JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.245.192.49

163.245.192.49 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	Interserver, Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26666
Domain Name	interserver.net
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.245.192.49

Whois 163.245.192.49

IP Abuse Reports for 163.245.192.49:

This IP address has been reported a total of 80 times from 65 distinct sources. 163.245.192.49 was first reported on May 28th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 larse99	2026-06-08 21:00:38 (6 days ago)	Detected Scanning / Hacking activity	Port Scan Hacking
Anonymous	2026-06-07 19:47:38 (1 week ago)	$f2bV_matches	Brute-Force
🇦🇺 CalmBrain	2026-06-06 16:00:42 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇦🇺 CalmBrain	2026-06-05 14:40:07 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇨🇭 TheCoon	2026-06-05 02:30:01 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
Anonymous	2026-06-02 17:43:01 (1 week ago)	$f2bV_matches	Brute-Force
🇺🇸 TPI-Abuse	2026-06-02 16:34:03 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 163.245.192.49 (vps3406511.trouble-free.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 163.245.192.49 (vps3406511.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 12:33:59.070770 2026] [security2:error] [pid 21821:tid 21821] [client 163.245.192.49:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn.socialstudiesforkids.com"] [uri "/.env"] [unique_id "ah8F93dYDmLKNSsQbn6ybQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Kreapptivo	2026-06-02 16:30:20 (1 week ago)	[02/Jun/2026:18:30:16 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 1 ... show more [02/Jun/2026:18:30:16 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 piticu iuli	2026-06-02 16:20:36 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 163.245.192.49 (US/United States/vps340 ... show more (mod_security) mod_security triggered on hostname [redacted] 163.245.192.49 (US/United States/vps3406511.trouble-free.net) show less	SQL Injection
🇮🇩 Burayot	2026-06-02 15:24:14 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 163.245.192.49 (US/United States/vp ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 163.245.192.49 (US/United States/vps3406511.trouble-free.net): 2 in the last 3600 secs show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-02 13:43:49 (1 week ago)	[Tue Jun 02 23:43:49.438317 2026] [security2:error] [pid 239855] [client 163.245.192.49:21792] [clie ... show more [Tue Jun 02 23:43:49.438317 2026] [security2:error] [pid 239855] [client 163.245.192.49:21792] [client 163.245.192.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/.env"] [unique_id "ah7eFYJO0At2u5XI8qqPTAAAAAE"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 13:21:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 163.245.192.49 (vps3406511.trouble-free.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 163.245.192.49 (vps3406511.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:21:50.631498 2026] [security2:error] [pid 11855:tid 11855] [client 163.245.192.49:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccamp.dev"] [uri "/.env"] [unique_id "ah7Y7skW2irzDJoTDqMuCQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-02 12:59:26 (1 week ago)	[TueJun0214:59:25.2191862026][security2:error][pid137244:tid137313][client163.245.192.49:0]ModSecuri ... show more [TueJun0214:59:25.2191862026][security2:error][pid137244:tid137313][client163.245.192.49:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\$\\|\?=\?f$\?:open\\|write$\?\\\\\\\\$\\|\\\\\\\\b\(\?:passthru\\|serialize\\|php_uname\\|phpinfo\\|shell_exec\\|preg_\\\\\\\\w \\|mysql_query\\|exec\\|eval\\|create_function\\|base64_decode\\|decode_base64\\|rot13\\|base64_url_decode\\|gz\(\?:inflate\\|decode\\|uncompress$\\|strrev\\|z...\"atARGS:\<\?.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"734\"][id\"340095\"][rev\"54\"][msg\"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack.\"][data\"base64_decode\(\,ARGS:\<\?\"][severity\"CRITICAL\"][hostname\"cbri.ch\"][uri\"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php\"][unique_id\"ah7TrQlxPdAA5--JSiDB5wAAAIY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 conrad10781	2026-06-02 12:26:46 (1 week ago)	nginx-dot-env	Web App Attack
Anonymous	2026-06-02 12:03:41 (1 week ago)	attempts to hack passwords	Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 222.255.180.246

🇱🇹 81.30.98.158

🇱🇹 81.30.98.62

🇺🇸 66.132.172.239

🇺🇸 18.217.102.23

🇦🇱 193.163.187.107

🇺🇸 173.22.108.196

🇸🇱 102.206.185.55

🇳🇱 77.83.39.59

🇨🇳 60.12.106.119

🇨🇳 8.130.115.49

🇩🇪 216.25.126.23

🇩🇪 194.88.98.91

🇬🇧 194.50.235.151

🇧🇬 193.24.211.107

🇮🇳 125.62.126.197

🇨🇳 120.237.232.172

🇺🇸 91.230.168.250

🇨🇭 85.5.148.125

🇮🇹 79.11.39.204