AbuseIPDB » 149.22.216.89
149.22.216.89
This IP was reported 7 times. Confidence of
Abuse
is 26% : ?
ISP
Community Fibre Limited
Usage Type
Fixed Line ISP
ASN
AS201838
Domain Name
communityfibre.co.uk
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 149.22.216.89 :
This IP address has been reported a total of
7
times from
6 distinct
sources.
149.22.216.89 was first reported on
April 19th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-10 09:38:41
(3 days ago)
(mod_security) mod_security (id:217210) triggered by 149.22.216.89 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 149.22.216.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:38:38.197265 2026] [security2:error] [pid 19816:tid 19816] [client 149.22.216.89:56722] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||inconnu.la-boite-immo.com|F|4"] [data "GET http://inconnu.la-boite-immo.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inconnu.la-boite-immo.com"] [uri "/"] [unique_id "aikwntZ1ao8MM8f93-ecOwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
urnilxfgbez
2026-05-12 22:45:00
(1 month ago)
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸
sumnone
2026-05-11 23:35:54
(1 month ago)
Port probing on unauthorized port 23
Port Scan
Hacking
Exploited Host
🇧🇾
sashan
2026-05-11 23:09:48
(1 month ago)
2026-05-12T02:09:48.136423+03:00 gate kernel: nftables: JAIL-MSS IN=wan OUT= MAC= SRC=149.22.216.89 ...
show more
2026-05-12T02:09:48.136423+03:00 gate kernel: nftables: JAIL-MSS IN=wan OUT= MAC= SRC=149.22.216.89 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=11727 PROTO=TCP SPT=27005 DPT=23 WINDOW=1403 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
RAP
2026-05-11 21:42:09
(1 month ago)
2026-05-11 21:42:09 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸
RAP
2026-05-11 21:08:41
(1 month ago)
2026-05-11 21:08:41 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷
security.yc3a.com
2026-04-19 01:05:08
(1 month ago)
149.22.216.89 - - [19/Apr/2026:01:05:07 +0000] "GET /api/images/ HTTP/2.0" 401 16 "-" "Mozilla/5.0 ( ...
show more
149.22.216.89 - - [19/Apr/2026:01:05:07 +0000] "GET /api/images/ HTTP/2.0" 401 16 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G935T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Mobile Safari/537.36"
show less
Brute-Force
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: