JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.202.49.71

142.202.49.71 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 71%: ?

71%

ISP	GTHost
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63023
Hostname(s)	71-49-202-142.clients.gthost.com
Domain Name	gthost.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.202.49.71

Whois 142.202.49.71

IP Abuse Reports for 142.202.49.71:

This IP address has been reported a total of 112 times from 82 distinct sources. 142.202.49.71 was first reported on May 3rd 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-05-22 16:20:49 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-12 10:51:19 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-05-10 03:12:44 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /app_dev.php/_profiler/open?file=app/config/config.yml HTTP/1.1" 404 414 - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-09 03:12:30 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /app_dev.php/_profiler/open?file=app/config/config.yml HTTP/1.1" 404 414 - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-07 03:12:35 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /app_dev.php/_profiler/open?file=app/config/config.yml HTTP/1.1" 404 414 - 142.202.49.71 - - [03/May/2026:17:45:07 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-05-06 14:22:05 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 websecuritylabs	2026-05-06 11:12:00 (1 month ago)	Web App Attack	Web App Attack
🇭🇺 kranem	2026-05-06 00:00:37 (1 month ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 63023 (GTHost) Protocol: HTTP/1.1 (GET me ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 63023 (GTHost) Protocol: HTTP/1.1 (GET method) Endpoint: /admin/login Timestamp: 2026-05-05T22:48:03Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 show less	Bad Web Bot
🇻🇳 trung.fun	2026-05-05 22:42:18 (1 month ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇳🇱 thedreamer.nl	2026-05-05 22:26:05 (1 month ago)	142.202.49.71 - - [05/May/2026:15:07:06 +0200] "GET /admin/login HTTP/1.1" 404 181 "http://rss-bridg ... show more 142.202.49.71 - - [05/May/2026:15:07:06 +0200] "GET /admin/login HTTP/1.1" 404 181 "http://rss-bridge.thedreamer.nl/admin/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "US" "Ashburn" "39.04690" "-77.49030" 142.202.49.71 - - [05/May/2026:18:34:54 +0200] "GET /admin/login HTTP/1.1" 404 145 "http://synapse.thedreamer.nl/admin/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "US" "Ashburn" "39.04690" "-77.49030" 142.202.49.71 - - [05/May/2026:21:01:36 +0200] "GET /admin/login HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "US" "Ashburn" "39.04690" "-77.49030" 142.202.49.71 - - [06/May/2026:00:21:22 +0200] "GET /admin/login HTTP/1.1" 404 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" " ... show less	Brute-Force Bad Web Bot
🇧🇪 boxed-it	2026-05-05 19:08:02 (1 month ago)	GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇭🇺 kranem	2026-05-05 18:00:29 (1 month ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 63023 (GTHost) Protocol: HTTP/1.1 (GET me ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 63023 (GTHost) Protocol: HTTP/1.1 (GET method) Endpoint: /admin/login Timestamp: 2026-05-05T17:02:46Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-05-05 17:57:49 (1 month ago)	path attack /admin/login	Web App Attack
🇮🇹 Progetto1	2026-05-05 17:40:03 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 backslash	2026-05-05 16:48:03 (1 month ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.145.24

🇨🇳 120.48.4.164

🇨🇳 113.245.9.163

🇸🇦 51.235.180.11

🇵🇱 45.194.66.73

🇳🇱 209.38.99.178

🇳🇱 195.178.110.30

🇨🇳 182.204.182.53

🇮🇳 182.95.123.202

🇨🇳 182.86.43.85

🇦🇺 158.178.141.210

🇱🇾 154.127.68.65

🇫🇮 147.185.133.100

🇧🇷 138.255.230.4

🇫🇷 91.231.89.245

🇫🇷 91.231.89.147

🇳🇱 45.148.10.152

🇵🇱 20.215.211.246

🇺🇸 216.73.216.122

🇺🇸 205.210.31.74