JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.98.142.149

141.98.142.149 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 32%: ?

32%

ISP	Vodafone Albania Sh.A.
Usage Type	Fixed Line ISP
ASN	AS21183
Domain Name	vodafone.al
Country	🇦🇱 Albania
City	Durres, Durres County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.98.142.149

Whois 141.98.142.149

IP Abuse Reports for 141.98.142.149:

This IP address has been reported a total of 17 times from 14 distinct sources. 141.98.142.149 was first reported on July 27th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-31 05:00:29 (7 hours ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇮🇹 Inartis	2026-08-31 00:06:15 (12 hours ago)	2026-08-31T02:06:10.779506mail1.inartis.it postfix/smtpd[2924539]: warning: unknown[141.98.142.149]: ... show more 2026-08-31T02:06:10.779506mail1.inartis.it postfix/smtpd[2924539]: warning: unknown[141.98.142.149]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇮🇹 CoreTech srl	2026-08-30 22:32:32 (13 hours ago)	is-63909a28 00:27:46.099 [196.119.73.125] SMTP Login failed: Invalid username ([email protected] ... show more is-63909a28 00:27:46.099 [196.119.73.125] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 00:27:46.099 [196.119.73.125] SMTP Login failed: User [brian] not foundis-63909a28 00:28:38.015 [104.28.253.237] SMTP Login failed: User [brian] not foundis-63909a28 00:28:38.015 [104.28.253.237] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 00:28:49.855 [187.184.10.17] SMTP Login failed: User [brian] not foundis-63909a28 00:28:49.855 [187.184.10.17] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 00:29:17.809 [141.98.142.149] SMTP Login failed: User [brian] not foundis-63909a28 00:29:17.809 [141.98.142.149] SMTP Login failed: Invalid username ([email protected]) and password combination.Smartermail 00:30:51.056 [178.66.202.61] SMTP Login failed: Domain [gsm-italia.it] not foundSmartermail 00:30:51.056 [178.66.202.61] SMTP Login failed: That domain was not found. Dou show less	Brute-Force
🇺🇸 gui-ying233	2026-08-27 15:09:36 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇷🇴 INTEQ	2026-07-12 03:43:27 (1 month ago)	Web attack from 141.98.142.149	Web App Attack
🇦🇺 MAGIC	2026-03-31 00:21:01 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-03-25 05:29:44 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-03-16 03:03:02 (5 months ago)	141.98.142.149 \| Port: 12654 \| DNS: 141.98.142.149 2026-03-16T11:03:01+08:00 Europe/Tirane \| FETCH S ... show more 141.98.142.149 \| Port: 12654 \| DNS: 141.98.142.149 2026-03-16T11:03:01+08:00 Europe/Tirane \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /contents/status/?ffbeadceafbc \| Ref: - \| Country: AL/Albania/+01:00 IP City: Durrës 9dd085b98950536e-MRS/Marseille, France 1 hits/0 secs Robots 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 johnkarlhill	2026-03-14 02:04:51 (5 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-03-11 13:10:38 (5 months ago)	(mod_security) mod_security (id:218580) triggered by 141.98.142.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218580) triggered by 141.98.142.149 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 09:10:30.109640 2026] [security2:error] [pid 25211:tid 25225] [client 141.98.142.149:61190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|aapm.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "aapm.info"] [uri "/press_release.php"] [unique_id "abFpxph2ZrrnbPm0_B44RQAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2025-11-26 02:37:10 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-18 15:58:31 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-14 19:07:48 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇧🇷 hostseries	2025-11-04 08:57:40 (9 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇳🇱 exxos	2025-08-28 06:03:01 (1 year ago)	http-no-verb	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.162.34.208

🇳🇱 195.178.110.26

🇺🇸 165.154.162.212

🇺🇸 154.223.17.178

🇷🇴 2.57.122.150

🇹🇼 211.20.14.156

🇩🇪 195.182.16.23

🇩🇪 165.154.138.107

🇮🇳 122.187.225.28

🇵🇱 109.205.211.110

🇷🇴 92.118.39.77

🇹🇷 88.250.143.91

🇱🇻 83.99.206.249

🇺🇸 74.125.17.251

🇺🇸 66.132.172.120

🇺🇸 47.251.116.115

🇺🇸 45.79.162.187

🇨🇦 35.203.25.19

🇷🇴 2.57.122.168

🇷🇺 91.191.230.210