JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.182.185.49

185.182.185.49 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 36%: ?

36%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3430970.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.182.185.49

Whois 185.182.185.49

IP Abuse Reports for 185.182.185.49:

This IP address has been reported a total of 9 times from 7 distinct sources. 185.182.185.49 was first reported on June 7th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-16 04:52:24 (3 days ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
Anonymous	2026-07-13 21:35:15 (6 days ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
🇦🇺 AWW-Admin	2026-07-13 07:38:00 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 185.182.185.49 (FR/France/vmi3430970.co ... show more (mod_security) mod_security triggered on hostname [redacted] 185.182.185.49 (FR/France/vmi3430970.contaboserver.net) show less	SQL Injection
🇩🇪 tinect	2026-07-13 03:11:41 (1 week ago)	This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe	Web App Attack
🇩🇪 [email protected]	2026-07-12 15:19:41 (1 week ago)	Brute force 128 attempts	DDoS Attack SQL Injection Brute-Force SSH
🇫🇮 oh.mg	2026-07-12 13:59:44 (1 week ago)	185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /phpinfo HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Wi ... show more 185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /phpinfo HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /index.php/phpinfo HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /api/phpinfo HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /media/.env HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 185.182.185.49 - - [12/Jul/2026:15:59:44 +0200] "GET /db.sql HTTP/1.1" 403 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/53 ... show less	Bad Web Bot Web App Attack
🇫🇮 pixiekat	2026-07-12 08:39:22 (1 week ago)	[Sun Jul 12 09:39:21.504713 2026] [authz_core:error] [pid 2614912:tid 2615001] [client 185.182.185.4 ... show more [Sun Jul 12 09:39:21.504713 2026] [authz_core:error] [pid 2614912:tid 2615001] [client 185.182.185.49:58702] AH01630: client denied by server configuration: /var/www/html/phpinfo [Sun Jul 12 09:39:21.514145 2026] [authz_core:error] [pid 2614912:tid 2615002] [client 185.182.185.49:58718] AH01630: client denied by server configuration: /var/www/html/index.php [Sun Jul 12 09:39:21.518281 2026] [authz_core:error] [pid 2614914:tid 2615018] [client 185.182.185.49:58720] AH01630: client denied by server configuration: /var/www/html/api [Sun Jul 12 09:39:21.519880 2026] [authz_core:error] [pid 2614914:tid 2615022] [client 185.182.185.49:58728] AH01630: client denied by server configuration: /var/www/html/x.php [Sun Jul 12 09:39:21.521806 2026] [authz_core:error] [pid 2614912:tid 2615003] [client 185.182.185.49:58730] AH01630: client denied by server configuration: /var/www/html/media ... show less	Brute-Force
🇫🇷 Hiigara	2025-06-08 15:31:51 (1 year ago)	connection attempt : 185.182.185.49 on port : tcp/445 (SMB)	Port Scan
🇫🇷 Hiigara	2025-06-07 11:31:55 (1 year ago)	connection attempt : 185.182.185.49 on port : tcp/445 (SMB)	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.71.135.110

🇺🇸 143.137.167.185

🇰🇷 125.137.115.145

🇺🇸 109.105.210.52

🇨🇦 85.217.149.59

🇰🇿 37.208.46.133

🇺🇸 2001:470:1:c84::2be

🇺🇸 216.25.89.95

🇺🇸 207.90.244.18

🇺🇸 195.184.76.50

🇩🇪 194.88.98.119

🇦🇲 176.32.193.16

🇺🇸 165.22.180.185

🇻🇳 125.212.235.194

🇧🇪 34.140.179.75

🇧🇪 34.52.170.240

🇺🇸 23.29.118.224

🇻🇳 14.236.139.50

🇺🇸 13.220.91.9

🇯🇵 8.216.12.44