This IP address has been reported a total of
12
times from
12 distinct
sources.
149.102.245.152 was first reported on
January 5th 2025 , and the most recent report was
5 hours ago Germany
with 2
reports;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Brute-Force
2
times;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
Jason Howell
2026-10-12 20:43:39
(5 hours ago)
149.102.245.152 - - [12/Oct/2026:15:43:34 -0500] "GET /wp-login.php HTTP/1.1" 200 6818 "https://doh. ...
show more
149.102.245.152 - - [12/Oct/2026:15:43:34 -0500] "GET /wp-login.php HTTP/1.1" 200 6818 "https://doh.gannonpool.com/author/tomcudworth/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
149.102.245.152 - - [12/Oct/2026:15:43:35 -0500] "GET /wp-login.php?action=lostpassword HTTP/1.1" 200 6049 "https://doh.gannonpool.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
149.102.245.152 - - [12/Oct/2026:15:43:36 -0500] "GET /wp-includes/css/dashicons.min.css?ver=6.2.14 HTTP/1.1" 200 40172 "https://doh.gannonpool.com/wp-login.php?action=lostpassword" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
149.102.245.152 - - [12/Oct/2026:15:43:36 -0500] "GET /wp-includes/css/buttons.min.css?ver=6.2.14 HTTP/1.1" 200 5761 "https://doh.gannonpool.com/wp-login.php?action=lostpassword" "Mozilla/5.0 (
...
show less
Web App Attack
🇩🇪
AlexEventfahrtenIPDB
2026-10-10 06:33:01
(2 days ago)
[Sat Oct 10 08:33:00.660996 2026] [authz_core:error] [pid 1965497:tid 1965592] [client 149.102.245.1 ...
show more
[Sat Oct 10 08:33:00.660996 2026] [authz_core:error] [pid 1965497:tid 1965592] [client 149.102.245.152:39292] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/2023/12/cadillacbetty-im-pace-museum-dortmund/
[Sat Oct 10 08:33:01.063590 2026] [authz_core:error] [pid 1965497:tid 1965607] [client 149.102.245.152:19764] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php?action=register
...
show less
Brute-Force
Web App Attack
🇩🇪
Lino Project
2026-10-09 20:14:38
(3 days ago)
149.102.245.152 - - [09/Oct/2026:22:14:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5440 "https://bioma ...
show more
149.102.245.152 - - [09/Oct/2026:22:14:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5440 "https://biomakeup.it/contattami/" "PHP/6.3.18"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
marzzzello
2025-11-11 00:23:08
(11 months ago)
Ports: 22x 59664
Port Scan
🇺🇸
EGP Abuse Dept
2025-10-25 09:18:17
(11 months ago)
forum signup bot
Web Spam
Blog Spam
Web App Attack
🇧🇷
KingHost
2025-09-08 06:50:05
(1 year ago)
Brute-Force
🇳🇱
BlueWire Hosting
2025-08-28 04:10:04
(1 year ago)
Detected as a bad bot
Bad Web Bot
🇫🇷
Sklurk
2025-08-27 23:55:40
(1 year ago)
Web App Attack
Web App Attack
🇩🇪
LRob
2025-08-27 19:00:35
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
xmission.com
2025-08-08 02:24:51
(1 year ago)
Blocked by UFW (TCP on 6881)
Source port: 46339
TTL: 52
Packet length: 60
TOS: 0x08
This report (fo ...
show more
Blocked by UFW (TCP on 6881)
Source port: 46339
TTL: 52
Packet length: 60
TOS: 0x08
This report (for 149.102.245.152) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2025-07-13 23:45:03
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
2025-01-05 08:50:55
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Showing 1 to
12
of 12 reports
