JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.189.130.80

2.189.130.80 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 100%: ?

100%

ISP	Toloe Rayaneh Loghman
Usage Type	University/College/School
ASN	AS197343
Domain Name	trlict.com
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.189.130.80

Whois 2.189.130.80

IP Abuse Reports for 2.189.130.80:

This IP address has been reported a total of 107 times from 86 distinct sources. 2.189.130.80 was first reported on May 28th 2026, and the most recent report was 40 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 alph44	2026-06-02 21:52:59 (1 day ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 wlt-blocker	2026-06-02 20:43:48 (1 day ago)	Attempts to access SSH server with wrong credentials	SSH
🇩🇪 ipcop.net	2026-06-02 19:52:49 (1 day ago)	2026-06-02T21:52:46.397374+02:00 gw-de15-01.guestgw.net sshd[446605]: Connection closed by authentic ... show more 2026-06-02T21:52:46.397374+02:00 gw-de15-01.guestgw.net sshd[446605]: Connection closed by authenticating user root 2.189.130.80 port 42668 [preauth] 2026-06-02T21:52:46.985363+02:00 gw-de15-01.guestgw.net sshd[446609]: Connection closed by authenticating user root 2.189.130.80 port 42680 [preauth] 2026-06-02T21:52:47.575615+02:00 gw-de15-01.guestgw.net sshd[446613]: Connection closed by authenticating user root 2.189.130.80 port 42686 [preauth] 2026-06-02T21:52:48.227937+02:00 gw-de15-01.guestgw.net sshd[446617]: Connection closed by authenticating user root 2.189.130.80 port 42702 [preauth] 2026-06-02T21:52:48.826347+02:00 gw-de15-01.guestgw.net sshd[446619]: Connection closed by authenticating user root 2.189.130.80 port 42704 [preauth] show less	Brute-Force
🇧🇬 OHOST.BG	2026-06-02 19:38:21 (1 day ago)	2026-06-02T22:38:15.108193+03:00 irc sshd[2635750]: Failed password for root from 2.189.130.80 port ... show more 2026-06-02T22:38:15.108193+03:00 irc sshd[2635750]: Failed password for root from 2.189.130.80 port 58898 ssh2 2026-06-02T22:38:16.429081+03:00 irc sshd[2635754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.189.130.80 user=root 2026-06-02T22:38:18.493602+03:00 irc sshd[2635754]: Failed password for root from 2.189.130.80 port 58914 ssh2 2026-06-02T22:38:19.414151+03:00 irc sshd[2635759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.189.130.80 user=root 2026-06-02T22:38:20.890901+03:00 irc sshd[2635759]: Failed password for root from 2.189.130.80 port 58930 ssh2 ... show less	Brute-Force SSH
🇺🇸 Tect.host	2026-06-02 17:18:01 (1 day ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-02 16:20:18 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-06-02 15:38:45 (1 day ago)	2026-06-02T16:38:36.950229+01:00 server2.gitlab.splendid-hosting.de sshd[3382249]: Failed password f ... show more 2026-06-02T16:38:36.950229+01:00 server2.gitlab.splendid-hosting.de sshd[3382249]: Failed password for root from 2.189.130.80 port 36820 ssh2 2026-06-02T16:38:38.368983+01:00 server2.gitlab.splendid-hosting.de sshd[3382258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.189.130.80 user=root 2026-06-02T16:38:40.585198+01:00 server2.gitlab.splendid-hosting.de sshd[3382258]: Failed password for root from 2.189.130.80 port 36826 ssh2 2026-06-02T16:38:41.578487+01:00 server2.gitlab.splendid-hosting.de sshd[3382271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.189.130.80 user=root 2026-06-02T16:38:43.874817+01:00 server2.gitlab.splendid-hosting.de sshd[3382271]: Failed password for root from 2.189.130.80 port 36830 ssh2 ... show less	Brute-Force SSH
🇫🇷 Safronus	2026-06-02 14:54:04 (1 day ago)	Banned by fail2ban jail=sshd-logger match=$f2bV_matches	Brute-Force SSH
🇵🇹 WebTejo	2026-06-02 14:40:23 (1 day ago)	Detected multiple authentication failures and invalid user attempts from IP address 2.189.130.80 on ... show more Detected multiple authentication failures and invalid user attempts from IP address 2.189.130.80 on [PT] Lis-4 Node. show less	Brute-Force SSH
🇧🇪 sid3windr	2026-06-02 14:31:13 (1 day ago)	2026-06-02T16:31:09.028689+02:00 anakin sshd-session[3801258]: Failed password for root from 2.189.1 ... show more 2026-06-02T16:31:09.028689+02:00 anakin sshd-session[3801258]: Failed password for root from 2.189.130.80 port 38378 ssh2 2026-06-02T16:31:09.911043+02:00 anakin sshd-session[3801261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.189.130.80 user=root 2026-06-02T16:31:11.878482+02:00 anakin sshd-session[3801261]: Failed password for root from 2.189.130.80 port 38388 ssh2 show less	Brute-Force SSH
🇵🇱 Wepted	2026-06-02 13:23:16 (1 day ago)	2026-06-02T15:23:14.329849+02:00 axisverse sshd-session[614085]: Invalid user user from 2.189.130.80 ... show more 2026-06-02T15:23:14.329849+02:00 axisverse sshd-session[614085]: Invalid user user from 2.189.130.80 port 49006 2026-06-02T15:23:15.016032+02:00 axisverse sshd-session[614107]: Invalid user user from 2.189.130.80 port 49010 2026-06-02T15:23:15.696308+02:00 axisverse sshd-session[614127]: Invalid user user from 2.189.130.80 port 49012 ... show less	Brute-Force SSH
🇷🇺 Reaper	2026-06-02 11:59:44 (1 day ago)	Failed password for user root from 2.189.130.80	Brute-Force SSH
🇺🇸 MPL	2026-06-02 11:42:00 (1 day ago)	tcp/22 (8 or more attempts)	Port Scan
🇳🇱 Alboweb B.V.	2026-06-02 11:16:49 (1 day ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH

Showing 31 to 45 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇹🇼 198.235.24.93

🇦🇷 190.181.108.102

🇱🇹 185.169.4.199

🇩🇪 178.27.90.142

🇺🇸 172.253.221.148

🇩🇪 167.94.146.77

🇺🇸 136.144.33.191

🇧🇩 103.132.182.37

🇲🇳 103.10.23.128

🇺🇸 65.49.1.132

🇺🇸 64.62.156.94

🇵🇰 59.103.119.153

🇵🇭 49.144.23.255

🇧🇭 46.42.119.207

🇧🇪 34.53.247.190

🇫🇷 15.237.191.23

🇨🇳 203.83.231.93

🇩🇪 172.217.34.29

🇺🇸 167.172.133.85