JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.49.161

167.253.49.161 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 8%: ?

ISP	Mumara
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	mumara.com
Country	🇺🇸 United States of America
City	SeaTac, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.49.161

Whois 167.253.49.161

IP Abuse Reports for 167.253.49.161:

This IP address has been reported a total of 17 times from 10 distinct sources. 167.253.49.161 was first reported on April 24th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-04-27 11:10:55 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 167.253.49.161 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 167.253.49.161 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-26 12:43:15 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 167.253.49.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 167.253.49.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 08:43:11.576154 2026] [security2:error] [pid 18380:tid 18387] [client 167.253.49.161:27879] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.eceinal.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.eceinal.com"] [uri "/s3cmd.ini"] [unique_id "ae4IX_3dh_gdJfWfTC74TwAAAYE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-02-05 07:33:19 (4 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-5)	Hacking Bad Web Bot
🇯🇵 mkaraki	2026-01-31 11:33:54 (4 months ago)	1769859223 # Service_probe # SIGNATURE_SEND # source_ip:167.253.49.161 # dst_port:443 ...	Port Scan
🇪🇸 el-brujo	2025-12-18 06:44:33 (5 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PUREVOLTAGE-INC Country: US Method: GET Timestamp: 2025-12-18T06:44:33Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-18 05:59:26 (5 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PUREVOLTAGE-INC Country: US Method: GET Timestamp: 2025-12-18T05:59:26Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-18 04:44:27 (5 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PUREVOLTAGE-INC Country: US Method: GET Timestamp: 2025-12-18T04:44:27Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 Zeprax	2025-12-17 19:31:44 (5 months ago)	DDoS Attack Layer 7	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-12-09 20:27:50 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 london2038.com	2025-07-09 22:43:47 (10 months ago)	Detected by WP fail2ban 2025-07-10T00:43:46.726594+02:00 wordpress: Authentication attempt from 167. ... show more Detected by WP fail2ban 2025-07-10T00:43:46.726594+02:00 wordpress: Authentication attempt from 167.253.49.161 show less	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-05-02 20:38:22 (1 year ago)	(From [email protected]) Dear Sir, Do you happen to be often traveling for business? M ... show more (From [email protected]) Dear Sir, Do you happen to be often traveling for business? Many freelancers still pay too much on roaming fees. We offer a smart solution with international eSIM plans — fully digital, easy to set up, and with savings of up to 85%. Ideal for international businesses. Learn more: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-02 10:02:26 (1 year ago)	(From [email protected]) Dear Madam, Is your team frequently working abroad for business ... show more (From [email protected]) Dear Madam, Is your team frequently working abroad for business? A lot of independent professionals still pay a lot on roaming fees. We offer a modern solution with worldwide eSIM plans — 100% virtual, ready in minutes, and with savings of up to 85%. Perfect for international businesses. Find out more: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇦🇺 oncord	2025-04-27 14:14:08 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-04-27 12:18:31 (1 year ago)	(From [email protected]) Dear Sir, Are you regularly on the road for business? Many freel ... show more (From [email protected]) Dear Sir, Are you regularly on the road for business? Many freelancers still pay a lot on roaming fees. We offer a cost-effective solution with international eSIM plans — no physical SIM card needed, instantly activated, and up to 85% cheaper. Ideal for international businesses. Discover how it works: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-04-25 10:10:32 (1 year ago)	(From [email protected]) Dear Sir, Do you happen to be often working abroad for busin ... show more (From [email protected]) Dear Sir, Do you happen to be often working abroad for business? A lot of companies still spend a lot on roaming fees. We offer a smart solution with worldwide eSIM plans — 100% virtual, ready in minutes, and with savings of up to 85%. Perfect for digital nomads. Learn more: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 96.44.174.251

🇳🇱 45.148.10.147

🇬🇧 193.176.29.14

🇺🇸 162.216.150.234

🇳🇱 45.135.195.129

🇬🇧 35.203.210.229

🇩🇪 213.209.159.56

🇧🇪 198.235.24.230

🇧🇪 198.235.24.161

🇲🇽 187.141.71.166

🇩🇪 176.65.132.129

🇩🇪 147.45.72.199

🇰🇷 125.138.175.113

🇨🇳 120.48.122.43

🇩🇪 87.106.29.151

🇫🇷 51.68.107.161

🇨🇳 36.42.67.114

🇺🇸 20.80.72.204

🇯🇵 183.76.128.115

🇺🇸 172.183.94.131