JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.249.112.163

80.249.112.163 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Sefroyek Pardaz Engineering PJSC
Usage Type	Commercial
ASN	AS211421
Domain Name	shahrad.net
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.249.112.163

Whois 80.249.112.163

IP Abuse Reports for 80.249.112.163:

This IP address has been reported a total of 10 times from 7 distinct sources. 80.249.112.163 was first reported on October 20th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 cheatmaster.store	2025-06-03 07:38:58 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇳🇱 cheatmaster.store	2025-06-03 07:32:01 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇳🇱 cheatmaster.store	2025-06-03 07:27:38 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇯🇵 ki3	2024-11-02 05:37:10 (1 year ago)	Fail2Ban: Web App Attacks and Forum Spam 80.249.112.163 1730525830.0(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2024-10-31 05:34:11 (1 year ago)	apache exploit attempt	Hacking SQL Injection
🇦🇺 MAGIC	2024-10-29 21:05:41 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-24 07:32:16 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 80.249.112.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 80.249.112.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 24 03:32:09.286045 2024] [security2:error] [pid 27067:tid 27067] [client 80.249.112.163:37708] [client 80.249.112.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.152.176.135 (+1 hits since last alert)\|www.victorvictor.biz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.victorvictor.biz"] [uri "/xmlrpc.php"] [unique_id "Zxn3-S1l-BWcgz4Ok_OXIwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-10-23 11:25:00 (1 year ago)	(mod_security) mod_security (id:6) triggered by 80.249.112.163 (IR/Iran/-): 1 in the last 3600 secs; ... show more (mod_security) mod_security (id:6) triggered by 80.249.112.163 (IR/Iran/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 18:24:52.603243 2024] [security2:error] [pid 27759:tid 27806] [client 80.249.112.163:59364] [client 80.249.112.163] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZxjdBHO2lOze3MLXnl0H4gAAAJE"], referer: https://kb.pavietnam.vn/huong-dan-cai-dat-phpbb-bang-softaculous-tren-cpanel.html show less	Brute-Force SSH
🇺🇸 myagent.site	2024-10-20 16:30:06 (1 year ago)	Blocked user enumeration attempt	Hacking
🇻🇳 Xuan Can	2024-10-20 12:53:54 (1 year ago)	(mod_security) mod_security (id:6) triggered by 80.249.112.163 (IR/Iran/-): 1 in the last 3600 secs; ... show more (mod_security) mod_security (id:6) triggered by 80.249.112.163 (IR/Iran/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 19:53:48.373115 2024] [security2:error] [pid 8265:tid 8732] [client 80.249.112.163:34592] [client 80.249.112.163] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZxT9XNn2arBjg32Ghx_ePgAACBE"], referer: https://kb.pavietnam.vn/1-so-cau-lenh-tcpdump-thuong-duoc-su-dung.html show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.194.192

🇺🇸 172.104.17.108

🇺🇸 52.247.106.58

🇺🇸 45.8.19.47

🇫🇷 5.189.191.18

🇨🇳 1.28.54.115

🇨🇦 167.99.182.212

🇩🇪 130.12.180.52

🇳🇱 107.189.27.179

🇫🇷 85.204.70.114

🇭🇷 82.23.211.68

🇷🇺 80.253.31.232

🇺🇸 66.132.224.28

🇱🇹 62.60.130.219

🇱🇺 46.151.182.137

🇺🇸 2600:1900:4120:e3fb:0:7d::

🇮🇩 143.20.49.38

🇺🇸 104.253.48.61

🇸🇪 104.23.217.131

🇸🇪 104.23.217.34