13.702741+00:00 instance-20241019-1127 sshd[680227]: Disconnected from authenticati ... show more 2025-11-22T04:03:13.702741+00:00 instance-20241019-1127 sshd[680227]: Disconnected from authenticating user root 156.0.130.59 port 2541 [preauth] ... show less	Hacking Brute-Force SSH
🇬🇧 Deveroonie	2025-11-22 03:42:51 (6 months ago)	2025-11-22T03:42:51.562895+00:00 instance-20241019-1127 sshd[679889]: Disconnected from authenticati ... show more 2025-11-22T03:42:51.562895+00:00 instance-20241019-1127 sshd[679889]: Disconnected from authenticating user root 156.0.130.59 port 20963 [preauth] ... show less	Hacking Brute-Force SSH
🇬🇧 Deveroonie	2025-11-22 03:21:37 (6 months ago)	2025-11-22T03:21:36.498972+00:00 instance-20241019-1127 sshd[679553]: Disconnected from authenticati ... show more 2025-11-22T03:21:36.498972+00:00 instance-20241019-1127 sshd[679553]: Disconnected from authenticating user root 156.0.130.59 port 12012 [preauth] ... show less	Hacking Brute-Force SSH

Showing 1 to 15 of 884 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 198.38.87.17

🇳🇱 185.156.73.233

🇺🇸 162.215.135.80

🇺🇸 134.195.88.93

🇨🇦 85.217.149.6

🇮🇳 59.182.66.227

🇸🇬 47.84.117.18

🇨🇳 221.234.36.123

🇺🇸 208.84.101.205

🇧🇷 205.210.31.164

🇨🇳 182.200.222.216

🇪🇸 154.70.207.29

🇫🇷 91.231.89.249

🇨🇦 85.217.149.23

🇦🇿 62.217.147.46

🇺🇸 34.125.26.140

🇧🇷 179.216.16.184

🇪🇪 158.173.75.235

🇺🇸 135.237.124.96

🇧🇷 102.211.152.138