JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.112.84.49

149.112.84.49 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 4%: ?

ISP	Snaju Development
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399646
Domain Name	snaju.com
Country	🇺🇸 United States of America
City	Houston, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.112.84.49

Whois 149.112.84.49

IP Abuse Reports for 149.112.84.49:

This IP address has been reported a total of 75 times from 59 distinct sources. 149.112.84.49 was first reported on March 26th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-06-03 14:30:06 (8 hours ago)	3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-05-27 09:30, Last: 2026-06-03 10:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-05-20 12:30:33 (2 weeks ago)	3 incidents: malicious activity. First: 2026-05-06 08:03, Last: 2026-05-20 08:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-05-06 08:03, Last: 2026-05-20 08:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-05-20 12:30:33 (2 weeks ago)	4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-05-13 08:03, Last: 2026-05-20 08:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-05-06 12:03:23 (4 weeks ago)	3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-04-29 07:32, Last: 2026-05-06 08:03 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-04-29 11:32:13 (1 month ago)	4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-04-17 08:31, Last: 2026-04-29 07:32 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-04-22 10:39:07 (1 month ago)	3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-04-11 07:38, Last: 2026-04-22 06:39 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-04-10 11:31:02 (1 month ago)	4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 4 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-04-02 05:30, Last: 2026-04-10 07:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-04-10 11:31:02 (1 month ago)	3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP ... show more 3 incidents: malicious activity. Ports: 3128/TCP(1), 8000/TCP(1), 8080/TCP(1), 8443/TCP(1), 8888/TCP(1). First: 2026-04-02 05:30, Last: 2026-04-10 07:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇧🇷 SOC-BR	2026-03-27 07:19:22 (2 months ago)	Attack detected by Fortinet - file_transfer: Eicar.Virus.Test.File - 2026-03-26 03:24:28 - Source Po ... show more Attack detected by Fortinet - file_transfer: Eicar.Virus.Test.File - 2026-03-26 03:24:28 - Source Port 12345 show less	Port Scan Hacking
🇧🇾 Worker	2026-03-27 04:59:00 (2 months ago)	2026-03-26 10:19:41 service="HTTP" srcip=149.112.84.49 srcport=12345 dstport=8000 filename="upload.e ... show more 2026-03-26 10:19:41 service="HTTP" srcip=149.112.84.49 srcport=12345 dstport=8000 filename="upload.exe" virus="EICAR_TEST_FILE" 2026-03-26 10:19:41 service="HTTP" srcip=149.112.84.49 srcport=12345 dstport=443 filename="upload.exe" virus="EICAR_TEST_FILE" 2026-03-26 10:19:41 service="HTTP" srcip=149.112.84.49 srcport=12345 dstport=3128 filename="upload.exe" virus="EICAR_TEST_FILE" 2026-03-26 10:19:41 service="HTTP" srcip=149.112.84.49 srcport=12345 dstport=80 filename="upload.exe" virus="EICAR_TEST_FILE" show less	Port Scan Web App Attack
Anonymous	2026-03-26 14:17:53 (2 months ago)	Portscan: TCP/9000 (31x), TCP/3128 (33x), TCP/8080 (33x), TCP/8888 (31x), TCP/8000 (33x), TCP/8443 ( ... show more Portscan: TCP/9000 (31x), TCP/3128 (33x), TCP/8080 (33x), TCP/8888 (31x), TCP/8000 (33x), TCP/8443 (32x), TCP/80 (14x), TCP/443 (7x) show less	Port Scan
🇫🇷 Petre 21_ip	2026-03-26 10:19:46 (2 months ago)	2026-03-26T11:19:45.965532+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-03-26T11:19:45.965532+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=149.112.84.49 DST=155.133.26.57 LEN=314 TOS=0x00 PREC=0x00 TTL=54 ID=11253 PROTO=TCP SPT=12345 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-26T11:19:45.965916+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=149.112.84.49 DST=155.133.26.57 LEN=314 TOS=0x00 PREC=0x00 TTL=54 ID=11254 PROTO=TCP SPT=12345 DPT=9000 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-26T11:19:45.966336+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=149.112.84.49 DST=155.133.26.57 LEN=314 TOS=0x00 PREC=0x00 TTL=54 ID=11258 PROTO=TCP SPT=12345 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 xserverx.ru	2026-03-26 10:19:11 (2 months ago)	[UFW SCAN!!!!] SRC=149.112.84.49 LEN=314 TOS=0x00 PREC=0x00 TTL=44 PROTO=TCP SPT=12345 DPT=8000 WIND ... show more [UFW SCAN!!!!] SRC=149.112.84.49 LEN=314 TOS=0x00 PREC=0x00 TTL=44 PROTO=TCP SPT=12345 DPT=8000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 check-the-sum.fr	2026-03-26 10:18:28 (2 months ago)	Port Scanning	Port Scan
🇮🇩 hermawan	2026-03-26 10:10:49 (2 months ago)	03/26/2026-17:10:37.244356 [Drop] [] [1:769542:1] NF - SYN packets with a payload - Not allowed a ... show more 03/26/2026-17:10:37.244356 [Drop] [] [1:769542:1] NF - SYN packets with a payload - Not allowed according to RFC793 - Can be Port knocking - Reflected DDOS from middelbokses [**] [Classification: A Network Trojan was Detected] [Priority: 1] {TCP} 149.112.84.49:12345 -> 103.166.156.58:9000 ... show less	Email Spam Hacking

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.176.29.18

🇧🇷 179.185.69.43

🇨🇳 125.105.238.142

🇲🇾 49.124.153.11

🇬🇧 2a02:4780:a:2127:0:275a:9629:1

🇺🇸 216.244.66.239

🇳🇱 213.177.179.144

🇺🇸 205.210.31.78

🇳🇱 192.142.24.39

🇻🇳 180.93.43.225

🇧🇷 177.85.67.158

🇨🇳 157.18.35.208

🇺🇸 131.106.52.221

🇻🇳 116.110.7.37

🇨🇳 113.222.224.195

🇲🇦 102.50.249.95

🇧🇷 45.174.162.68

🇧🇪 34.78.29.97

🇺🇸 20.119.95.16

🇧🇷 205.210.31.146