JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.253.49.193

167.253.49.193 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Mumara
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	mumara.com
Country	🇺🇸 United States of America
City	Wilmington, Delaware

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.253.49.193

Whois 167.253.49.193

IP Abuse Reports for 167.253.49.193:

This IP address has been reported a total of 17 times from 10 distinct sources. 167.253.49.193 was first reported on October 1st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-16 01:46:44 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 167.253.49.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 167.253.49.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:46:40.318802 2026] [security2:error] [pid 2259642:tid 2259642] [client 167.253.49.193:52347] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Dandridge II/Thumbs.db"] [unique_id "aeA_gLutCIyzcTN8HFDN_wAAABc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Dandridge%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2026-03-13 01:55:41 (2 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/13/2026 1:55 am (UTC-6) show less	Web App Attack Bad Web Bot Web Spam Hacking
🇨🇭 backslash	2026-03-11 12:18:39 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇳🇱 lid3rc	2026-03-11 04:17:16 (2 months ago)	/administrator	Web App Attack
Anonymous	2026-03-06 20:56:17 (3 months ago)	(WPLOGIN) WP Login Attack 167.253.49.193 (US/United States/-): 10 in the last 3600 secs; Ports: ; D ... show more (WPLOGIN) WP Login Attack 167.253.49.193 (US/United States/-): 10 in the last 3600 secs; Ports: ; Direction: 1 show less	Brute-Force SSH
🇮🇩 BPS-StatisticsIndonesia	2026-03-02 13:25:14 (3 months ago)	WP Login Scan Activities: "2026-03-02T20:25:14.668+07:00" "/wp-login.php" "167.253.49.193" "Mozilla/ ... show more WP Login Scan Activities: "2026-03-02T20:25:14.668+07:00" "/wp-login.php" "167.253.49.193" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 Psycho Solutions LLC	2026-02-27 22:56:52 (3 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 2/27/2026 10:56 pm (UTC-6) show less	Web App Attack Bad Web Bot Web Spam Hacking
🇮🇩 sockominfo	2026-02-07 10:22:25 (3 months ago)	[WAZUH] Mixed case extension detected (case variation bypass)	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-07 00:00:09 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
Anonymous	2026-02-03 20:07:55 (4 months ago)	"GET /wp-login.php HTTP/1.1"	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-02-01 01:13:41 (4 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-27 17:28:32 (4 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2026-01-26 09:23:23 (4 months ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-26 04:13:10 (4 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 04:40:18 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 167.253.49.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 167.253.49.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 23:40:14.923481 2026] [security2:error] [pid 18839:tid 18839] [client 167.253.49.193:57283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW8HLsge5fs2fG6zkXFDCQAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.206.103.148

🇰🇬 185.53.228.208

🇻🇳 123.23.84.117

🇷🇴 92.118.39.62

🇫🇷 85.217.140.37

🇺🇸 66.132.195.75

🇺🇸 2604:a880:400:d1:0:4:8bf1:6001

🇸🇬 213.35.121.41

🇨🇿 212.102.39.41

🇫🇮 185.148.3.33

🇷🇺 185.94.111.1

🇻🇪 181.225.32.17

🇨🇱 179.57.170.71

🇺🇸 64.62.156.128

🇵🇰 59.103.119.34

🇲🇾 49.124.152.153

🇬🇧 18.132.205.13

🇰🇿 188.247.203.110

🇮🇳 182.95.189.206

🇺🇸 150.171.109.33