JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.1.249.30

166.1.249.30 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Evoxt.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS149440
Hostname(s)	166-1-249-30.ips.acedatacenter.com
Domain Name	evoxt.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.1.249.30

Whois 166.1.249.30

IP Abuse Reports for 166.1.249.30:

This IP address has been reported a total of 35 times from 23 distinct sources. 166.1.249.30 was first reported on July 15th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-07-31 12:25:05 (9 hours ago)	Accessed trap at '/.env'	Web App Attack
🇮🇩 soc-yk	2026-07-31 11:42:13 (9 hours ago)	Type: suspicious_network_activity Risk: 92 Events: 216 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 92 Events: 216 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇩🇪 33three	2026-07-31 11:28:10 (10 hours ago)	Fail2Ban jail WebAttack triggered	Brute-Force
🇧🇪 voormedia	2026-07-31 10:42:22 (10 hours ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 Gabriel Camargo	2026-07-31 01:59:40 (19 hours ago)	166.1.249.30 - - [30/Jul/2026:20:59:40 -0500] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (W ... show more 166.1.249.30 - - [30/Jul/2026:20:59:40 -0500] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 166.1.249.30 - - [30/Jul/2026:20:59:40 -0500] "GET /.env.save HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 166.1.249.30 - - [30/Jul/2026:20:59:40 -0500] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇺🇸 Victor López	2026-07-31 01:49:58 (19 hours ago)	empresarioexpress.com 166.1.249.30 - - [30/Jul/2026:20:49:57 -0500] "GET /.git/config HTTP/1.1" 444 ... show more empresarioexpress.com 166.1.249.30 - - [30/Jul/2026:20:49:57 -0500] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" - empresarioexpress.com 166.1.249.30 - - [30/Jul/2026:20:49:57 -0500] "GET /.env.production HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" - empresarioexpress.com 166.1.249.30 - - [30/Jul/2026:20:49:57 -0500] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" - ... show less	Hacking Web App Attack
Anonymous	2026-07-31 00:35:12 (21 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇦 URAN Publishing Service	2026-07-30 23:34:39 (22 hours ago)	166.1.249.30 - - [31/Jul/2026:02:34:38 +0300] "GET /.env.save HTTP/1.1" 404 4643 "-" "Mozilla/5.0 (W ... show more 166.1.249.30 - - [31/Jul/2026:02:34:38 +0300] "GET /.env.save HTTP/1.1" 404 4643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 166.1.249.30 - - [31/Jul/2026:02:34:38 +0300] "GET /.env.backup HTTP/1.1" 404 4642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇩 Burayot	2026-07-30 23:19:47 (22 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 166.1.249.30 (MY/Malaysia/166-1-249- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 166.1.249.30 (MY/Malaysia/166-1-249-30.ips.acedatacenter.com): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-30 23:05:44 (22 hours ago)	166.1.249.30 - - [30/Jul/2026:23:05:43 +0000] "GET /.env.production HTTP/1.1" 404 7828 "-" "Mozilla/ ... show more 166.1.249.30 - - [30/Jul/2026:23:05:43 +0000] "GET /.env.production HTTP/1.1" 404 7828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 mw	2026-07-30 00:20:19 (1 day ago)	GET /.env.production HTTP/1.1	Web App Attack
🇸🇪 vaia.cloud	2026-07-29 19:50:01 (2 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=82; exact paths: /.env \| /.env.backup \| /.env.bak \| /.env.dev \| /.env.develop ... show more Apache probe; attempts=82; exact paths: /.env \| /.env.backup \| /.env.bak \| /.env.dev \| /.env.development \| /.env.dist \| /.env.local \| /.env.prod \| /.env.production \| /.env.save \| /.env.staging \| /.git/config \| /api/.env \| /app/.env \| /backend/.env \| /config/.env \| /public/.env \| /src/.env \| /web/.env show less	Web App Attack
🇬🇧 consul.to	2026-07-28 19:50:40 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-28 15:49:06 (3 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 141.98.83.111

🇨🇳 122.97.212.115

🇵🇹 109.49.6.114

🇰🇷 61.80.173.207

🇺🇸 52.224.109.126

🇺🇸 35.231.124.226

🇬🇧 35.203.211.241

🇬🇧 35.203.211.97

🇺🇸 13.86.116.180

🇩🇪 2.26.50.151

🇻🇳 103.152.165.164

🇳🇱 45.148.10.151

🇳🇱 34.91.0.68

🇳🇱 5.253.59.68

🇬🇵 5.187.97.40

🇩🇪 2a01:4f8:150:13a5::100:1

🇨🇳 218.92.244.10

🇳🇱 185.224.128.16

🇨🇳 101.126.69.201

🇺🇦 91.214.85.227