This IP address has been reported a total of
31
times from
28 distinct
sources.
130.185.98.249 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-09-24T20:51:03.412315+02:00 ubuntu sshd[1796546]: Invalid user test from 130.185.98.249 port 33 ...
show more2026-09-24T20:51:03.412315+02:00 ubuntu sshd[1796546]: Invalid user test from 130.185.98.249 port 33610
2026-09-24T20:51:04.317163+02:00 ubuntu sshd[1796578]: Connection from 130.185.98.249 port 34310 on 212.227.20.142 port 22 rdomain ""
2026-09-24T20:51:09.120453+02:00 ubuntu sshd[1796578]: Invalid user cs2 from 130.185.98.249 port 34310
...
show less
2026-09-24T20:04:03.338358+02:00 sshd-session[3075874]: Invalid user test from 130.185.98.249 port ...
show more2026-09-24T20:04:03.338358+02:00 sshd-session[3075874]: Invalid user test from 130.185.98.249 port 53616
2026-09-24T20:04:09.919868+02:00 sshd-session[3077237]: Invalid user cs2 from 130.185.98.249 port 54419
2026-09-24T20:04:26.077727+02:00 sshd-session[3080186]: Invalid user deploy from 130.185.98.249 port 56132
...
show less
2026-09-24T13:49:23.130041+00:00 worker-lon1 sshd[1637880]: Invalid user a from 130.185.98.249 port ...
show more2026-09-24T13:49:23.130041+00:00 worker-lon1 sshd[1637880]: Invalid user a from 130.185.98.249 port 45387
2026-09-24T13:49:26.359865+00:00 worker-lon1 sshd[1637882]: Invalid user user from 130.185.98.249 port 45709
2026-09-24T13:49:28.302800+00:00 worker-lon1 sshd[1637886]: Invalid user ubuntu from 130.185.98.249 port 46139
2026-09-24T13:49:30.482071+00:00 worker-lon1 sshd[1637888]: Invalid user vyos from 130.185.98.249 port 46440
2026-09-24T13:49:32.509581+00:00 worker-lon1 sshd[1637890]: Invalid user debian from 130.185.98.249 port 46723
...
show less
Active SSH brute-force detected. Logs: 2026-09-23T16:37:51.164800+00:00 AVM-312579 sshd-session[1978 ...
show moreActive SSH brute-force detected. Logs: 2026-09-23T16:37:51.164800+00:00 AVM-312579 sshd-session[1978540]: Invalid user admin from 130.185.98.249 port 48589 2026-09-23T16:37:54.161031+00:00 AVM-312579 sshd-session[1978546]: Invalid user ubuntu from 130....
show less
AWS Transfer Family SFTP authentication attack; Reason=UNKNOWN_USERNAME; Username=vpnuser; Protocol= ...
show moreAWS Transfer Family SFTP authentication attack; Reason=UNKNOWN_USERNAME; Username=vpnuser; Protocol=SFTP; ServerId=s-ed455d97c58c457f9
show less
2026-09-20T01:51:59.027908-05:00 ip-172-26-1-143 sshd-session[50218]: Invalid user vpn from 130.185. ...
show more2026-09-20T01:51:59.027908-05:00 ip-172-26-1-143 sshd-session[50218]: Invalid user vpn from 130.185.98.249 port 45863
2026-09-20T01:52:03.445701-05:00 ip-172-26-1-143 sshd-session[50221]: Invalid user linuxadmin from 130.185.98.249 port 46346
2026-09-20T01:52:11.944008-05:00 ip-172-26-1-143 sshd-session[50228]: Invalid user docker from 130.185.98.249 port 47517
2026-09-20T01:52:16.140437-05:00 ip-172-26-1-143 sshd-session[50230]: Invalid user oracle from 130.185.98.249 port 48082
2026-09-20T01:52:21.148878-05:00 ip-172-26-1-143 sshd-session[50232]: Invalid user minecraft from 130.185.98.249 port 48644
...
show less