IP address


.508130.12.182.230
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL
130.12.182.230 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-19 08:14:22.024000
Was present on blacklist at: 2026-07-18 08:14, 2026-07-25 08:14, 2026-08-01 08:14, 2026-08-08 08:14, 2026-08-15 08:14, 2026-08-22 08:14, 2026-08-29 08:14, 2026-09-05 08:14, 2026-09-12 08:14, 2026-09-19 08:14
Spamhaus DROP
130.12.182.230 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-19 08:14:22.024000
Was present on blacklist at: 2026-07-18 08:14, 2026-07-25 08:14, 2026-08-01 08:14, 2026-08-08 08:14, 2026-08-15 08:14, 2026-08-22 08:14, 2026-08-29 08:14, 2026-09-05 08:14, 2026-09-12 08:14, 2026-09-19 08:14
AbuseIPDB
130.12.182.230 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-13 04:00:00.599000
Was present on blacklist at: 2026-07-19 04:00, 2026-07-20 04:00, 2026-07-21 04:00, 2026-07-23 04:00, 2026-07-26 04:00, 2026-07-28 04:00, 2026-07-30 04:00, 2026-08-04 04:00, 2026-08-06 04:00, 2026-08-12 04:00, 2026-08-13 04:00, 2026-08-15 04:00, 2026-08-16 04:00, 2026-08-18 04:00, 2026-08-21 04:00, 2026-08-22 04:00, 2026-08-24 04:00, 2026-08-26 04:00, 2026-08-31 04:00, 2026-09-05 04:00, 2026-09-06 04:00, 2026-09-08 04:00, 2026-09-12 04:00, 2026-09-13 04:00
blocklist.de SSH
130.12.182.230 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-09 22:05:00.158000
Was present on blacklist at: 2026-07-19 04:05, 2026-07-19 10:05, 2026-07-19 16:05, 2026-07-19 22:05, 2026-07-20 04:05, 2026-07-20 10:05, 2026-07-20 16:05, 2026-07-20 22:05, 2026-07-21 04:05, 2026-07-21 10:05, 2026-07-21 16:05, 2026-07-21 22:05, 2026-07-22 04:05, 2026-07-22 10:05, 2026-07-22 16:05, 2026-07-24 10:05, 2026-07-24 16:05, 2026-07-24 22:05, 2026-07-25 04:05, 2026-07-25 10:05, 2026-07-25 16:05, 2026-07-25 22:05, 2026-07-26 04:05, 2026-07-28 04:05, 2026-07-28 10:05, 2026-07-28 16:05, 2026-07-28 22:05, 2026-07-29 04:05, 2026-07-29 10:05, 2026-07-29 16:05, 2026-07-29 22:05, 2026-07-30 04:05, 2026-07-30 10:05, 2026-07-30 16:05, 2026-07-30 22:05, 2026-07-31 04:05, 2026-07-31 10:05, 2026-08-06 10:05, 2026-08-06 16:05, 2026-08-06 22:05, 2026-08-07 04:05, 2026-08-07 10:05, 2026-08-07 16:05, 2026-08-07 22:05, 2026-08-08 04:05, 2026-08-08 22:05, 2026-08-09 04:05, 2026-08-09 10:05, 2026-08-09 16:05, 2026-08-09 22:05, 2026-08-10 04:05, 2026-08-10 10:05, 2026-08-10 16:05, 2026-08-11 16:05, 2026-08-11 22:05, 2026-08-12 04:05, 2026-08-12 10:05, 2026-08-12 16:05, 2026-08-12 22:05, 2026-08-13 04:05, 2026-08-13 10:05, 2026-08-13 16:05, 2026-08-14 22:05, 2026-08-15 04:05, 2026-08-15 10:05, 2026-08-15 16:05, 2026-08-15 22:05, 2026-08-16 04:05, 2026-08-16 10:05, 2026-08-16 16:05, 2026-08-18 10:05, 2026-08-18 16:05, 2026-08-18 22:05, 2026-08-19 04:05, 2026-08-19 10:05, 2026-08-19 16:05, 2026-08-19 22:05, 2026-08-20 04:05, 2026-08-24 22:05, 2026-08-25 04:05, 2026-08-25 10:05, 2026-08-25 16:05, 2026-08-25 22:05, 2026-08-26 04:05, 2026-08-26 10:05, 2026-08-26 16:05, 2026-08-27 10:05, 2026-08-27 16:05, 2026-08-27 22:05, 2026-08-28 04:05, 2026-08-28 10:05, 2026-08-28 16:05, 2026-08-28 22:05, 2026-08-29 04:05, 2026-08-29 10:05, 2026-09-02 22:05, 2026-09-03 04:05, 2026-09-03 10:05, 2026-09-03 16:05, 2026-09-03 22:05, 2026-09-04 04:05, 2026-09-04 10:05, 2026-09-04 16:05, 2026-09-04 22:05, 2026-09-05 04:05, 2026-09-05 10:05, 2026-09-05 16:05, 2026-09-05 22:05, 2026-09-06 04:05, 2026-09-06 10:05, 2026-09-08 04:05, 2026-09-08 10:05, 2026-09-08 16:05, 2026-09-08 22:05, 2026-09-09 04:05, 2026-09-09 10:05, 2026-09-09 16:05, 2026-09-09 22:05
Echelon SSH connection attempt
130.12.182.230 is listed on the Echelon SSH connection attempt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-08-30 09:35:00.490000
Was present on blacklist at: 2026-07-19 09:35, 2026-07-20 09:35, 2026-07-21 09:35, 2026-07-22 09:35, 2026-07-23 09:35, 2026-07-24 09:35, 2026-07-25 09:35, 2026-07-26 09:35, 2026-07-27 09:35, 2026-07-28 09:35, 2026-07-29 09:35, 2026-07-30 09:35, 2026-08-18 09:35, 2026-08-19 09:35, 2026-08-20 09:35, 2026-08-21 09:35, 2026-08-22 09:35, 2026-08-23 09:35, 2026-08-24 09:35, 2026-08-25 09:35, 2026-08-26 09:35, 2026-08-27 09:35, 2026-08-28 09:35, 2026-08-29 09:35, 2026-08-30 09:35
Echelon port scan
130.12.182.230 is listed on the Echelon port scan blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-08-24 09:25:00.244000
Was present on blacklist at: 2026-08-18 09:25, 2026-08-19 09:25, 2026-08-20 09:25, 2026-08-21 09:25, 2026-08-22 09:25, 2026-08-23 09:25, 2026-08-24 09:25
FireHOL anonymizers
130.12.182.230 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-09-19 06:05:15
Was present on blacklist at: 2026-08-19 06:05, 2026-08-20 06:05, 2026-08-21 06:05, 2026-08-22 06:05, 2026-08-23 06:05, 2026-08-24 06:05, 2026-08-25 06:05, 2026-08-26 06:05, 2026-08-27 06:05, 2026-08-28 06:05, 2026-08-29 06:05, 2026-08-30 06:05, 2026-08-31 06:05, 2026-09-01 06:05, 2026-09-02 06:05, 2026-09-03 06:05, 2026-09-04 06:05, 2026-09-05 06:05, 2026-09-06 06:05, 2026-09-08 06:05, 2026-09-08 06:05, 2026-09-09 06:05, 2026-09-10 06:05, 2026-09-11 06:05, 2026-09-12 06:05, 2026-09-13 06:05, 2026-09-14 06:05, 2026-09-15 06:05, 2026-09-16 06:05, 2026-09-17 06:05, 2026-09-18 06:05, 2026-09-19 06:05

Threat categories

TLRoleCategoryDetails
75 src scan port: many
45 src login protocol: ssh, telnet
port: 23
25 src

Warden events (2618)
2026-09-16
ReconScanning (node.ce2b59): 3
2026-09-15
ReconScanning (node.ce2b59): 26
2026-09-14
ReconScanning (node.ce2b59): 16
2026-09-13
ReconScanning (node.ce2b59): 22
ReconScanning (node.9c1411): 19
2026-09-12
ReconScanning (node.ce2b59): 14
ReconScanning (node.9c1411): 23
2026-09-11
ReconScanning (node.ce2b59): 10
ReconScanning (node.9c1411): 26
2026-09-10
ReconScanning (node.ce2b59): 33
IntrusionUserCompromise (node.cfb4f7): 3
ReconScanning (node.9c1411): 33
2026-09-09
ReconScanning (node.ce2b59): 8
ReconScanning (node.9c1411): 13
2026-09-08
ReconScanning (node.ce2b59): 9
ReconScanning (node.9c1411): 20
2026-09-07
ReconScanning (node.ce2b59): 27
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
ReconScanning (node.9c1411): 46
2026-09-06
ReconScanning (node.ce2b59): 18
AttemptLogin (node.40929a): 1
ReconScanning (node.9c1411): 32
2026-09-05
ReconScanning (node.ce2b59): 9
ReconScanning (node.9c1411): 5
2026-09-04
ReconScanning (node.9c1411): 46
ReconScanning (node.ce2b59): 19
IntrusionUserCompromise (node.cfb4f7): 1
2026-09-03
IntrusionUserCompromise (node.e47683): 32
AttemptLogin (node.e47683): 39
ReconScanning (node.ce2b59): 1
ReconScanning (node.9c1411): 19
2026-09-02
ReconScanning (node.ce2b59): 21
2026-09-01
ReconScanning (node.ce2b59): 19
2026-08-31
ReconScanning (node.ce2b59): 18
2026-08-30
ReconScanning (node.ce2b59): 9
2026-08-24
ReconScanning (node.9c1411): 2
2026-08-23
IntrusionUserCompromise (node.40929a): 1
2026-08-22
ReconScanning (node.ce2b59): 1
AttemptLogin (node.40929a): 1
2026-08-21
ReconScanning (node.9c1411): 48
ReconScanning (node.ce2b59): 4
2026-08-20
ReconScanning (node.9c1411): 67
ReconScanning (node.ce2b59): 13
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
2026-08-19
AttemptLogin (node.28c168): 12
AttemptLogin (node.70e749): 12
ReconScanning (node.ce2b59): 27
IntrusionUserCompromise (node.28c168): 1
IntrusionUserCompromise (node.70e749): 1
ReconScanning (node.9c1411): 22
2026-08-18
ReconScanning (node.ce2b59): 31
AttemptLogin (node.70e749): 2
AttemptLogin (node.28c168): 1
IntrusionUserCompromise (node.40929a): 1
2026-08-17
ReconScanning (node.ce2b59): 10
ReconScanning (node.86eb21): 18
IntrusionUserCompromise (node.e47683): 3
AttemptLogin (node.e47683): 5
ReconScanning (node.9c1411): 1
AttemptLogin (node.40929a): 1
2026-08-16
ReconScanning (node.ce2b59): 5
AttemptLogin (node.28c168): 8
2026-08-15
ReconScanning (node.9c1411): 1
ReconScanning (node.368407): 1
2026-08-14
ReconScanning (node.ce2b59): 6
AttemptLogin (node.70e749): 6
ReconScanning (node.86eb21): 2
ReconScanning (node.368407): 6
ReconScanning (node.f90c6b): 1
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
2026-08-13
AttemptLogin (node.d2ecc6): 1
AttemptLogin (node.e47683): 26
IntrusionUserCompromise (node.e47683): 17
AttemptLogin (node.70e749): 9
IntrusionUserCompromise (node.70e749): 1
ReconScanning (node.ce2b59): 5
ReconScanning (node.368407): 5
AttemptLogin (node.28c168): 4
IntrusionUserCompromise (node.40929a): 1
AttemptLogin (node.40929a): 1
2026-08-12
ReconScanning (node.ce2b59): 9
AttemptLogin (node.d2ecc6): 4
AttemptLogin (node.eef996): 8
IntrusionUserCompromise (node.eef996): 1
IntrusionUserCompromise (node.e47683): 2
AttemptLogin (node.e47683): 6
ReconScanning (node.9c1411): 1
IntrusionUserCompromise (node.d2ecc6): 1
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
2026-08-11
ReconScanning (node.86eb21): 87
ReconScanning (node.ce2b59): 3
ReconScanning (node.368407): 4
2026-08-10
ReconScanning (node.86eb21): 116
ReconScanning (node.f90c6b): 32
IntrusionUserCompromise (node.cfb4f7): 1
ReconScanning (node.ce2b59): 5
2026-08-09
ReconScanning (node.86eb21): 140
ReconScanning (node.f90c6b): 9
AttemptLogin (node.d2ecc6): 3
ReconScanning (node.ce2b59): 7
2026-08-08
ReconScanning (node.ce2b59): 22
ReconScanning (node.86eb21): 107
ReconScanning (node.f90c6b): 17
2026-08-07
ReconScanning (node.86eb21): 121
ReconScanning (node.ce2b59): 19
ReconScanning (node.f90c6b): 22
2026-08-06
AttemptLogin (node.ee25b8): 3
IntrusionUserCompromise (node.ee25b8): 1
ReconScanning (node.ce2b59): 7
ReconScanning (node.86eb21): 9
2026-08-05
ReconScanning (node.9c1411): 2
AttemptLogin (node.ee25b8): 1
2026-08-04
IntrusionUserCompromise (node.ee25b8): 5
AttemptLogin (node.ee25b8): 27
ReconScanning (node.9c1411): 26
2026-08-03
ReconScanning (node.9c1411): 2
AttemptLogin (node.ee25b8): 15
ReconScanning (node.ce2b59): 5
IntrusionUserCompromise (node.ee25b8): 2
2026-08-02
ReconScanning (node.9c1411): 2
ReconScanning (node.ce2b59): 2
IntrusionUserCompromise (node.cfb4f7): 1
AttemptLogin (node.ee25b8): 3
IntrusionUserCompromise (node.ee25b8): 1
2026-08-01
ReconScanning (node.9c1411): 2
ReconScanning (node.ce2b59): 3
2026-07-31
ReconScanning (node.ce2b59): 7
ReconScanning (node.9c1411): 3
2026-07-30
ReconScanning (node.9c1411): 3
ReconScanning (node.4dc198): 28
2026-07-29
ReconScanning (node.ce2b59): 11
ReconScanning (node.9c1411): 2
ReconScanning (node.4dc198): 31
2026-07-28
ReconScanning (node.ce2b59): 15
2026-07-27
ReconScanning (node.4dc198): 62
ReconScanning (node.9c1411): 1
ReconScanning (node.ce2b59): 2
AttemptLogin (node.40929a): 1
2026-07-26
ReconScanning (node.9c1411): 11
ReconScanning (node.368407): 6
ReconScanning (node.4dc198): 14
2026-07-25
ReconScanning (node.368407): 6
ReconScanning (node.4dc198): 12
AttemptLogin (node.eef996): 15
ReconScanning (node.9c1411): 24
IntrusionUserCompromise (node.eef996): 5
2026-07-24
ReconScanning (node.4dc198): 42
ReconScanning (node.9c1411): 3
ReconScanning (node.ce2b59): 5
AttemptLogin (node.eef996): 7
2026-07-23
ReconScanning (node.368407): 8
ReconScanning (node.9c1411): 1
ReconScanning (node.ce2b59): 3
ReconScanning (node.4dc198): 72
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
2026-07-22
ReconScanning (node.4dc198): 20
ReconScanning (node.9c1411): 3
ReconScanning (node.368407): 15
IntrusionUserCompromise (node.40929a): 1
AttemptLogin (node.40929a): 1
2026-07-21
AttemptLogin (node.985fb4): 2
IntrusionUserCompromise (node.985fb4): 1
ReconScanning (node.4dc198): 64
ReconScanning (node.9c1411): 1
2026-07-20
ReconScanning (node.4dc198): 49
ReconScanning (node.9c1411): 7
ReconScanning (node.ce2b59): 9
ReconScanning (node.368407): 34
AttemptLogin (node.40929a): 1
2026-07-19
ReconScanning (node.4dc198): 57
ReconScanning (node.9c1411): 2
ReconScanning (node.368407): 1
2026-07-18
ReconScanning (node.9c1411): 1
IntrusionUserCompromise (node.70e749): 4
AttemptLogin (node.70e749): 13
ReconScanning (node.4dc198): 14
ReconScanning (node.368407): 5
AnomalyTraffic (node.6a1878): 1
AttemptLogin (node.b17ef8): 3
AttemptLogin (node.40929a): 1
IntrusionUserCompromise (node.40929a): 1
DShield reports (IP summary, reports)
2026-07-19
Number of reports: 160
Distinct targets: 31
2026-07-20
Number of reports: 72
Distinct targets: 45
2026-07-21
Number of reports: 74
Distinct targets: 30
2026-07-22
Number of reports: 74
Distinct targets: 30
2026-07-23
Number of reports: 86
Distinct targets: 32
2026-07-24
Number of reports: 96
Distinct targets: 26
2026-07-25
Number of reports: 65
Distinct targets: 25
2026-07-26
Number of reports: 30
Distinct targets: 14
2026-07-27
Number of reports: 30
Distinct targets: 14
2026-07-30
Number of reports: 14
Distinct targets: 7
2026-07-31
Number of reports: 66
Distinct targets: 61
2026-08-01
Number of reports: 66
Distinct targets: 61
2026-08-02
Number of reports: 25
Distinct targets: 21
2026-08-03
Number of reports: 109
Distinct targets: 4
2026-08-04
Number of reports: 176
Distinct targets: 4
2026-08-05
Number of reports: 140
Distinct targets: 4
2026-08-06
Number of reports: 174
Distinct targets: 8
2026-08-07
Number of reports: 174
Distinct targets: 8
2026-08-08
Number of reports: 54
Distinct targets: 32
2026-08-09
Number of reports: 130
Distinct targets: 4
2026-08-10
Number of reports: 130
Distinct targets: 4
2026-08-12
Number of reports: 408
Distinct targets: 146
2026-08-13
Number of reports: 221
Distinct targets: 127
2026-08-14
Number of reports: 299
Distinct targets: 28
2026-08-15
Number of reports: 299
Distinct targets: 28
2026-08-16
Number of reports: 206
Distinct targets: 34
2026-08-17
Number of reports: 289
Distinct targets: 109
2026-08-18
Number of reports: 153
Distinct targets: 41
2026-08-19
Number of reports: 153
Distinct targets: 41
2026-08-24
Number of reports: 166
Distinct targets: 6
2026-08-25
Number of reports: 166
Distinct targets: 6
2026-08-26
Number of reports: 79
Distinct targets: 6
2026-08-27
Number of reports: 52
Distinct targets: 11
2026-08-28
Number of reports: 96
Distinct targets: 11
2026-08-31
Number of reports: 39
Distinct targets: 16
2026-09-01
Number of reports: 27
Distinct targets: 21
2026-09-02
Number of reports: 27
Distinct targets: 21
2026-09-03
Number of reports: 34
Distinct targets: 5
2026-09-04
Number of reports: 40
Distinct targets: 21
2026-09-05
Number of reports: 16
Distinct targets: 9
2026-09-06
Number of reports: 79
Distinct targets: 50
2026-09-07
Number of reports: 79
Distinct targets: 50
2026-09-08
Number of reports: 258
Distinct targets: 168
2026-09-09
Number of reports: 56
Distinct targets: 22
2026-09-10
Number of reports: 69
Distinct targets: 19
2026-09-11
Number of reports: 69
Distinct targets: 19
2026-09-12
Number of reports: 42
Distinct targets: 29
2026-09-13
Number of reports: 96
Distinct targets: 65
2026-09-14
Number of reports: 75
Distinct targets: 5
2026-09-15
Number of reports: 75
Distinct targets: 5
2026-09-16
Number of reports: 19
Distinct targets: 3
Origin AS
AS36680 - NETIFACELLC
AS197769 - VPSDEDICATED-AS
BGP Prefix
130.12.182.0/24
geo
Slovenia
🕑 Europe/Ljubljana
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
130.12.0.0 - 130.12.255.255
last_activity
2026-09-16 02:01:48
last_warden_event
2026-09-16 02:01:48
rep
0.5076613527059224
reserved_range
0
Shodan's InternetDB
Open ports: 22, 443, 1025, 1080, 1099, 1400, 1599, 2103, 2332, 2379, 2423, 2443, 3062, 3145, 3333, 3443, 3541, 3553, 4243, 5555, 5558, 5801, 5916, 6433, 6664, 7004, 8009, 8168, 8181, 8280, 8318, 8334, 8531, 8812, 8886, 8888, 8988, 9040, 9051, 9100, 9102, 9146, 9151, 9398, 9458, 10010, 10250
Tags: scanner
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added
2026-07-18 08:14:10.182000
ts_last_update
2026-09-20 02:01:54.657000

Warden event timeline

DShield event timeline

Presence on blacklists