JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.239.55.198

Activity Trending Down

Abuse confidence score ?

92% Critical

26 reports

26 reporters · latest 1 week ago

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-239-55-198.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 172.239.55.198

Export CSV

This IP address has been reported a total of 26 times from 26 distinct sources. 172.239.55.198 was first reported on October 1st 2026, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: France with 5 reports; Netherlands with 4 reports; United States of America with 4 reports. The most common categories in these recent reports were: Web App Attack 21 times; Bad Web Bot 7 times; Brute-Force 5 times; Hacking 5 times; Port Scan 5 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 EvilTurkey	2026-10-02 12:21:55 (1 week ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇳🇱 oisecnet	2026-10-01 21:01:49 (1 week ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-10-01. 35 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-10-01. 35 requests from this IP. show less	Port Scan Hacking Web App Attack
🇳🇱 Alt255	2026-10-01 16:30:46 (1 week ago)	[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 17 ... show more [ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 172.239.55.198 - - [01/Oct/2026:18:30:45 +0200] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 404 2101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-10-01 16:05:43 (1 week ago)	Login Too Frequent (11) Too many Status 50X (12) Request Overload (142)	Brute-Force Web App Attack
Anonymous	2026-10-01 16:05:39 (1 week ago)	Blocked: Reason='Suspicious traffic score=90 (review-based detection)'; Requests=36	Hacking
🇳🇱 SchorelWeb	2026-10-01 15:52:36 (1 week ago)	Cluster member (Omitted) (FR/France/-) said, TEMPDENY 172.239.55.198, Reason:[(Suspicious404) Suspic ... show more Cluster member (Omitted) (FR/France/-) said, TEMPDENY 172.239.55.198, Reason:[(Suspicious404) Suspicious activity detected 172.239.55.198 (US/United States/172-239-55-198.ip.linodeusercontent.com): 10 in the last 3600 secs] show less	Brute-Force SSH
🇺🇸 Sonoflet	2026-10-01 15:45:14 (1 week ago)	CrowdSec detection \| scenario: http-admin-interface-probing	Port Scan Web App Attack
🇨🇭 zynex	2026-10-01 15:20:00 (1 week ago)	URL Probing: /wp-login.php	Web App Attack
🇹🇼 tyebstx	2026-10-01 15:06:26 (1 week ago)	Wazuh Alert Evidence: 172.239.55.198 - - [01/Oct/2026:15:06:23 +0000] "GET / HTTP/2.0" 444 0 "-" "Mo ... show more Wazuh Alert Evidence: 172.239.55.198 - - [01/Oct/2026:15:06:23 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" show less	Web App Attack
Anonymous	2026-10-01 15:02:49 (1 week ago)	172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/ HTTP/1.1" 404 196 "-" "Mozilla/ ... show more 172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.239.55.198 - - [01/Oct/2026:23:02:49 +0800] "GET /administrator/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ... show less	Bad Web Bot Web App Attack
🇺🇸 FreeMyIP	2026-10-01 14:49:37 (1 week ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
Anonymous	2026-10-01 14:46:34 (1 week ago)	apache vulnerability scan	Web App Attack
🇪🇸 pipeline.es	2026-10-01 14:37:14 (1 week ago)	Web scanning / probing for vulnerable paths \| URL: /wp-admin/ \| Evidence: www.viajesdivertour.es 172 ... show more Web scanning / probing for vulnerable paths \| URL: /wp-admin/ \| Evidence: www.viajesdivertour.es 172.239.55.198 - - [01/Oct/2026:16:35:15 +0200] \"HEAD /wp-admin/ HTTP/1.1\" 404 - \"http://www.viajesdivertour.es/wp-admin/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: Akamai Connected Cloud \| Country: US show less	Port Scan Web App Attack
🇧🇬 Stoyko Stoykov	2026-10-01 14:36:59 (1 week ago)	172.239.55.198 - - [01/Oct/2026:17:36:59 +0300] "HEAD /wp-admin/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (W ... show more 172.239.55.198 - - [01/Oct/2026:17:36:59 +0300] "HEAD /wp-admin/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇸🇪 Esko	2026-10-01 14:34:50 (1 week ago)	172.239.55.198 - - [01/Oct/2026:14:34:50 +0000] "HEAD /wp-login.php HTTP/1.1" 488 0 "-" "Mozilla/5.0 ... show more 172.239.55.198 - - [01/Oct/2026:14:34:50 +0000] "HEAD /wp-login.php HTTP/1.1" 488 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 185.137.164.83

🇺🇸 147.185.132.85

🇷🇺 81.22.51.64

🇺🇸 43.153.20.23

🇦🇷 201.176.70.49

🇫🇷 194.163.134.151

🇳🇱 185.242.226.72

🇮🇳 141.148.207.84

🇳🇱 109.160.32.127

🇷🇺 95.27.50.100

🇷🇴 92.118.39.77

🇫🇷 85.217.140.47

🇨🇦 45.198.224.20

🇰🇷 220.84.212.67

🇧🇷 201.63.223.141

🇷🇺 185.146.212.59

🇧🇷 177.72.229.122

🇺🇸 165.227.84.14

🇿🇦 102.209.118.96

🇷🇺 91.240.113.136