JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.12.180.77

130.12.180.77

Recent Activity

2,394 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Virtualine Technologies

Usage Type

Data Center/Web Hosting/Transit

ASN

AS202412

Domain Name

virtualine.org

Country

🇩🇪 Germany

City

Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 130.12.180.77:

This IP address has been reported a total of 2,394 times from 672 distinct sources. 130.12.180.77 was first reported on January 3rd 2026, and the most recent report was 7 minutes ago. In the last 60 days, the top reporter locations were: Germany with 310 reports; United States of America with 257 reports; France with 100 reports. The most common categories in these recent reports were: Web App Attack 764 times; Port Scan 355 times; Hacking 303 times; Brute-Force 267 times; Bad Web Bot 262 times; Other 137 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-04 13:10:14 (7 minutes ago)	130.12.180.77 - - [04/Sep/2026:13:07:04 +0000] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03\x14h\xD ... show more 130.12.180.77 - - [04/Sep/2026:13:07:04 +0000] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03\x14h\xD9\xE2\x95\xC1\x81\xD7s\x14\x0B\xA2y\xED\xC9\xA9\xC6\x11/W}\xEDb\xD1\x1E\xDCl0mS,\xEA -fab\xF0\xCB\xD2Z\xDD\xC9\xA2\xF5\xC7\xAC\xF0en\x01U\xC6\xEA\xA3\x15\xC2\x17Z\x1B\xB1\x1Df\xF25\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 130.12.180.77 - - [04/Sep/2026:13:10:13 +0000] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03i\x10F\xF5\xC7\x08\xA0\xE5\x92y\xA0\x06\xCE\xFD\x86\xBF\xF9\xA4\xE5\xE2\x03\x1D\x05\xFA\x97\x90\xDBa\xE2n\xD4r \xB0\xB4\x9C\x92l\xC9\xD4\x03.\xE6o\xA5\xE5\x1Ap!\x07X\xFA\xAB\xAEw\x07Z\x84\xC0\x8Cm\x83\xFC\|\xF7\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 130.12.180.77 - - [04/Sep/2026:13:10:13 +0000] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03\xD5~Vm\x12d\x97\x12t\x95.}\xBC\xD4\x14]\xAE\xFB\x93\x08\xBF\x09\xBD7hv\x11\xE12(\xBCz \xA5\x11\xC8?\xFF\xBB\x894\x83\xF9\xBE\x09\xCB\x17\xFF\xE8tj\xFE\xB9\x8B\xBD ... show less	Brute-Force
🇭🇰 amyriad	2026-09-04 12:12:23 (1 hour ago)	130.12.180.77 - - [04/Sep/2026:20:09:17 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 130.12.180.77 - - [0 ... show more 130.12.180.77 - - [04/Sep/2026:20:09:17 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 130.12.180.77 - - [04/Sep/2026:20:12:22 +0800] "GET / HTTP/1.0" 400 618 "-" "-" 130.12.180.77 - - [04/Sep/2026:20:12:23 +0800] "GET / HTTP/1.0" 400 618 "-" "-" ... show less	DDoS Attack Hacking Brute-Force
🇩🇪 ddobko	2026-09-04 11:30:00 (1 hour ago)		Bad Web Bot Web App Attack
🇩🇪 gadix	2026-09-04 09:04:04 (4 hours ago)	[04/Sep/2026:11:00:45.048681 +0200] apqIvdWzcWr-UviINLS-RwAAAAA 130.12.180.77 44810 127.0.0.1 7081 [ ... show more [04/Sep/2026:11:00:45.048681 +0200] apqIvdWzcWr-UviINLS-RwAAAAA 130.12.180.77 44810 127.0.0.1 7081 [04/Sep/2026:11:04:01.742045 +0200] apqJgdWzcWr-UviINLS-VQAAAAI 130.12.180.77 33584 127.0.0.1 7081 [04/Sep/2026:11:04:01.781019 +0200] apqJgajBEU99rOnFJjpr3gAAAE0 130.12.180.77 33594 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 jfz-abuse	2026-09-04 08:52:21 (4 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
Anonymous	2026-09-04 07:02:45 (6 hours ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇺🇸 drewf.ink	2026-09-04 05:29:55 (7 hours ago)	[05:29] Probed an open proxy (direct request to the proxy port)	Open Proxy
🇫🇷 Vaction	2026-09-04 05:22:25 (7 hours ago)	130.12.180.77 - - [04/Sep/2026:07:22:25 +0200] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Window ... show more 130.12.180.77 - - [04/Sep/2026:07:22:25 +0200] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Hacking Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-09-04 05:00:09 (8 hours ago)	Automated ban via infra-monitor: suspicious-probe	Port Scan
🇵🇱 itsvic.dev	2026-09-04 04:31:04 (8 hours ago)	130.12.180.77 - - [04/Sep/2026:04:27:55 +0000] "109.122.28.251" "GET /.env HTTP/1.1" 404 14 "-" "Moz ... show more 130.12.180.77 - - [04/Sep/2026:04:27:55 +0000] "109.122.28.251" "GET /.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.12.180.77 - - [04/Sep/2026:04:31:02 +0000] "109.122.28.251" "GET /config.php.bak HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.12.180.77 - - [04/Sep/2026:04:31:03 +0000] "109.122.28.251" "GET /public/.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇨🇦 alexbfr	2026-09-04 04:24:16 (8 hours ago)	Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.	Web App Attack
🇯🇵 tttomomi	2026-09-04 04:01:48 (9 hours ago)	Repeated probing for credential and configuration files, and for known webshell and remote-code-exec ... show more Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.env, /public/.env. show less	Web App Attack
Anonymous	2026-09-04 02:09:58 (11 hours ago)	130.12.180.77 - - [04/Sep/2026:04:06:58 +0200] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03-hr\x10\ ... show more 130.12.180.77 - - [04/Sep/2026:04:06:58 +0200] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03-hr\x10\xF1\xFC\xB9\x1Eq\x95\xCDw\x9B\xC0\xAA\x98\xF3\xF12\xDA\x8D8Z\xD2\x00\x92\x0C\xE3\xF7\xF1\xAB\x98 \xBD\x9A\xF2\xB5b\x19\x8E\x00m\xF6xq\xD1\xF2\xFC:!\x90\xD7\xE8\xFE\xCC\xB7'z\xE6\xEE\xBF]T\xE5\xE9\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 130.12.180.77 - - [04/Sep/2026:04:09:57 +0200] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03\xD4\xB4$\xA9\x8D\xDBD\xAA\x92\xCD\xE0\x97(\xF2\x98\xAFqga,\xE5C\xDC\xC8T\xDD\xEC\xA9m\x0B\x85\xD3 \x9D\xDB(\xB7\xC4!\xCC\xBB\xD8\xF4\x05\xAD\xB2\x83E[\xC2\x03J\xA1q\xB5a\xA2\x9D\xA6\x1A\xD0x\xD4\xC58\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 130.12.180.77 - - [04/Sep/2026:04:09:58 +0200] "\x16\x03\x01\x05\xD0\x01\x00\x05\xCC\x03\x03)\xD5sT\x13" 400 150 "-" "-" "-" ... show less	Hacking Web App Attack
🇩🇪 loveprod	2026-09-04 00:41:15 (12 hours ago)	130.12.180.77 - - [04/Sep/2026:03:38:15 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Window ... show more 130.12.180.77 - - [04/Sep/2026:03:38:15 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.12.180.77 - - [04/Sep/2026:03:41:15 +0300] "GET /config.php.bak HTTP/1.1" 301 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇩🇪 Roper123	2026-09-04 00:03:31 (13 hours ago)	Web exploits	Web App Attack

Showing 1 to 15 of 2394 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇳 213.154.77.61

🇧🇴 181.115.146.102

🇩🇪 162.19.254.90

🇷🇺 95.54.75.165

🇫🇷 91.231.89.203

🇩🇪 64.89.163.246

🇸🇦 64.65.75.173

🇺🇸 34.58.210.225

🇺🇸 217.181.70.169

🇩🇪 185.220.100.241

🇺🇸 148.59.129.104

🇮🇳 103.88.76.27

🇮🇩 103.40.120.158

🇫🇷 91.231.89.69

🇩🇪 69.5.169.114

🇨🇳 42.85.239.3

🇺🇸 34.150.144.214

🇳🇱 185.180.109.243

🇸🇪 158.174.70.215

🇺🇸 66.132.172.119