149.154.161.244
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Telegram Messenger Network
- Usage Type
- Commercial
- ASN
- AS62041
- Hostname(s)
- ip-149-154-161-244.ptr.telegram.org
- Domain Name
- telegram.org
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
Abuse Reports
Total reports
264 from
33 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-11 UTC.
|
Brute-Force | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 throny |
|
Web App Attack | |
| 🇩🇪 tvipper.com |
probing for exposed files and admin pages: 1 attempt within 1 minute, seen by edge honeypot (reported by RemotePower)
|
Web App Attack | |
| 🇺🇸 ambor |
Attack type: honeypot_lure | Target: /backup.sql | UA: TelegramBot (like TwitterBot) | Country: NL
|
Hacking | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: galah, h0neytr4p. Context: 149.154.161.244 classified as botnet node participating in coordinated attack campaigns (high confidence).
|
Hacking | |
| 🇮🇹 sentinel1 |
Sentinel: [Honeypot] status=301 [GET] trap.nexus-orbital.com/.well-known/security.txt -> 301
|
Web App Attack | |
| 🇮🇹 sentinel1 |
Sentinel: [Honeypot] status=301 [GET] trap.nexus-orbital.com/sitemap.xml -> 301
|
Web App Attack | |
| 🇨🇭 🇨🇭 Hosting |
Automated security scanning detected: WordPress Setup-Config Probing. Systematic reconnaissance using automated tools.
|
Web App Attack | |
| 🇺🇸 ambor |
Honeypot access: Environment file access attempt. Path: /.env
|
Web App Attack | |
| 🇵🇾 armandosaucedo.me |
Threat Intelligence via ARMTI, Web Attack: GET /wp-content/plugins/wp-cache-sys/index.php
|
Web App Attack | |
| 🇮🇩 David Koswari |
REQ_BLOCKED_ACL
|
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted | |
| 🇨🇭 🇨🇭 Hosting |
Automated security scanning detected: WordPress Setup-Config Probing. Systematic reconnaissance using automated tools.
|
Web App Attack | |
| 🇨🇭 🇨🇭 Hosting |
Automated security scanning detected: WordPress Setup-Config Probing. Systematic reconnaissance using automated tools.
|
Web App Attack | |
| 🇫🇮 percocet |
Cloudflare blocked 1 requests (HTTP 403) in 1h. Country: NL
|
DDoS Attack Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown