This IP address has been reported a total of
22
times from
13 distinct
sources.
149.18.81.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
Anonymous
Detected Hacking, SQL Injection or general Web App Attack
Web App Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?skudprqc=Jsk5G9yn,/?zdtkha=zUBU9gNU4oRi,/?zyvrj=HT3extAa,/api/v2/users?cgs=F9wBpv1TGmM,/static/js/main.js,/xmlrpc.php?pcp=wO7kWCRNUxCugy; Country=CI; ASN=212400 Dediroom LLC
show less
DDoS Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.env,/.git/HEAD,/.git/config,/.htaccess,/composer.json; Country=CI; ASN=212400 Dediroom LLC
show less
2026-07-20T08:59:51.539715 mail-honeypot postfix/submission/smtpd[862]: warning: unknown[149.18.81.1 ...
show more2026-07-20T08:59:51.539715 mail-honeypot postfix/submission/smtpd[862]: warning: unknown[149.18.81.114]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=CI; ASN=212400 Dediroom LLC
show less
Hacking
Anonymous
| [Normal/United Kingdom] Aggressive IP 149.18.81.114 (~350 hits). Type: DoS Defender- Web server 40 ...
show more| [Normal/United Kingdom] Aggressive IP 149.18.81.114 (~350 hits). Type: DoS Defender- Web server 400 error code
show less
2026-07-17T12:38:09.472982 ns2.elhacker.net postfix/smtpd[143298]: improper command pipelining after ...
show more2026-07-17T12:38:09.472982 ns2.elhacker.net postfix/smtpd[143298]: improper command pipelining after CONNECT from unknown[149.18.81.114]: \026\003\001\000\363\001\000\000\357\003\003\2369\237\373'\362|\271\247\204\306\266\216#\232*\016\267p\022\326\337P\337\347\365\375a\310$\bA \343\272\260\003J\311\211l\264&\204\343|\f\266\362\031\226\345\336nz\0220O\034\327\311\312'\320z\000\030JJ\023\001\023\002\023\003\300,\300+\3000\300/\314\251\314\250\000\237
2026-07-17T12:38:09.473952 ns2.elhacker.net postfix/smtpd[143298]: too many errors after CONNECT from unknown[149.18.81.114]
...
show less
(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 149.18.81.114 (CI/Ivory Coast/-): 1 ...
show more(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 149.18.81.114 (CI/Ivory Coast/-): 1 in the last 3600 secs (0-195)
show less