JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.49.126.52

Neutral Activity

Abuse confidence score ?

0% Low Risk

11 reports

8 reporters · latest 8 months ago

ISP	GCI Network Solutions Limited
Usage Type	Fixed Line ISP
ASN	Unknown
Domain Name	nasstar.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.49.126.52 has been reported 11 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.49.126.52

Export CSV

This IP address has been reported a total of 11 times from 8 distinct sources. 185.49.126.52 was first reported on April 15th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Daniel	2026-01-11 19:00:03 (8 months ago)	Sent spam email	Email Spam
🇫🇷 MeduzaCTI	2026-01-08 15:53:04 (8 months ago)	Indicator Report Indicator: 185.49.126.52 Reporter: CloudStrife Description: AsyncRAT Malware Found ... show more Indicator Report Indicator: 185.49.126.52 Reporter: CloudStrife Description: AsyncRAT Malware Found Tags: AsyncRAT,Malware,C2 Source: Meduza CTI Platform Reference: https://meduzacti.com show less	Hacking
🇸🇦 MeduzaCTI	2025-10-07 14:23:36 (1 year ago)	Indicator Report Indicator: 185.49.126.52 Reporter: Abodovic Description: AsyncRAT Malware Found Ta ... show more Indicator Report Indicator: 185.49.126.52 Reporter: Abodovic Description: AsyncRAT Malware Found Tags: AsyncRAT,Malware,C2 Source: Meduza CTI Platform Reference: https://meduzacti.com show less	Hacking
🇫🇮 danskefilm.dk	2025-09-27 15:48:01 (1 year ago)	SMTP login brute-force attempt.	Brute-Force
🇩🇪 Hazzard	2025-07-09 09:20:31 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2025-04-21 21:45:38 (1 year ago)		Web App Attack
🇧🇪 Ciaran	2025-04-19 19:28:55 (1 year ago)	Honeypot hit from 185.49.126.52 targeting a server in Belgium. Unauthorized HTTP access attempt to p ... show more Honeypot hit from 185.49.126.52 targeting a server in Belgium. Unauthorized HTTP access attempt to path "/", "/", "/.DS_Store", "/.env", "/.env" show less	Bad Web Bot Web App Attack
🇧🇪 webbie	2025-04-19 14:22:41 (1 year ago)	185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "GET /.DS_Store HTTP/1.1" 403 400 "Mozilla/5.0 (Macin ... show more 185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "GET /.DS_Store HTTP/1.1" 403 400 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "GET /.env HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "POST /.env HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "GET /.DS_Store HTTP/1.1" 403 3719 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 185.49.126.52 - - [19/Apr/2025:16:22:40 +0200] "GET /.env.prod HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Brute-Force Web App Attack
🇧🇪 webbie	2025-04-16 22:47:29 (1 year ago)	185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "GET /.DS_Store HTTP/1.1" 403 400 "Mozilla/5.0 (Windo ... show more 185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "GET /.DS_Store HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "GET /.env HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "POST /.env HTTP/1.1" 403 400 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "GET /.DS_Store HTTP/1.1" 403 3719 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" 185.49.126.52 - - [17/Apr/2025:00:47:28 +0200] "GET /.env.prod HTTP/1.1" 403 400 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇧🇪 beruys.com	2025-04-16 11:16:58 (1 year ago)	[Wed Apr 16 13:16:56.534451 2025] [proxy_fcgi:error] [pid 1978579:tid 140170133231168] [client 185.4 ... show more [Wed Apr 16 13:16:56.534451 2025] [proxy_fcgi:error] [pid 1978579:tid 140170133231168] [client 185.49.126.52:56223] AH01071: Got error 'Primary script unknown' [Wed Apr 16 13:16:56.852597 2025] [proxy_fcgi:error] [pid 1978579:tid 140170141623872] [client 185.49.126.52:65196] AH01071: Got error 'Primary script unknown' [Wed Apr 16 13:16:56.912484 2025] [proxy_fcgi:error] [pid 1978579:tid 140169067882048] [client 185.49.126.52:52340] AH01071: Got error 'Primary script unknown' ... show less	DDoS Attack SSH
🇧🇪 Ciaran	2025-04-15 04:10:43 (1 year ago)	Honeypot hit from 185.49.126.52 targeting a server in Belgium. Unauthorized HTTP access attempt to p ... show more Honeypot hit from 185.49.126.52 targeting a server in Belgium. Unauthorized HTTP access attempt to path "/", "/", "/.DS_Store", "/.env", "/.env" show less	Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.250.52.101

🇬🇧 2400:cb00:21:1000:8773:555a:b962:a9a2

🇳🇱 2400:cb00:20:1000:81ff:d746:ec4e:e686

🇳🇱 2400:cb00:20:1000:7b95:1c56:3021:6354

🇳🇱 2400:cb00:20:1000:778b:75ec:2985:257e

🇩🇪 213.209.159.84

🇳🇱 213.177.179.79

🇭🇺 195.228.79.114

🇧🇷 191.52.219.177

🇦🇷 190.177.161.183

🇲🇽 189.218.49.16

🇲🇾 183.171.41.155

🇰🇷 183.104.220.152

🇩🇪 157.90.18.5

🇺🇸 147.185.132.84

🇬🇧 141.101.98.25

🇧🇷 138.59.122.153

🇲🇩 132.243.165.121

🇨🇳 121.46.244.20

🇭🇰 119.28.46.114