JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.187.49.63

85.187.49.63 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 16%: ?

16%

ISP	I B Company Ltd.
Usage Type	Fixed Line ISP
ASN	AS205129
Hostname(s)	85.187.49.63.ipacct.net
Domain Name	pon.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.187.49.63

Whois 85.187.49.63

IP Abuse Reports for 85.187.49.63:

This IP address has been reported a total of 2 times from 2 distinct sources. 85.187.49.63 was first reported on July 3rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 18:16:06 (2 days ago)	(mod_security) mod_security (id:217210) triggered by 85.187.49.63 (85.187.49.63.ipacct.net): 1 in th ... show more (mod_security) mod_security (id:217210) triggered by 85.187.49.63 (85.187.49.63.ipacct.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 14:16:01.096277 2026] [security2:error] [pid 11665:tid 11665] [client 85.187.49.63:44236] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.ericgwin.com\|F\|4"] [data "GET http://www.ericgwin.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ericgwin.com"] [uri "/"] [unique_id "aklN4SH95Y_zqYYgmAHrAgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-03 10:41:23 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.122

🇨🇴 181.71.247.186

🇲🇽 177.239.88.197

🇺🇸 172.70.111.105

🇺🇸 172.69.134.70

🇮🇩 103.59.160.213

🇿🇦 102.64.33.109

🇸🇬 101.47.158.56

🇨🇦 99.241.111.71

🇺🇸 66.240.223.240

🇺🇸 13.89.121.92

🇰🇷 220.127.148.6

🇷🇼 197.243.14.52

🇫🇷 195.154.48.38

🇮🇳 183.82.111.224

🇺🇸 172.172.196.177

🇳🇬 152.32.141.217

🇪🇸 139.28.190.252

🇨🇳 123.144.28.17

🇨🇳 111.26.62.42