JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.49.133.178

38.49.133.178 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 24%: ?

24%

ISP	IENTC S de RL de CV
Usage Type	Fixed Line ISP
ASN	AS28458
Hostname(s)	38-49-133-178.customer.ientc.net.mx
Domain Name	ientc.net
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.49.133.178

Whois 38.49.133.178

IP Abuse Reports for 38.49.133.178:

This IP address has been reported a total of 19 times from 11 distinct sources. 38.49.133.178 was first reported on December 5th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-29 02:47:19 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇫🇷 MatStef132	2026-05-22 14:04:49 (2 weeks ago)	MatShield L7: blocked on mathost.eu (chrome-ua-hint-missing)	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:02:27 (4 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 cheatmaster.store	2026-05-08 11:34:51 (4 weeks ago)	Proxy parsed from 38.49.133.178:999	Brute-Force SSH
🇨🇭 4server	2026-05-06 06:51:56 (1 month ago)	[WedMay0608:51:49.1420822026][security2:error][pid2359109:tid2359428][client38.49.133.178:0]ModSecur ... show more [WedMay0608:51:49.1420822026][security2:error][pid2359109:tid2359428][client38.49.133.178:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:Via.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"whatsdecor.ch\"][uri\"/wp-json/wp/v2/posts\"][unique_id\"afrlBaXmpQncbOh3Oc4YtAAAAMs\"] show less	Hacking Web App Attack
🇮🇹 VHosting	2026-04-26 08:29:52 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:26 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:07:36 (2 months ago)	38.49.133.178 - - [05/Apr/2026:16:49:36 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.online. ... show more 38.49.133.178 - - [05/Apr/2026:16:49:36 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.online.ca/news" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:16:55:21 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.prime-top.net/services" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:16:55:21 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:16:58:25 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.prime-top.net/services" "Mo ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:43:04 (2 months ago)	38.49.133.178 - - [05/Apr/2026:17:39:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube. ... show more 38.49.133.178 - - [05/Apr/2026:17:39:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:17:39:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.reddit.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:17:39:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.reddit.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:17:41:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 38.49.133.178 - - [05/Apr/2026:17:41:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; ... show less	DDoS Attack
Anonymous	2026-03-23 06:30:41 (2 months ago)	\| [Dangerous/Mexico] Aggressive IP 38.49.133.178 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/Mexico] Aggressive IP 38.49.133.178 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇸 ISPLtd	2022-12-20 13:03:30 (3 years ago)	Dec 20 13:51:41 SRC=38.49.133.178 PROTO=TCP SPT=43363 DPT=8008 SYN Dec 20 13:51:42 SRC=38.49.133.178 ... show more Dec 20 13:51:41 SRC=38.49.133.178 PROTO=TCP SPT=43363 DPT=8008 SYN Dec 20 13:51:42 SRC=38.49.133.178 PROTO=TCP SPT=43363 DPT=8008 SYN Dec 20 13:51:44 SRC=38.49.133.178 PROTO=TCP SPT=43363 DPT=8008 ... show less	Port Scan
🇯🇵 cat	2022-12-15 19:16:11 (3 years ago)	38.49.133.178 - - [16/Dec/2022:00:14:14 +0000] "GET / HTTP/1.1" 444 0 "-" "" 38.49.133.178 - - [16/D ... show more 38.49.133.178 - - [16/Dec/2022:00:14:14 +0000] "GET / HTTP/1.1" 444 0 "-" "" 38.49.133.178 - - [16/Dec/2022:00:14:14 +0000] "GET / HTTP/1.1" 444 0 "-" "" 38.49.133.178 - - [16/Dec/2022:00:14:34 +0000] "GET / HTTP/1.1" 444 0 "-" "" ... show less	Bad Web Bot Web App Attack
🇮🇸 ISPLtd	2022-12-14 13:25:57 (3 years ago)	Dec 14 14:05:24 SRC=38.49.133.178 PROTO=TCP SPT=52442 DPT=1983 SYN Dec 14 14:05:25 SRC=38.49.133.178 ... show more Dec 14 14:05:24 SRC=38.49.133.178 PROTO=TCP SPT=52442 DPT=1983 SYN Dec 14 14:05:25 SRC=38.49.133.178 PROTO=TCP SPT=52442 DPT=1983 SYN Dec 14 14:05:27 SRC=38.49.133.178 PROTO=TCP SPT=52442 DPT=1983 ... show less	Port Scan
Anonymous	2022-12-09 14:00:37 (3 years ago)	DDoS Attack	DDoS Attack Web Spam
Anonymous	2022-12-09 14:00:37 (3 years ago)	DDoS Attack	DDoS Attack Web Spam

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 59.21.37.60

🇺🇸 45.38.17.156

🇮🇳 42.111.103.6

🇺🇸 104.152.52.240

🇺🇸 104.152.52.126

🇺🇸 104.152.52.122

🇺🇸 104.152.52.121

🇩🇪 84.200.87.106

🇺🇸 74.48.84.136

🇺🇸 66.132.195.121

🇺🇸 66.132.172.245

🇨🇳 61.156.31.141

🇨🇳 14.103.114.194

🇳🇱 195.178.110.188

🇧🇷 191.19.17.188

🇨🇳 111.53.0.169

🇺🇸 104.152.52.239

🇺🇸 104.152.52.148

🇺🇸 104.152.52.143

🇺🇸 104.152.52.142