JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.36.39.249

Neutral Activity

Abuse confidence score ?

0% Low Risk

58 reports

18 reporters · latest 1 year ago

ISP	GTT a.s.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42422
Hostname(s)	249-39.hukot.cloud
Domain Name	gtt-as.cz
Country	🇨🇿 Czechia
City	Prague, Prague

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

46.36.39.249 has been reported 58 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 46.36.39.249

Export CSV

This IP address has been reported a total of 58 times from 18 distinct sources. 46.36.39.249 was first reported on November 3rd 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2025-08-20 04:06:57 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 [email protected]	2025-07-25 00:28:46 (1 year ago)	www.ggftraining.org.uk:443 46.36.39.249 - - [25/Jul/2025:00:28:45 +0000] "HEAD /backup.zip HTTP/1.1" ... show more www.ggftraining.org.uk:443 46.36.39.249 - - [25/Jul/2025:00:28:45 +0000] "HEAD /backup.zip HTTP/1.1" 404 4044 "-" "-" www.ggftraining.org.uk:443 46.36.39.249 - - [25/Jul/2025:00:28:46 +0000] "HEAD /Archive.zip HTTP/1.1" 404 4044 "-" "-" www.ggftraining.org.uk:443 46.36.39.249 - - [25/Jul/2025:00:28:46 +0000] "HEAD /ggftraining.zip HTTP/1.1" 404 4044 "-" "-" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-07-20 02:13:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 22:13:30.666099 2025] [security2:error] [pid 7769:tid 7793] [client 46.36.39.249:11268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leaderoftheopposition.com"] [uri "/wp-config.php.backup"] [unique_id "aHxQyv4y0weCUP3OEG7UjgAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇬 Stoyko Stoykov	2025-07-16 18:29:01 (1 year ago)	46.36.39.249 - - [16/Jul/2025:21:29:00 +0300] "GET /wp-config.php.old HTTP/1.1" 301 162 "-" "-" ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-07-16 10:37:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 06:36:58.334169 2025] [security2:error] [pid 7429:tid 7429] [client 46.36.39.249:18718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newcastle91.org"] [uri "/wp-config.php.old"] [unique_id "aHeAyhC4p_Yu7fq-4T6mtgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-14 02:13:36 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 22:13:28.437661 2025] [security2:error] [pid 16703:tid 16703] [client 46.36.39.249:41534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icbsmonitor.net"] [uri "/wp-config.php1"] [unique_id "aHRnyK7XJAPMM3Txy3OGUwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-07-12 17:50:51 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-10 13:35:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 09:35:50.020806 2025] [security2:error] [pid 24397:tid 24397] [client 46.36.39.249:8362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfgardening.com"] [uri "/wp-config.php.old"] [unique_id "aG_BttRqGkXOE8EFJ98ptQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 15:05:18 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 11:05:12.524795 2025] [security2:error] [pid 7425:tid 7425] [client 46.36.39.249:48098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jcommonsenseeconomics.com"] [uri "/wp-config.php1"] [unique_id "aG6FKKuvPJGxZ9FGbt9suAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 11:57:46 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 07:57:40.224560 2025] [security2:error] [pid 29699:tid 29699] [client 46.36.39.249:12332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paintingqueen.com"] [uri "/wp-config.php1"] [unique_id "aG5ZNEWTVLaP4p_Lyo4j3gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-06 10:19:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 46.36.39.249 (249-39.hukot.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 06 06:19:31.609966 2025] [security2:error] [pid 20763:tid 20763] [client 46.36.39.249:46346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stukabird.com"] [uri "/wp-config.php_"] [unique_id "aGpNs8adoNV_xFHEh4NobAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-09-02 04:11:02 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-08-24 23:02:17 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-08-24 02:00:20 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇿 Tripwire	2024-08-22 13:31:18 (2 years ago)	Scanning for exploits - /adminer.php	Hacking Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.47

🇭🇰 49.213.6.30

🇧🇷 45.171.155.94

🇻🇳 180.93.59.8

🇺🇸 172.56.115.49

🇺🇸 73.234.196.5

🇮🇳 49.37.202.14

🇷🇺 45.74.3.174

🇨🇳 211.161.235.13

🇿🇦 197.89.155.38

🇺🇸 162.216.149.238

🇳🇱 146.190.30.58

🇻🇳 116.118.44.131

🇨🇳 101.89.141.184

🇩🇪 69.5.169.97

🇲🇼 41.75.114.30

🇬🇧 31.14.254.77

🇵🇰 203.101.186.17

🇳🇱 159.223.212.171

🇫🇷 156.67.24.120