JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.224.149.77

45.224.149.77 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 21%: ?

21%

ISP	NEGOCIOS Y TELEFONIA NEDETEL S.A.
Usage Type	Fixed Line ISP
ASN	AS52468
Hostname(s)	77-149-224-45.ufinetlatam.com.ec
Domain Name	nedetel.net
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.224.149.77

Whois 45.224.149.77

IP Abuse Reports for 45.224.149.77:

This IP address has been reported a total of 36 times from 21 distinct sources. 45.224.149.77 was first reported on December 15th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-01 00:01:40 (2 weeks ago)	642 limiting connections by zone (13m59s)	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-30 15:43:07 (2 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇸🇬 volcaryx	2026-05-25 12:02:29 (2 weeks ago)	Cloudflare detected an L7 DDoS attack (l7ddos) from EC. Action: BLOCK \| Protocol: HTTP/2 (GET) \| End ... show more Cloudflare detected an L7 DDoS attack (l7ddos) from EC. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇳🇱 ByeByte API	2026-05-19 08:11:42 (3 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-19T08:11:42Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-19T08:11:42Z: 5 rejections in 300s. Firewall auto-banned IP for 21600s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/17.3'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="132", "Chromium";v="132", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Referer: 'https://google.com/'. Country (CF): EC. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-18 17:51:31 (3 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-18T17:51:30Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-18T17:51:30Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Linux; Android 14; SM-A546B) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/128.0.0.0 Mobile Safari/17.6'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="128", "Chromium";v="128", "Not.A/Brand";v="24"'. Platform: "Android" (mobile=?1). Referer: 'https://google.com/'. Country (CF): EC. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:02:15 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇫🇷 Szymekk	2026-04-06 20:33:30 (2 months ago)	DDoS attack detected by Snarenet agent agent-1	DDoS Attack
🇺🇸 COMPLEX	2026-03-06 17:05:08 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from EC. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from EC. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-24 14:46:56 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 45.224.149.77 (77-149-224-45.ufinetlatam.com.ec ... show more (mod_security) mod_security (id:210730) triggered by 45.224.149.77 (77-149-224-45.ufinetlatam.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 09:46:49.261964 2026] [security2:error] [pid 22425:tid 22425] [client 45.224.149.77:35677] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Ashton II Recliner/Ashton II Recliner/Havana Brown/Thumbs.db"] [unique_id "aZ252dBSbpR3E3GNUPfk2AAAABI"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 Bharat Datacenter	2026-01-11 16:06:35 (5 months ago)	1: date=2026-01-11 time=21:34:54 eventtime=1768147495142618890 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=21:34:54 eventtime=1768147495142618890 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=45.224.149.77 srccountry="Ecuador" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=146485 attack="tcp_syn_flood" srcport=39950 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4422 > threshold 2000, repeats 146485 times since last log, pps 4466 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇮🇹 VHosting	2025-12-30 13:28:21 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇨🇭 Modules	2025-12-24 13:15:12 (5 months ago)	Open proxy http://45.224.149.77:999 (RT:8040ms,Loc:Ecuador,ASN:AS52468)	Open Proxy
🇺🇸 SuperEvilLuke	2025-12-14 13:36:43 (6 months ago)	Malicious activity detected from 52468 UFINET PANAMA S.A. towards host panel.embotic.xyz (GET HTTP/2 ... show more Malicious activity detected from 52468 UFINET PANAMA S.A. towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-14T13:36:43Z (1 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-12-04 07:36:25 (6 months ago)	botnet	DDoS Attack
🇺🇸 1gz	2025-12-01 21:57:54 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from EC. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from EC. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.32

🇧🇷 177.105.190.18

🇧🇷 148.227.123.114

🇧🇩 114.130.85.36

🇮🇳 59.145.160.158

🇨🇳 223.167.206.221

🇺🇸 205.210.31.51

🇸🇬 172.253.211.17

🇭🇰 154.198.162.75

🇺🇸 147.185.132.64

🇫🇮 77.105.161.120

🇺🇸 66.132.186.190

🇬🇧 35.203.210.102

🇺🇸 34.174.133.191

🇮🇷 2.188.239.50

🇺🇸 216.180.246.66

🇮🇳 182.95.91.86

🇻🇪 179.63.37.20

🇺🇸 174.138.87.36

🇭🇰 172.253.237.26