149.165.153.157
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
149.165.153.157 is an IP address from within our whitelist, which we identify as "DarkMouse (https://port194.com/scanning)".
| ISP | Indiana University |
|---|---|
| Usage Type | University/College/School |
| ASN | AS10680 |
| Hostname(s) | worker19.cis250324.projects.jetstream-cloud.org |
| Domain Name | iu.edu |
| Country | 🇺🇸 United States of America |
| City | Indianapolis, Indiana |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 149.165.153.157
This IP address has been reported a total of 26 times from 23 distinct sources. 149.165.153.157 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 5 reports; Brazil with 2 reports. The most common categories in these recent reports were: Port Scan 14 times; Hacking 10 times; Brute-Force 7 times; Web App Attack 6 times; SSH 5 times; Other 9 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 itxworks.com |
Honeypot hit: web probing / scanner. Auto-reported by CrowdSec.
|
Web App Attack Bad Web Bot | ||
| 🇩🇪 Tamsy |
HTTPD - 4xx scan
|
Web App Attack | ||
| 🇧🇷 somosbr |
[2026-10-25T11:05:45Z] Unsolicited scan from 149.165.153.157 to port 22/tcp
|
Port Scan | ||
| 🇷🇺 genokrad |
Website scan TCP 80/443 "/.well-known/security.txt" "Mozilla/5.0 zgrab/0.x"
|
Port Scan Web App Attack | ||
| 🇷🇺 genokrad |
Website scan TCP 80/443 "/" "Mozilla/5.0 zgrab/0.x"
|
Port Scan Web App Attack | ||
| 🇫🇷 wiredalter |
|
Brute-Force SSH | ||
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | ||
| 🇭🇺 kranem |
|
Bad Web Bot | ||
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | ||
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | ||
| 🇺🇦 llighthunter |
|
Hacking SSH | ||
| 🇩🇪 D3vNu11 |
|
Brute-Force SSH | ||
| Anonymous |
Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.
|
Hacking | ||
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | ||
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩