JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 136.0.42.242

136.0.42.242 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Snaju Development
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399646
Domain Name	snaju.com
Country	🇺🇸 United States of America
City	Houston, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 136.0.42.242

Whois 136.0.42.242

IP Abuse Reports for 136.0.42.242:

This IP address has been reported a total of 40 times from 36 distinct sources. 136.0.42.242 was first reported on December 8th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Gwyneth Llewelyn	2026-07-11 21:16:52 (4 hours ago)	136.0.42.242 - - [11/Jul/2026:22:16:50 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Li ... show more 136.0.42.242 - - [11/Jul/2026:22:16:50 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/4.0" 2026/07/11 22:16:50 [error] 2483228#2483228: 630450 access forbidden by rule, client: 136.0.42.242, server: _, request: "GET /.env HTTP/1.1", host: "[redacted]:8080", referrer: "http://[redacted]:8080/.env" 2026/07/11 22:16:50 [error] 2483230#2483230: 630457 access forbidden by rule, client: 136.0.42.242, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]", referrer: "http://[redacted]:80/.env" show less	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-07-11 21:13:42 (4 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 gadix	2026-07-11 21:12:12 (4 hours ago)	[11/Jul/2026:23:11:40.058677 +0200] alKxjCi796VMaeF9EVgP5QAAAAE 136.0.42.242 35504 127.0.0.1 7080 [1 ... show more [11/Jul/2026:23:11:40.058677 +0200] alKxjCi796VMaeF9EVgP5QAAAAE 136.0.42.242 35504 127.0.0.1 7080 [11/Jul/2026:23:11:41.092481 +0200] alKxjdvAeC_91Gf425_9qQAAAFg 136.0.42.242 35544 127.0.0.1 7080 [11/Jul/2026:23:12:10.547737 +0200] alKxqtvAeC_91Gf425_9rwAAAEI 136.0.42.242 56192 127.0.0.1 7080 ... show less	Web App Attack
🇩🇪 petardimic	2026-07-11 13:45:03 (12 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 ecs.ge	2026-07-11 11:51:02 (14 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 webanyone	2026-07-11 10:45:46 (15 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
Anonymous	2026-07-11 10:41:28 (15 hours ago)	[11/Jul/2026:13:41:28 +0300] 178376648823.930804 136.0.42.242 41888 148.251.76.218 80 [11/Jul/2026:1 ... show more [11/Jul/2026:13:41:28 +0300] 178376648823.930804 136.0.42.242 41888 148.251.76.218 80 [11/Jul/2026:13:41:28 +0300] 178376648814.874304 136.0.42.242 41920 148.251.76.218 80 show less	Web App Attack
🇩🇪 spirttm	2026-07-11 07:38:57 (18 hours ago)	136.0.42.242 - - [11/Jul/2026:07:30:21 +0000] "GET / HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; ... show more 136.0.42.242 - - [11/Jul/2026:07:30:21 +0000] "GET / HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1" 136.0.42.242 - - [11/Jul/2026:07:38:17 +0000] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 136.0.42.242 - - [11/Jul/2026:07:38:27 +0000] "GET /.aws/credentials HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1" 136.0.42.242 - - [11/Jul/2026:07:38:27 +0000] "GET /.s3cfg HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 136.0.42.242 - - [11/Jul/2026:07:38:27 +0000] "GET /.npmrc HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mo ... show less	Port Scan Web App Attack
🇫🇮 diego021	2026-07-11 07:38:24 (18 hours ago)	136.0.42.242 135.181.251.148 - [11/Jul/2026:02:28:04 -0500] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5. ... show more 136.0.42.242 135.181.251.148 - [11/Jul/2026:02:28:04 -0500] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:78.0) Gecko/20100101 Firefox/78.0" 136.0.42.242 135.181.251.148 - [11/Jul/2026:02:28:04 -0500] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 136.0.42.242 135.181.251.148 - [11/Jul/2026:02:38:12 -0500] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.0.42.242 135.181.251.148 - [11/Jul/2026:02:38:23 -0500] "GET /.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 gadix	2026-07-11 07:33:50 (18 hours ago)	[11/Jul/2026:09:33:47.226886 +0200] alHx25jsOTsKVEHNmiIb5QAAAAA 136.0.42.242 35790 127.0.0.1 7080 [1 ... show more [11/Jul/2026:09:33:47.226886 +0200] alHx25jsOTsKVEHNmiIb5QAAAAA 136.0.42.242 35790 127.0.0.1 7080 [11/Jul/2026:09:33:47.405881 +0200] alHx20Lo5vd62uiHPjHRLwAAAAY 136.0.42.242 33068 127.0.0.1 7081 [11/Jul/2026:09:33:48.202029 +0200] alHx3ISAqENHQ3l8QGKBAQAAAAU 136.0.42.242 35830 127.0.0.1 7080 ... show less	Web App Attack
🇫🇮 Daniel Baer	2026-07-11 05:40:02 (20 hours ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-sensitive-files alert_id: 819 events: 5 creat ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-sensitive-files alert_id: 819 events: 5 created_at: 2026-07-11T05:35:56Z message: Ip 136.0.42.242 performed 'crowdsecurity/http-sensitive-files' (5 events over 411.624506ms) at 2026-07-11 05:35:56.524806893 +0000 UTC target_uri: ["/.s3cfg","/.aws/credentials","/.git/config","/.env","/.psql_history.bak"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/7.0","Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Safari/605.1.15","Mozilla/5.0 (X11; Linux x show less	Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-07-10 23:57:34 (1 day ago)	dot file probe	Web App Attack
🇩🇪 PBC	2026-07-10 23:53:59 (1 day ago)	Automated exploit scan blocked by fail2ban	Brute-Force SSH
🇫🇮 mnazibo	2026-07-10 21:00:46 (1 day ago)	Date: Jul 10 23:00:32 2026 EAT \| Reported IP: 136.0.42.242 mod_security \| id: 920350 930130 949110 9 ... show more Date: Jul 10 23:00:32 2026 EAT \| Reported IP: 136.0.42.242 mod_security \| id: 920350 930130 949110 920440 920500 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; URL file extension is restricted by policy; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 13); Host header is a numeric IP address; Attempt to access a backup or working file; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 13) show less	SQL Injection Brute-Force Bad Web Bot
🇫🇮 mnazibo	2026-07-10 20:15:44 (1 day ago)	Date: Jul 10 23:00:32 2026 EAT \| Reported IP: 136.0.42.242 mod_security \| id: 920350 930130 949110 9 ... show more Date: Jul 10 23:00:32 2026 EAT \| Reported IP: 136.0.42.242 mod_security \| id: 920350 930130 949110 920440 920500 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Inboun show less	SQL Injection Brute-Force Bad Web Bot

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.38

🇺🇸 162.158.186.87

🇦🇪 139.185.55.154

🇰🇷 121.183.240.55

🇺🇸 109.105.210.84

🇬🇧 87.236.176.24

🇩🇪 217.60.245.175

🇮🇶 185.84.71.168

🇺🇸 172.237.136.213

🇮🇳 124.253.183.203

🇨🇳 123.54.215.74

🇧🇬 79.124.56.202

🇮🇳 68.183.90.27

🇩🇪 31.70.67.141

🇨🇳 218.61.251.3

🇳🇱 204.76.203.222

🇧🇷 187.90.158.18

🇷🇺 178.186.164.254

🇺🇸 174.220.44.233

🇫🇷 164.68.113.99