Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
130.12.180.85 has a very high threat confidence level of 91%, originating from United States, on the Railnet LLC network (214943). It has been observed across 281 sessions targeting TELNET, SSH, First observed on February 8, 2026, most recently active February 15, 2026.
Repeated SSH password authentication attempts observed within the same activity window, indicating automated credential guessing against the SSH service. The behavior reflects authentication-based access attempts derived from observed password login events without assuming successful compromise.