130.12.180.109 has a very high threat confidence level of 91%, originating from United States, on the Railnet LLC network (214943). It has been observed across 9,350 sessions targeting MSSQL, First observed on March 8, 2026, most recently active March 9, 2026.