JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.201.136.40

112.201.136.40 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 4%: ?

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Hostname(s)	112.201.136.40.pldt.net
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Antipolo, Calabarzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.201.136.40

Whois 112.201.136.40

IP Abuse Reports for 112.201.136.40:

This IP address has been reported a total of 14 times from 8 distinct sources. 112.201.136.40 was first reported on August 18th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-30 22:32:30 (18 hours ago)		Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-04-20 08:59:08 (2 months ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 112.201.136.40 - - [20/Apr/2026:09:59:02 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 112.201.136.40 - - [20/Apr/2026:09:59:02 +0100] POST /wp-login.php HTTP/1.1 200 4296 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	Web App Attack
Anonymous	2025-12-09 10:08:38 (6 months ago)	botnet	DDoS Attack
🇺🇸 octageeks.com	2025-08-27 04:06:52 (10 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇺🇸 TPI-Abuse	2025-08-26 10:56:52 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 06:56:44.676559 2025] [security2:error] [pid 19814:tid 19814] [client 112.201.136.40:23965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|muziktellers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "muziktellers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aK2S7G9O07uzQwcLDAu88AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-26 01:51:41 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 findlab	2025-08-26 01:20:04 (10 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-24 01:41:51 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 21:41:46.280203 2025] [security2:error] [pid 7359:tid 7384] [client 112.201.136.40:23544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sandiegosamsolo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sandiegosamsolo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aKpt2kw4PyKDLLjYMHqZEQAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-24 00:33:47 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-22 04:49:43 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-08-22 04:15:57 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 112.201.136.40 (112.201.136.40.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 00:15:49.589746 2025] [security2:error] [pid 13893:tid 13893] [client 112.201.136.40:21991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|epetsure.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "epetsure.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aKfu9d6E10VvLjE2QfXSzQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-20 00:43:57 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Penny Packer	2025-08-18 21:42:11 (10 months ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2025-08-18 20:51:12 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.153.86.250

🇬🇧 193.200.81.43

🇷🇺 37.77.150.241

🇭🇰 36.255.220.145

🇮🇹 151.59.124.109

🇸🇬 129.226.195.146

🇿🇦 102.64.45.112

🇱🇹 81.30.98.142

🇺🇸 24.30.46.44

🇨🇳 14.103.115.117

🇨🇭 209.99.188.148

🇭🇰 168.76.131.178

🇧🇷 148.227.90.91

🇺🇸 96.33.122.207

🇨🇦 85.217.149.26

🇺🇸 66.132.172.113

🇺🇸 35.254.178.223

🇮🇳 116.73.240.74

🇭🇰 103.52.153.215

🇮🇳 103.43.35.8