AbuseIPDB » 167.253.49.189
167.253.49.189
This IP was reported 10 times. Confidence of
Abuse
is 0% : ?
ISP
Mumara
Usage Type
Data Center/Web Hosting/Transit
ASN
Unknown
Domain Name
mumara.com
Country
🇺🇸
United States of America
City
Wilmington, Delaware
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 167.253.49.189 :
This IP address has been reported a total of
10
times from
8 distinct
sources.
167.253.49.189 was first reported on
October 3rd 2024 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-05-07 16:56:47
(1 month ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-04-16 02:19:40
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 167.253.49.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 167.253.49.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:19:32.713706 2026] [security2:error] [pid 2296221:tid 2296221] [client 167.253.49.189:10405] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Havana Brown/Thumbs.db"] [unique_id "aeBHNAbh-rEBBbVsP3mkogAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/Havana%20Brown/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-04-01 01:51:25
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
oralunal
2026-03-24 16:47:26
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-12 01:18:43
(3 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
nodepile
2026-01-27 03:06:31
(4 months ago)
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/predator-orionsuptmsup-v2-multicol ...
show more
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/predator-orionsuptmsup-v2-multicolor-led-angel-eyes-w-rem-p-6026.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4113.67 Safari/537.36')
show less
Open Proxy
VPN IP
🇺🇸
nodepile
2026-01-13 22:05:52
(5 months ago)
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/e60-5series-m5-rear-trunk-spoiler- ...
show more
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/e60-5series-m5-rear-trunk-spoiler-p-6042.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4891.190 Safari/537.36')
show less
Open Proxy
VPN IP
🇺🇸
MrDD
2024-10-21 16:02:33
(1 year ago)
Brute Force Attack on Cisco Web VPN
Brute-Force
2024-10-04 10:45:11
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-10-03 00:15:14
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: