JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.236.148.242

172.236.148.242 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.236.148.242

Whois 172.236.148.242

IP Abuse Reports for 172.236.148.242:

This IP address has been reported a total of 27 times from 25 distinct sources. 172.236.148.242 was first reported on July 23rd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-27 06:00:00 (4 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-07-26 16:23:53 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 mail.avx.gr	2026-07-26 15:47:39 (5 days ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 172.236.148.242 - - [26/Jul/2026:18:47:38 +0300] " ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 172.236.148.242 - - [26/Jul/2026:18:47:38 +0300] "GET /wp-login.php HTTP/1.1" 403 1113 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-07-26 04:21:58 (5 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-07-26 04:05:16 (5 days ago)	172.236.148.242 - - [26/Jul/2026:07:05:15 +0300] "GET /wp-login.php HTTP/1.1" 404 4749 "-" "Mozilla/ ... show more 172.236.148.242 - - [26/Jul/2026:07:05:15 +0300] "GET /wp-login.php HTTP/1.1" 404 4749 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" ... show less	Web App Attack
🇪🇸 alferez	2026-07-26 02:58:51 (5 days ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-07-25 22:01:42 (5 days ago)	172.236.148.242 - - [26/Jul/2026:01:01:19 +0300] "GET /wp-login.php HTTP/1.1" 404 4763 "" "Mozilla/5 ... show more 172.236.148.242 - - [26/Jul/2026:01:01:19 +0300] "GET /wp-login.php HTTP/1.1" 404 4763 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 172.236.148.242 - - [26/Jul/2026:01:01:41 +0300] "GET /wp-login.php HTTP/1.1" 301 665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 Marc	2026-07-25 19:41:52 (5 days ago)	172.236.148.242 - - [25/Jul/2026:21:40:38 +0200] "GET /wp-login.php HTTP/1.1" 200 7877 "https://word ... show more 172.236.148.242 - - [25/Jul/2026:21:40:38 +0200] "GET /wp-login.php HTTP/1.1" 200 7877 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 172.236.148.242 - - [25/Jul/2026:21:41:18 +0200] "POST /wp-login.php HTTP/1.1" 200 8057 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 172.236.148.242 - - [25/Jul/2026:21:41:31 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.als-arnsberg.de%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5924 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 172.236.148.242 - - [25/Jul/2026:21:41:36 +0200] "POST /wp-login.php HTTP/1.1" 200 4033 "https://www.als-arnsberg.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.236.148.242 - - [25/Jul/2026 show less	Brute-Force Web App Attack
🇺🇸 mnsf	2026-07-25 19:05:06 (5 days ago)	Login Too Frequent (14)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 18:20:17 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 172.236.148.242 (172-236-148-242.ip.linodeuserc ... show more (mod_security) mod_security (id:225170) triggered by 172.236.148.242 (172-236-148-242.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 14:20:12.711977 2026] [security2:error] [pid 3171202:tid 3171202] [client 172.236.148.242:54217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.n4fh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amT-XJU-UBhW0KmwZ6_T_AAAABQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-07-25 18:04:19 (5 days ago)	Failed attempt detected by Fail2Ban in plesk-wordpress jail	Web App Attack
🇮🇩 Burayot	2026-07-25 17:25:42 (5 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.236.148.242 (SG/Singapore/172-2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.236.148.242 (SG/Singapore/172-236-148-242.ip.linodeusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-25 17:13:43 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 Campus France	2026-07-25 16:23:29 (6 days ago)	172.236.148.242 - - [25/Jul/2026:18:20:27 +0200] "POST /wp-login.php HTTP/1.1" 200 15503 "https://ww ... show more 172.236.148.242 - - [25/Jul/2026:18:20:27 +0200] "POST /wp-login.php HTTP/1.1" 200 15503 "https://www.radiocampus.fr/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.236.148.242 - - [25/Jul/2026:18:21:25 +0200] "POST /wp-login.php HTTP/1.1" 200 19702 "https://www.radiocampus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.236.148.242 - - [25/Jul/2026:18:22:31 +0200] "POST /wp-login.php HTTP/1.1" 200 19704 "https://www.radiocampus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.236.148.242 - - [25/Jul/2026:18:23:07 +0200] "POST /wp-login.php HTTP/1.1" 200 15503 "https://www.radiocampus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 172.236.148.24 ... show less	Brute-Force Web App Attack
Anonymous	2026-07-25 16:17:02 (6 days ago)	Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/1.1, GET /wp-login.php HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 179.60.149.117

🇺🇸 154.83.197.81

🇺🇸 147.182.187.65

🇲🇦 105.77.196.195

🇨🇳 54.223.139.243

🇺🇸 45.79.92.218

🇺🇸 35.226.12.39

🇻🇳 14.182.131.242

🇧🇷 2804:7f0:475:45ff:f402:adde:93f6:699

🇮🇷 213.176.26.114

🇿🇦 197.184.179.73

🇳🇱 195.178.110.223

🇧🇬 185.255.212.234

🇮🇳 182.18.139.237

🇮🇩 179.65.209.211

🇦🇺 170.64.143.168

🇺🇸 167.71.175.236

🇺🇾 167.60.148.249

🇫🇮 147.185.133.190

🇺🇸 145.223.56.147