JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.198.49.148

143.198.49.148 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 58%: ?

58%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.198.49.148

Whois 143.198.49.148

IP Abuse Reports for 143.198.49.148:

This IP address has been reported a total of 26 times from 19 distinct sources. 143.198.49.148 was first reported on March 14th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-19 09:08:26 (20 hours ago)	tcp/8881 (2 or more attempts)	Port Scan
🇨🇿 huginet	2026-07-19 09:05:09 (20 hours ago)	143.198.49.148 - - [19/Jul/2026:11:05:08 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (X11; Li ... show more 143.198.49.148 - - [19/Jul/2026:11:05:08 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 143.198.49.148 - - [19/Jul/2026:11:05:08 +0200] "GET /favicon.ico HTTP/1.1" 403 32175 "http://193.165.127.126/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" ... show less	Web Spam Web App Attack
Anonymous	2026-07-19 08:50:54 (20 hours ago)	denied traffic to a non-approved destination port. destination port 8086.	Port Scan
🇩🇪 HoneyPot-FrPri	2026-07-19 08:14:36 (21 hours ago)	2026-07-19T10:14:35.999814+02:00 [redacted] sshd[777489]: error: kex_exchange_identification: client ... show more 2026-07-19T10:14:35.999814+02:00 [redacted] sshd[777489]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" 2026-07-19T10:14:35.999874+02:00 [redacted] ... show less	Brute-Force SSH
🇯🇵 jay hung	2026-07-19 07:53:35 (21 hours ago)	2026-07-19T07:53:34.982351+00:00 quarktech kernel: [3092276.311809] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-19T07:53:34.982351+00:00 quarktech kernel: [3092276.311809] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=143.198.49.148 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x20 TTL=239 ID=8421 PROTO=TCP SPT=61003 DPT=5555 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-07-17 07:53:08 (2 days ago)	tcp/6931	Port Scan
🇫🇷 masterguru	2026-07-17 07:44:52 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 143.198.49.148 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 143.198.49.148 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 RAP	2026-07-12 07:21:06 (1 week ago)	2026-07-12 07:21:06 UTC Unauthorized activity to TCP port 22. SSH	SSH
Anonymous	2026-06-29 12:45:36 (2 weeks ago)	Port scan on port 12000/TCP to unused IP	Port Scan
🇺🇸 RAP	2026-06-29 03:24:43 (3 weeks ago)	2026-06-29 03:24:43 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇧🇷 maviei	2026-06-26 06:01:34 (3 weeks ago)	2026-06-26T03:01:31.432492-03:00 srv01 kernel: [842330.250770] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ... show more 2026-06-26T03:01:31.432492-03:00 srv01 kernel: [842330.250770] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=143.198.49.148 DST=177.19.138.245 LEN=46 TOS=0x00 PREC=0x00 TTL=49 ID=53924 DF PROTO=UDP SPT=53252 DPT=47808 LEN=26 2026-06-26T03:01:32.437103-03:00 srv01 kernel: [842331.254990] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=143.198.49.148 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=49 ID=50225 DF PROTO=UDP SPT=54638 DPT=123 LEN=56 2026-06-26T03:01:33.436104-03:00 srv01 kernel: [842332.253426] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=143.198.49.148 DST=177.19.138.245 LEN=76 TOS=0x00 PREC=0x00 TTL=49 ID=29983 DF PROTO=UDP SPT=54391 DPT=123 LEN=56 ... show less	Port Scan
🇹🇷 Threat.live	2026-05-26 01:40:02 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇬🇧 PeravixGroup	2026-05-26 01:33:36 (1 month ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 Hobby Bob	2026-05-26 01:31:53 (1 month ago)	2026-05-26T01:31:52.900248+00:00 server dovecot: pop3-login: Disconnected: Disconnected: Too many ba ... show more 2026-05-26T01:31:52.900248+00:00 server dovecot: pop3-login: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=, rip=143.198.49.148, lip=X.X.X.X session= show less	Port Scan Hacking
🇫🇷 zulzeen	2026-05-26 01:10:06 (1 month ago)	[distribamap-0] Blocked by SysWarden Firewall [BLOCK] (RDP/VNC Attack)	Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 212.32.76.9

🇦🇷 181.164.12.188

🇫🇷 141.94.246.155

🇷🇴 92.118.39.78

🇧🇬 79.124.56.250

🇩🇪 69.5.169.50

🇺🇸 65.49.20.100

🇺🇸 64.62.156.53

🇧🇷 205.210.31.186

🇧🇪 198.235.24.229

🇳🇱 195.178.110.227

🇺🇸 192.161.49.2

🇳🇱 185.223.235.27

🇹🇼 118.163.145.175

🇺🇸 104.21.25.188

🇨🇦 85.217.149.53

🇺🇸 54.159.49.205

🇩🇪 43.228.157.10

🇬🇧 34.105.133.17

🇨🇳 8.148.184.200