198.186.130.249
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Ambyre LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS13627
- Domain Name
- ambyre.net
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
184 from
84 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-28 06:39, Last: 2026-10-30 08:25 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-23 08:11 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-16 11:54 UTC. Triggers: unknown.
|
Port Scan | |
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: admin_tools. Observed by 1 sensor(s); 128 hits.
|
Brute-Force Web App Attack | |
| 🇺🇸 micropedro |
6 incidents: malicious activity. First: 2026-09-24 10:15, Last: 2026-09-29 19:18 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-09-09 19:50, Last: 2026-09-22 20:16 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-09-04 06:51, Last: 2026-09-06 08:17 UTC. Triggers: unknown.
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 198.186.130.249
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Smel |
SQL/MH Probe, Scan, Hack -
|
Port Scan Hacking SQL Injection | |
| 🇳🇱 Cloud86 B.V. |
categories: Brute-Force
|
Brute-Force | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 198.186.130.249
|
Port Scan Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 5432)
Source port: 58046
TTL: 55
Packet length: 60
TOS: 0x00
This report (for 198.186.130.249) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-29 22:39:26 UTC Unauthorized activity to TCP port 3306.
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 198.186.130.249
|
Port Scan Brute-Force SSH | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-08-20 06:47, Last: 2026-08-25 17:09 UTC. Triggers: unknown.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown