JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.161.49.2

192.161.49.2 was found in our database!

This IP was reported 9,683 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS23273
Hostname(s)	v2683292.hostpapadedi.net
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.161.49.2

Whois 192.161.49.2

IP Abuse Reports for 192.161.49.2:

This IP address has been reported a total of 9,683 times from 273 distinct sources. 192.161.49.2 was first reported on July 14th 2026, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 andrepcg	2026-08-25 04:12:13 (17 minutes ago)	Port scanning (192.161.49.2 -> :3000)	Port Scan Brute-Force
🇬🇧 sonot	2026-08-25 04:10:08 (19 minutes ago)	Blocked by UFW on tunneluk01 [3000/tcp] \| SPT: 56301 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [3000/tcp] \| SPT: 56301 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-25 04:10:05 (19 minutes ago)	2026-08-25T06:10:03.953273+02:00 vps kernel: [4001827.690922] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-08-25T06:10:03.953273+02:00 vps kernel: [4001827.690922] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=192.161.49.2 DST=54.37.14.118 LEN=40 TOS=0x08 PREC=0x20 TTL=232 ID=54321 PROTO=TCP SPT=56938 DPT=3000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇬🇧 Andrew	2026-08-25 04:09:34 (20 minutes ago)	Blocked by UFW (TCP on port 3000). Source port: 51832 TTL: 243 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 3000). Source port: 51832 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 192.161.49.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Aurealize	2026-08-25 04:09:34 (20 minutes ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-25T04:09:34.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-25T04:09:34.000Z through 2026-08-25T04:09:34.000Z. show less	Port Scan
🇦🇺 HostFission	2026-08-25 04:08:44 (21 minutes ago)	PSAD port scan detected	Port Scan
🇩🇪 ValtonTahiri	2026-08-25 04:07:36 (22 minutes ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=192.161.49.2; proto=TCP; source_port=58739; target_port=3000; flags=SYN show less	Port Scan
🇫🇷 vtchost.com	2026-08-25 04:07:31 (22 minutes ago)	2026-08-25T06:07:31.356080+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0: ... show more 2026-08-25T06:07:31.356080+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=192.161.49.2 DST=169.58.115.24 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=49856 DPT=3000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Ilop	2026-08-25 00:03:59 (4 hours ago)	[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 80,443 from 192.161.49.2 — WAN ... show more [v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 80,443 from 192.161.49.2 — WAN scan (automated sensor) show less	Port Scan
🇩🇪 EnthecSolutions	2026-08-24 14:00:45 (14 hours ago)	Detected by Enthec Solutions. \| Attempts: 106 in 24h \| Target port: 9004	Port Scan Hacking
🇩🇪 razvangheorghies	2026-08-24 03:21:34 (1 day ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.); TCP port scanning. Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot Port Scan
Anonymous	2026-08-23 22:30:06 (1 day ago)		Port Scan
🇫🇷 peter.pann	2026-08-23 22:07:41 (1 day ago)	Port scan: 167 blocked connection attempts to ports 8867,8868,8869,8870,8871,8872,8873,8874,8875,887 ... show more Port scan: 167 blocked connection attempts to ports 8867,8868,8869,8870,8871,8872,8873,8874,8875,8876 (dropped by our geo-firewall). show less	Port Scan
🇺🇸 Aurealize	2026-08-23 19:54:56 (1 day ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:00:34.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:00:34.000Z through 2026-08-23T19:00:34.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:08:32.000Z through 2026-08-23T19:08:32.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:15:34.000Z through 2026-08-23T19:15:34.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:22:22.000Z through 2026-08-23T19:22:22.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:28:43.000Z through 2026-08-23T19:28:43.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:37:18.000Z through 2026-08-23T19:37:18.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:44:53.000Z through 2026-08-23T19:44:53.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-08-23T19:47:42.000Z through 2026-08-23T19:47:42.000Z. firewall port scanning d show less	Port Scan
🇩🇪 mueller-nils.com	2026-08-23 19:51:12 (1 day ago)	Aug 23 20:56:08 [host] kernel: [10620061.799463] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=192.161.49.2 DS ... show more Aug 23 20:56:08 [host] kernel: [10620061.799463] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=192.161.49.2 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=52911 DPT=9032 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 23 21:06:06 [host] kernel: [10 show less	Port Scan

Showing 1 to 15 of 9683 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.233

🇦🇷 181.104.43.225

🇨🇳 180.76.202.69

🇵🇰 110.38.3.26

🇿🇦 102.129.61.125

🇺🇦 95.46.143.39

🇳🇱 94.154.43.234

🇫🇷 91.231.89.235

🇫🇷 91.231.89.174

🇫🇷 85.217.140.47

🇵🇰 72.255.18.157

🇺🇸 69.73.187.130

🇳🇱 45.148.10.157

🇬🇧 35.203.210.25

🇰🇷 222.116.48.103

🇩🇪 209.38.237.29

🇺🇸 205.210.31.71

🇳🇱 195.178.110.218

🇺🇸 172.86.114.38

🇩🇪 149.224.49.50