AbuseIPDB » 149.19.165.222
149.19.165.222
This IP was reported 6 times. Confidence of
Abuse
is 16% : ?
ISP
Starlink Brazil Serviços de Internet Ltd
Usage Type
Fixed Line ISP
ASN
AS14593
Hostname(s)
customer.splobra1.isp.starlink.com
Domain Name
starlink.com
Country
🇧🇷
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 149.19.165.222 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
149.19.165.222 was first reported on
August 16th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-15 18:02:21
(1 day ago)
apache vulnerability scan
Web App Attack
🇮🇩
hermawan
2026-09-19 19:27:17
(3 weeks ago)
[Sun Sep 20 02:26:58.631065 2026] [security2:error] [pid 92793:tid 140496299095744] [client 149.19.1 ...
show more
[Sun Sep 20 02:26:58.631065 2026] [security2:error] [pid 92793:tid 140496299095744] [client 149.19.165.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aq7iAl_3e0KqhyhdthVKCAAAABg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92844] [h50kABtFBQ0] [aq7iAl_3e0KqhyhdthVKCAAAABg] keep_alive=[0] [2026-09-20 02:26:58.631069] [R:aq7iAl_3e0KqhyhdthVKCAAAABg] UA:'Moz
...
show less
Email Spam
Hacking
🇩🇪
LRob
2026-08-18 19:09:49
(1 month ago)
Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use | path: ...
show more
Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use | path: /116-vtt
show less
DDoS Attack
Web App Attack
🇫🇮
iamxorum
2026-05-14 03:02:45
(5 months ago)
2026-05-14T03:02:45.254406+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ...
show more
2026-05-14T03:02:45.254406+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=149.19.165.222 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26674 PROTO=TCP SPT=48084 DPT=23 WINDOW=5188 RES=0x00 SYN URGP=0
...
show less
Port Scan
IoT Targeted
🇳🇱
exxos
2025-08-23 18:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
🇫🇷
Sklurk
2025-08-16 11:58:14
(1 year ago)
Web App Attack
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: