186.158.238.248
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AMX Argentina S.A.
- Usage Type
- Fixed Line ISP
- ASN
- AS11664
- Domain Name
- claro.com.ar
- Country
- 🇦🇷 Argentina
- City
- Rosario, Santa Fe
Abuse Reports
Total reports
11 from
10 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized connection attempt detected on 22/SSH
|
SSH Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 186.158.238.248
|
Port Scan Brute-Force SSH | |
| 🇺🇸 RAP |
2026-09-12 19:01:21 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| Anonymous |
2026-09-12T01:00:31.996136+00:00 HongKong1 sshd-session[773480]: Connection closed by 186.158.238.248 port 9242 [preauth]
2026-09-12T01:01:24.014521+00:00 HongKong1 sshd-session[777328]: Connection closed by 186.158.238.248 port 1630 [preauth]
...
|
Brute-Force SSH | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇮🇱 Ilop |
[v4-00] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=22, src_ip=186.158.238.248
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/22 (6 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-08-04 23:07:33 | LAST=2026-08-04 23:07:34. Last seen 2026-08-04 23:07:34.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown