JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.149.137

145.223.149.137 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 37%: ?

37%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.149.137

Whois 145.223.149.137

IP Abuse Reports for 145.223.149.137:

This IP address has been reported a total of 11 times from 6 distinct sources. 145.223.149.137 was first reported on September 25th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-10-22 09:28:18 (5 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-10-21 06:54:57 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-10-20 23:58:44 (1 day ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A504&amp%3Bf%5B1%5D=digest_key_terms%3A768&amp%3Bamp%3Bf%5B1%5D=digest_key_terms%3A332&amp%3Bamp%3Bamp%3Bf%5B1%5D=digest_key_terms%3A519&amp%3Bamp%3Bamp%3Bamp%3Bf%5B1%5D=digest_key_terms%3A358&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bf%5B1%5D=digest_key_terms%3A507 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-10-17 08:15:31 (5 days ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-10-15 15:35:07 (6 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?field ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?field_article_edition%5B504%5D=504&amp%3Bamp%3Bamp%3Bamp%3Bfield_key_terms%5B491%5D=491&amp%3Bamp%3Bamp%3Bf%5B0%5D=digest_publication_type%3A932&amp%3Bamp%3Bf%5B0%5D=digest_publication_type%3A933&amp%3Bf%5B0%5D=digest_key_terms%3A495 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇬🇧 AvonleaConsulting	2026-10-03 22:57:02 (2 weeks ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇬🇧 AvonleaConsulting	2026-10-03 05:11:18 (2 weeks ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇭🇰 keledipan	2026-10-01 13:09:44 (3 weeks ago)	145.223.149.137 - - [01/Oct/2026:21:09:40 +0800] "GET /home.php?mod=spacecp&amp%3Bac=favorite&amp%3B ... show more 145.223.149.137 - - [01/Oct/2026:21:09:40 +0800] "GET /home.php?mod=spacecp&amp%3Bac=favorite&amp%3Btype=thread&amp%3Bid=2222&amp%3Bformhash=9aea555f HTTP/1.1" 200 3941 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 145.223.149.137 - - [01/Oct/2026:21:09:43 +0800] "GET /forum.php?mod=attachment&aid=NTQ2MjV8ZmJlMjU4MTd8MTc4MDA3NTYzNHwwfDE1Nzk4 HTTP/1.1" 200 3931 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack SSH
🇺🇸 Zandro	2026-09-29 13:00:14 (3 weeks ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-09-29 06:12:34 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 145.223.149.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 145.223.149.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:12:20.752114 2026] [security2:error] [pid 5862:tid 5862] [client 145.223.149.137:60252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.trinitydent.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.trinitydent.com"] [uri "/WebResource.axd"] [unique_id "artWxAMtmxXONg505TjVaQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇰 keledipan	2026-09-25 01:41:22 (3 weeks ago)	145.223.149.137 - - [25/Sep/2026:09:40:46 +0800] "GET /home.php?mod=spacecp&ac=favorite&type=thread& ... show more 145.223.149.137 - - [25/Sep/2026:09:40:46 +0800] "GET /home.php?mod=spacecp&ac=favorite&type=thread&id=7867&formhash=6ce7b52d HTTP/1.1" 200 3931 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 145.223.149.137 - - [25/Sep/2026:09:40:50 +0800] "GET /forum.php?mod=attachment&aid=NjcxNzN8ZjIyYWZlMDJ8MTc4MzA4MDI1OHwwfDIwMDQ2 HTTP/1.1" 200 3933 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇫🇷 173.212.243.22

🇺🇸 151.240.66.7

🇩🇪 130.12.180.174

🇮🇳 122.187.226.3

🇮🇳 117.236.124.166

🇰🇷 112.162.111.205

🇦🇷 45.181.247.22

🇳🇱 45.148.10.157

🇯🇵 43.167.6.179

🇸🇬 43.156.66.78

🇺🇸 20.51.209.165

🇷🇴 2.57.122.209

🇮🇹 213.215.209.101

🇧🇷 179.48.18.42

🇵🇱 176.53.159.198

🇸🇪 172.160.227.37

🇩🇪 158.94.208.97

🇸🇦 144.24.209.174

🇵🇭 136.158.11.19