JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.161.49.232

185.161.49.232 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 23%: ?

23%

ISP	Anfeya LLC
Usage Type	Fixed Line ISP
ASN	AS207192
Domain Name	optinetworks.kg
Country	🇰🇬 Kyrgyzstan
City	Kara-Balta, Chuy Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.161.49.232

Whois 185.161.49.232

IP Abuse Reports for 185.161.49.232:

This IP address has been reported a total of 9 times from 5 distinct sources. 185.161.49.232 was first reported on August 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 saamkuu	2026-10-21 05:46:03 (1 day ago)	DDoS botnet: TCP connection flood, 3 connections to port 443.	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-26 16:59:21 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.161.49.232 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.161.49.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 12:54:56.607793 2026] [security2:error] [pid 24404:tid 24404] [client 185.161.49.232:43142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pizzadata.com"] [uri "/stage/.env.old"] [unique_id "arf44HIx5365S349qE413gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 05:43:48 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇷🇸 pavel Karpenko	2026-09-17 08:42:42 (1 month ago)	17/Sep/2026:11:42:42 +0300 \| GET /transfer/?company=Trinity+Ltd&company_country=RU&country=RU&lang=f ... show more 17/Sep/2026:11:42:42 +0300 \| GET /transfer/?company=Trinity+Ltd&company_country=RU&country=RU&lang=fr&scope=ripe_to&share=c90307b948ffea20&view=company HTTP/1.1 \| HTTP 444 \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	DDoS Attack
🇺🇸 鬼影233	2026-09-13 15:29:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-02 09:04:28 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 03:18:53 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 04:00:39 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-23 16:04:53 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.212.203.66

🇨🇳 116.179.32.67

🇹🇼 111.70.32.10

🇮🇹 95.244.118.208

🇨🇭 82.21.4.202

🇬🇧 35.203.211.135

🇬🇧 31.14.254.76

🇺🇸 216.25.89.156

🇳🇱 204.76.203.4

🇺🇸 195.184.76.132

🇬🇧 188.240.59.5

🇳🇱 185.136.15.80

🇵🇪 179.6.6.141

🇺🇸 166.88.178.38

🇺🇸 162.216.150.15

🇺🇸 162.35.25.120

🇺🇸 147.185.132.198

🇧🇭 109.161.240.6

🇺🇸 108.162.238.88

🇮🇩 103.184.179.182