JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.131.120.49

216.131.120.49

Activity Trending Down

36 reports found in our database

9% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

Strong Technology, LLC.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS22781

Hostname(s)

216-131-120-49.stl.as22781.net

Domain Name

reliablehosting.com

Country

🇺🇸 United States of America

City

Marshall, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 216.131.120.49:

This IP address has been reported a total of 36 times from 14 distinct sources. 216.131.120.49 was first reported on August 28th 2023, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Switzerland with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Bad Web Bot 1 time; Exploited Host 1 time; DDoS Attack 1 time; Hacking 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-08-19 09:32:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-07-23 16:15:04 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇷 vtchost.com	2026-06-18 12:20:47 (2 months ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇮🇩 xveil	2026-04-09 11:00:06 (4 months ago)	2026-04-09T18:00:04.181817 mail-honeypot postfix/submission/smtpd[2619]: warning: 216-131-120-49.stl ... show more 2026-04-09T18:00:04.181817 mail-honeypot postfix/submission/smtpd[2619]: warning: 216-131-120-49.stl.as22781.net[216.131.120.49]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-04-08 02:29:22 (4 months ago)	2026-04-08T09:29:20.697495 mail-honeypot postfix/submission/smtpd[14684]: warning: 216-131-120-49.st ... show more 2026-04-08T09:29:20.697495 mail-honeypot postfix/submission/smtpd[14684]: warning: 216-131-120-49.stl.as22781.net[216.131.120.49]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-03-18 14:33:16 (5 months ago)	2026-03-18T21:33:14.464237 mail-honeypot postfix/submission/smtpd[16390]: warning: unknown[216.131.1 ... show more 2026-03-18T21:33:14.464237 mail-honeypot postfix/submission/smtpd[16390]: warning: unknown[216.131.120.49]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇨🇭 backslash	2026-03-07 01:12:47 (5 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇹🇷 Doruk	2026-03-07 00:30:09 (5 months ago)	Unauthorized connection attempt	Brute-Force
🇫🇷 vtchost.com	2026-01-23 10:13:47 (7 months ago)	invalid user agent, possible botnet ...	Bad Web Bot Exploited Host
🇺🇸 ipblock.com	2025-07-11 18:48:00 (1 year ago)	IPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Ma ... show more IPBlock protected site ID [4055-d][s=08]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/83.0.4103.118 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-06-10 14:17:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net) ... show more (mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 10:17:01.359568 2025] [security2:error] [pid 2404782:tid 2404782] [client 216.131.120.49:57375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silsby.com"] [uri "/.env"] [unique_id "aEg-XS4I55jfgU9-bB9lkAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-10 13:58:01 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net) ... show more (mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 09:57:58.002435 2025] [security2:error] [pid 3854156:tid 3854156] [client 216.131.120.49:59202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pscc.com"] [uri "/.env"] [unique_id "aEg55j4FiUb4hP2O7ai1kgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-10 12:24:12 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net) ... show more (mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 08:24:07.684308 2025] [security2:error] [pid 3359446:tid 3359446] [client 216.131.120.49:52542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tinkerlabyrinth.com"] [uri "/.env"] [unique_id "aEgj56rPuFzrapOfJByatAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-10 11:10:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net) ... show more (mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 07:09:58.055186 2025] [security2:error] [pid 1142120:tid 1142120] [client 216.131.120.49:65125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "highaltitudebaking.com"] [uri "/.env"] [unique_id "aEgShvj8XnvI2v6Gy-uyMAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-10 08:50:28 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net) ... show more (mod_security) mod_security (id:210492) triggered by 216.131.120.49 (216-131-120-49.stl.as22781.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 10 04:50:24.761553 2025] [security2:error] [pid 2335436:tid 2335436] [client 216.131.120.49:60804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wincourtransportation.com"] [uri "/.env"] [unique_id "aEfx0FrL6M7ChIfThWtR4gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.23.251.126

🇸🇬 103.13.206.100

🇳🇱 45.142.193.164

🇺🇸 35.237.27.45

🇯🇵 8.216.8.131

🇰🇷 222.239.251.12

🇧🇷 205.210.31.214

🇷🇴 193.32.162.84

🇫🇮 147.185.133.128

🇺🇸 104.164.155.214

🇹🇷 94.154.43.154

🇧🇷 50.6.138.11

🇸🇬 47.128.76.125

🇬🇧 45.82.76.138

🇺🇸 34.234.112.240

🇹🇼 198.235.24.70

🇳🇱 188.166.100.232

🇸🇪 185.189.45.230

🇺🇸 162.216.150.142

🇺🇸 162.216.149.237