JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.44.130.67

198.44.130.67 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 19%: ?

19%

ISP	Sis Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11878
Hostname(s)	static-198-44-130-67.cust.tzulo.com
Domain Name	sisnet.in
Country	🇺🇸 United States of America
City	Raleigh, North Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.44.130.67

Whois 198.44.130.67

IP Abuse Reports for 198.44.130.67:

This IP address has been reported a total of 162 times from 57 distinct sources. 198.44.130.67 was first reported on April 30th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-24 15:24:26 (3 hours ago)	Blocked by UFW (TCP on 52363) Source port: 52170 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52363) Source port: 52170 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 198.44.130.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-22 19:32:23 (1 day ago)	Blocked by UFW (TCP on 52363) Source port: 53950 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52363) Source port: 53950 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 198.44.130.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-07 06:20:34 (2 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 56290 TTL: 109 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 60973) Source port: 56290 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 198.44.130.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-08-04 14:51:49 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 6881 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇷 matthieul.dev	2026-07-21 02:50:23 (1 month ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp,udp, ports=43223	Port Scan Brute-Force
🇨🇳 pengpeng	2026-07-05 02:07:54 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 36254 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 36254 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-15 22:25:59 (2 months ago)	monitor: on VM-0-7-ubuntu \| port: 18192 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 18192 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 xserverx.ru	2026-05-01 12:54:19 (3 months ago)	[UFW SCAN!!!!] SRC=198.44.130.67 LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=40039 DPT=2083 WIND ... show more [UFW SCAN!!!!] SRC=198.44.130.67 LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=40039 DPT=2083 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 TrafficAnalyser	2026-05-01 11:55:24 (3 months ago)	Port scanning	Port Scan
Anonymous	2026-05-01 08:57:53 (3 months ago)	2026-05-01T09:57:52.936436+01:00 vps kernel: [39366070.912177] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-01T09:57:52.936436+01:00 vps kernel: [39366070.912177] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=198.44.130.67 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=4902 PROTO=TCP SPT=45840 DPT=2086 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-04-08 08:00:02 (4 months ago)	suspicious request in access.log	Web App Attack
🇫🇷 IRISIO	2026-03-31 09:47:56 (4 months ago)	scans/SQL injection/spam posts : 1 queries	Web App Attack SQL Injection
🇺🇸 xmission.com	2026-03-30 11:52:30 (4 months ago)	Blocked by UFW (TCP on 53010) Source port: 43751 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 53010) Source port: 43751 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 198.44.130.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-03-24 16:56:48 (5 months ago)	Restricted File Access Attempt. Matched phrase "config.php" at REQUEST_FILENAME. (930130-stl2-17)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-21 02:59:44 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 198.44.130.67 (static-198-44-130-67.cust.tzulo. ... show more (mod_security) mod_security (id:210492) triggered by 198.44.130.67 (static-198-44-130-67.cust.tzulo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:58:25.217227 2026] [security2:error] [pid 28869:tid 28869] [client 198.44.130.67:34860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.modmove.com"] [uri "/wp-config.php.original"] [unique_id "ab4JUQ5UtiOSfqErTx54mAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.71

🇵🇭 165.101.254.202

🇰🇿 95.58.255.251

🇱🇹 62.60.130.242

🇮🇳 103.30.80.222

🇷🇴 80.94.92.55

🇺🇸 66.240.236.116

🇮🇪 52.18.202.193

🇵🇰 203.128.6.156

🇨🇳 114.98.230.202

🇮🇶 109.61.5.31

🇨🇴 108.174.156.122

🇹🇼 60.250.246.239

🇮🇳 59.177.12.54

🇺🇸 47.251.174.237

🇦🇺 45.133.6.12

🇬🇧 2.57.17.109

🇩🇪 93.200.123.112

🇱🇹 77.90.185.20

🇫🇮 45.130.127.173