JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.49.213.208

38.49.213.208 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 12%: ?

12%

ISP	Rica Web Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26832
Hostname(s)	mail.002.hakanlegal.eu
Domain Name	servarica.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.49.213.208

Whois 38.49.213.208

IP Abuse Reports for 38.49.213.208:

This IP address has been reported a total of 13 times from 8 distinct sources. 38.49.213.208 was first reported on March 12th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-17 01:02:18 (3 days ago)	Blocked 10 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 10 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇩🇪 raspi4	2026-05-15 00:19:32 (1 month ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇩🇪 raspi4	2026-04-08 15:05:08 (2 months ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇪🇸 unam	2026-04-08 07:11:00 (2 months ago)	web attack	Web App Attack
Anonymous	2026-04-06 20:06:00 (2 months ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=41	Hacking
Anonymous	2026-04-06 14:21:58 (2 months ago)	[Mon Apr 06 16:21:57.175817 2026] [:error] [pid 1947588:tid 1947588] [client 38.49.213.208:58494] Mo ... show more [Mon Apr 06 16:21:57.175817 2026] [:error] [pid 1947588:tid 1947588] [client 38.49.213.208:58494] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)(?:[/\\x5c]\|%(?:2(?:f\|5(?:2f\|5c\|c(?:1 \xc8\|0 %af))\| %)\|5c\|c(?:0%(?:[2aq]f\|5c\|9v)\|1%(?:[19p]c\|8s\|af))\|(?:bg%\|(?:e\|f(?:8 %)?0 %)0 %a)f\|u(?:221[56]\|EFC8\|F025\|002f)\| %(?:2(?:%(?: %\|4)6\|F)\|5%63)\|1 (394 characters omitted)' against variable `REQUEST_URI_RAW' (Value: `/actuator/../actuator/env' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "35"] [id "930100"] [rev ""] [msg "Path Trave ... show less	Web App Attack
🇩🇪 raspi4	2026-04-05 13:34:05 (2 months ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇩🇪 raspi4	2026-04-03 22:01:16 (2 months ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇺🇸 mw	2026-03-23 00:20:26 (2 months ago)	GET /order/history/page/.bak_0.log HTTP/1.1	Web App Attack
🇳🇱 ipoac.nl	2026-03-14 23:27:43 (3 months ago)	ipoac.nl:443 38.49.213.208 - - [15/Mar/2026:00:27:41 +0100] p52824.probes.atlas.ripe.net "GET /stati ... show more ipoac.nl:443 38.49.213.208 - - [15/Mar/2026:00:27:41 +0100] p52824.probes.atlas.ripe.net "GET /static../.git/config HTTP/1.1" 404 6311 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" show less	Bad Web Bot
🇳🇱 ipoac.nl	2026-03-13 16:50:36 (3 months ago)	ipoac.nl:443 38.49.213.208 - - [13/Mar/2026:17:50:35 +0100] p52824.probes.atlas.ripe.net "GET /.git/ ... show more ipoac.nl:443 38.49.213.208 - - [13/Mar/2026:17:50:35 +0100] p52824.probes.atlas.ripe.net "GET /.git/config HTTP/1.1" 403 6300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" show less	Bad Web Bot
🇺🇸 wteiken	2026-03-12 22:49:26 (3 months ago)	2026-03-12T17:49:21.591583-05:00 nostromo.teiken.net kernel: [537570.494756] syn_limit:IN=en-wan OUT ... show more 2026-03-12T17:49:21.591583-05:00 nostromo.teiken.net kernel: [537570.494756] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=38.49.213.208 DST=108.14.99.152 LEN=60 TOS=0x08 PREC=0x20 TTL=56 ID=59271 DF PROTO=TCP SPT=59502 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-12T17:49:22.491582-05:00 nostromo.teiken.net kernel: [537571.403757] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=38.49.213.208 DST=108.14.99.152 LEN=60 TOS=0x08 PREC=0x20 TTL=57 ID=18116 DF PROTO=TCP SPT=59518 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-12T17:49:22.591572-05:00 nostromo.teiken.net kernel: [537571.501036] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=38.49.213.208 DST=108.14.99.152 LEN=60 TOS=0x08 PREC=0x20 TTL=56 ID=59272 DF PROTO=TCP SPT=59502 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-12T17:49:23.551585-05:00 nostromo.teiken.net kernel: [537572.460819] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88: ... show less	Port Scan
🇳🇱 ipoac.nl	2026-03-12 22:47:46 (3 months ago)	ipoac.nl:443 38.49.213.208 - - [12/Mar/2026:23:47:44 +0100] p52824.probes.atlas.ripe.net "GET /.git/ ... show more ipoac.nl:443 38.49.213.208 - - [12/Mar/2026:23:47:44 +0100] p52824.probes.atlas.ripe.net "GET /.git/config HTTP/1.1" 403 6288 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 170.187.165.218

🇮🇩 103.154.231.122

🇳🇱 45.148.10.230

🇲🇽 187.191.48.23

🇺🇸 172.191.157.64

🇺🇸 137.184.133.235

🇫🇷 91.231.89.140

🇨🇳 223.241.247.227

🇺🇸 205.210.31.25

🇺🇸 162.216.149.244

🇺🇸 147.185.132.179

🇳🇱 91.92.40.231

🇳🇱 45.148.10.152

🇺🇸 45.55.151.3

🇻🇳 42.96.19.37

🇧🇪 198.235.24.181

🇳🇱 176.65.148.228

🇫🇷 85.217.140.42

🇮🇷 85.198.19.251

🇩🇪 209.50.186.219