JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.49.186.39

187.49.186.39 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 16%: ?

16%

ISP	Nw3 telecomunicações Ltda
Usage Type	Fixed Line ISP
ASN	AS270512
Domain Name	nw3internet.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.49.186.39

Whois 187.49.186.39

IP Abuse Reports for 187.49.186.39:

This IP address has been reported a total of 11 times from 8 distinct sources. 187.49.186.39 was first reported on August 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-25 15:22:45 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 187.49.186.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 187.49.186.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:22:42.338456 2026] [security2:error] [pid 22734:tid 22734] [client 187.49.186.39:39059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ericgwin.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ericgwin.com"] [uri "/"] [unique_id "at4ewkzjWf_35hLZZkuYyQAAAAo"], referer: https://ericgwin.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-23 12:57:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 187.49.186.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 187.49.186.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:56:29.964033 2026] [security2:error] [pid 25901:tid 25901] [client 187.49.186.39:10684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "specialtywebsiteservice.com"] [uri "/api/.env.dist"] [unique_id "arPMfbz1dXn0G_jZOBmt5gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-21 07:52:28 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-28 13:55:03 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-15 14:59:02 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-08-09 07:32:47 (2 months ago)	Bogus Useragent: 187.49.186.39 - - [09/Aug/2026:09:32:46 +0200] "GET /protocol?id=rp_13_110&paragrap ... show more Bogus Useragent: 187.49.186.39 - - [09/Aug/2026:09:32:46 +0200] "GET /protocol?id=rp_13_110&paragraph=11033442&seq=1575 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 7.0; Windows 95; Trident/4.0)" asn=270512 org="Nw3 telecomunica\xC3\xA7\xC3\xB5es Ltda" country=BR ... show less	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 05d1ccb8-9fe2-4914-b2a4-f363f4cb0b0e	DDoS Attack
Anonymous	2026-04-04 04:05:12 (6 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2025-11-29 19:28:42 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-19 23:06:42 (11 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 exxos	2025-08-20 05:03:01 (1 year ago)	Attacks with Bad user agents	Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.222.168.9

🇰🇷 218.234.186.2

🇧🇴 181.115.161.69

🇺🇸 77.113.75.52

🇳🇱 45.156.87.50

🇳🇱 45.148.10.152

🇧🇪 35.205.126.119

🇺🇸 216.25.89.106

🇹🇭 150.95.84.186

🇨🇳 123.178.210.187

🇨🇿 109.238.212.91

🇨🇳 101.126.66.30

🇫🇷 85.217.140.7

🇷🇴 80.94.92.234

🇨🇳 58.241.232.147

🇨🇳 58.212.237.212

🇭🇰 47.86.33.146

🇨🇳 42.51.41.252

🇺🇸 40.77.167.16

🇺🇸 34.75.81.243