JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.107.253.186

149.107.253.186 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 71%: ?

71%

ISP	fibrazul internet srl
Usage Type	Fixed Line ISP
ASN	AS272066
Domain Name	fibrazul.com.ar
Country	🇦🇷 Argentina
City	Isidro Casanova, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.107.253.186

Whois 149.107.253.186

IP Abuse Reports for 149.107.253.186:

This IP address has been reported a total of 25 times from 15 distinct sources. 149.107.253.186 was first reported on August 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-08-31 13:15:02 (1 day ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-31 15:12:39 \| LAST=2026-08-31 15:12:40. Last seen 2026-08-31 15:12:40. show less	Port Scan
🇺🇸 MPL	2026-08-30 21:19:42 (1 day ago)	tcp/22 (6 or more attempts)	Port Scan
Anonymous	2026-08-29 20:16:45 (2 days ago)	SSH tarpit (endlessh) connection from 149.107.253.186	Brute-Force SSH
Anonymous	2026-08-27 03:51:04 (5 days ago)	2026-08-27 03:51:03 warning[3593368]: host unknown[149.107.253.186]: unauthorized ssh acce ... show more 2026-08-27 03:51:03 warning[3593368]: host unknown[149.107.253.186]: unauthorized ssh access attempted: tcp/22 show less	Port Scan Brute-Force
🇺🇸 stechusa	2026-08-26 22:19:06 (5 days ago)	[Askari] \| Behavior: Outdated browser, Holding server worker, Concurrent page load during attack, HT ... show more [Askari] \| Behavior: Outdated browser, Holding server worker, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-26 22:19:06 (5 days ago)	ELEVATED_THREAT \| 18 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated th ... show more ELEVATED_THREAT \| 18 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.92, unique_ips=174) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇧🇷 noconex	2026-08-26 05:31:05 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.107.25 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.107.253.186 show less	Port Scan Brute-Force SSH
🇵🇱 mkey	2026-08-25 14:40:02 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-25 16:38:22 \| LAST=2026-08-25 16:38:23. Last seen 2026-08-25 16:38:23. show less	Port Scan
🇺🇸 xmission.com	2026-08-24 15:23:46 (1 week ago)	Blocked by UFW (TCP on 22) Source port: 49494 TTL: 47 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 49494 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 149.107.253.186) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
Anonymous	2026-08-23 07:16:46 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇫🇷 Zkillu	2026-08-19 21:05:51 (1 week ago)	UDP flood (DDoS) vs AS215599: 64 pkts / 0.09 MB to UDP 8443 across 51 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 64 pkts / 0.09 MB to UDP 8443 across 51 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:05:51 (1 week ago)	UDP flood (DDoS) vs AS215599: 64 pkts / 0.09 MB to UDP 8443 across 51 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 64 pkts / 0.09 MB to UDP 8443 across 51 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-19 20:17:28 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-18 09:54:20 (2 weeks ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 xmission.com	2026-08-18 05:25:44 (2 weeks ago)	Blocked by UFW (TCP on 22) Source port: 50570 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 50570 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 149.107.253.186) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 62.60.130.242

🇭🇰 220.246.183.78

🇷🇺 200.165.227.229

🇳🇱 195.178.110.30

🇨🇴 186.146.235.58

🇺🇸 162.216.150.223

🇺🇸 65.49.1.165

🇨🇳 14.116.189.74

🇿🇦 197.86.205.50

🇩🇪 188.34.205.65

🇳🇬 102.88.137.80

🇺🇸 67.55.189.211

🇸🇻 45.152.217.81

🇸🇬 43.153.205.159

🇧🇪 34.22.126.149

🇫🇷 5.135.71.167

🇰🇷 222.108.100.117

🇵🇰 182.182.0.142

🇺🇸 143.198.238.46

🇹🇷 131.222.245.12