AbuseIPDB » 149.18.66.36
149.18.66.36
This IP was reported 11 times. Confidence of
Abuse
is 69% : ?
ISP
Cogent Communications, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS199458
Hostname(s)
defeats.choosewunder.net
Domain Name
cogentco.com
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 149.18.66.36 :
This IP address has been reported a total of
11
times from
11 distinct
sources.
149.18.66.36 was first reported on
July 11th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇷🇴
abuse_IP_reporter
2026-07-11 19:45:06
(1 day ago)
Jul 11 21:51:21 server UFW BLOCK SRC=149.18.66.36 DF PROTO=TCP SPT=80
Port Scan
🇺🇸
anon333
2026-07-11 19:33:15
(1 day ago)
Hacker syslog review 1783798395
Hacking
🇩🇪
Richie
2026-07-11 18:54:23
(1 day ago)
[HOST1] Port Scan detected
Port Scan
2026-07-11 18:48:22
(1 day ago)
Jul 11 14:40:43 localhost kernel: [112140481.719140] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
Jul 11 14:40:43 localhost kernel: [112140481.719140] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=149.18.66.36 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=424 WINDOW=43440 RES=0x00 ACK SYN URGP=0
Jul 11 14:40:43 localhost kernel: [112140481.719156] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=149.18.66.36 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=424 SEQ=4011431714 ACK=1828833382 WINDOW=43440 RES=0x00 ACK SYN URGP=0 OPT (020405B40402080A99AA67516CC19D6A01030309)
Jul 11 14:48:21 localhost kernel: [112140940.406773] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=149.18.66.36 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=TCP SPT=80 DPT=51785 WINDOW=43440 RES=0x00 ACK SYN URGP=0
Jul 11 14:48:21 localhost kernel: [112140940.406797] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:
show less
Port Scan
🇨🇿
kronos
2026-07-11 18:47:14
(1 day ago)
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:509 | alerts5m:623
Port Scan
🇳🇱
BIV
2026-07-11 18:45:42
(1 day ago)
Honeypot multi-source hit. Sources: tpot:Suricata. Ports: 29327. Automated tiered (T-Pot+DShield).
Port Scan
Hacking
🇺🇸
chillcog.com
2026-07-11 18:45:32
(1 day ago)
Blocked by on honeypot2 [58705/tcp] | SPT: 80 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: abuse.t ...
show more
Blocked by on honeypot2 [58705/tcp] | SPT: 80 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: abuse.terraforge.fun
show less
Port Scan
🇺🇸
rellim.com
2026-07-11 18:45:07
(1 day ago)
Jul 11 11:43:49 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ...
show more
Jul 11 11:43:49 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=149.18.66.36 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=80 DPT=54550 WINDOW=43440 RES=0x00 ACK SYN URGP=0
Jul 11 11:44:06 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=149.18.66.36 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=80 DPT=37609 WINDOW=43440 RES=0x00 ACK SYN URGP=0
Jul 11 11:45:07 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=149.18.66.36 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=80 DPT=59175 WINDOW=43440 RES=0x00 ACK SYN URGP=0
...
show less
Port Scan
🇺🇸
Axel
2026-07-11 18:41:52
(1 day ago)
Blocked by UFW on LAXHH [44352/tcp] | SPT: 80 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github. ...
show more
Blocked by UFW on LAXHH [44352/tcp] | SPT: 80 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2026-07-11 18:41:15
(1 day ago)
Blocked by UFW (TCP on 55408)
Source port: 80
TTL: 48
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 55408)
Source port: 80
TTL: 48
Packet length: 60
TOS: 0x08
This report (for 149.18.66.36) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-07-11 14:45:21
(2 days ago)
[DoS Attack: SYN/ACK Scan] port 80 1 probe(s) in 24 hrs
Port Scan
Hacking
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: