JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

196.242.70.248

Recent Activity

Abuse confidence score ?

3% Caution

28 reports

13 reporters · latest 21 hours ago

ISP	SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58065
Domain Name	fibergrid.co.za
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 196.242.70.248

Export CSV

This IP address has been reported a total of 28 times from 13 distinct sources. 196.242.70.248 was first reported on June 17th 2025, and the most recent report was 21 hours ago. In the last 60 days, the only reporter location was: United Kingdom of Great Britain and Northern Ireland with 1 report. The only category in these recent reports was: Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Yosi	2026-10-26 23:13:29 (21 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 paissangroup	2026-05-27 04:10:46 (5 months ago)	Multiple WAF Violations	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-27 00:33:32 (5 months ago)	[Wed May 27 10:33:31.412432 2026] [security2:error] [pid 370554] [client 196.242.70.248:48117] [clie ... show more [Wed May 27 10:33:31.412432 2026] [security2:error] [pid 370554] [client 196.242.70.248:48117] [client 196.242.70.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/xmlrpc.php"] [unique_id "ahY72xarowSOKjt-EZtssQAAAAA"], referer: https://paulshipley.id.au/articles/coding-tips/html5-development/ ... show less	Web App Attack
🇩🇪 paissangroup	2026-05-25 19:24:21 (5 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 big-cloud.nl	2026-05-25 15:24:04 (5 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-05-24 06:30:10 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-22 08:13:51 (5 months ago)	Try to access /xmlrpc.php	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-21 21:31:46 (5 months ago)	[Fri May 22 07:31:45.912164 2026] [security2:error] [pid 677489] [client 196.242.70.248:33523] [clie ... show more [Fri May 22 07:31:45.912164 2026] [security2:error] [pid 677489] [client 196.242.70.248:33523] [client 196.242.70.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/xmlrpc.php"] [unique_id "ag95wZpdsQTbjLBZJ5J3FgAAAAo"], referer: https://paulshipley.id.au/articles/coding-tips/html5-development/ ... show less	Web App Attack
Anonymous	2026-05-21 13:01:00 (5 months ago)	Improper access to WordPress XML-RPC	Web App Attack
🇩🇪 LRob	2026-05-21 12:30:07 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-19 06:26:46 (5 months ago)	Try to access /xmlrpc.php	Web App Attack
🇸🇪 KIDOS	2026-05-19 05:45:52 (5 months ago)	malicious activity	Web App Attack
🇩🇪 LRob	2026-05-19 05:45:06 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-05-16 16:30:05 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-16 04:27:26 (5 months ago)	Try to access /xmlrpc.php	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.88.170.45

🇪🇨 177.234.247.204

🇩🇪 109.250.206.74

🇮🇩 103.168.44.83

🇩🇪 94.154.113.132

🇺🇸 85.208.96.208

🇬🇧 81.19.219.196

🇳🇱 77.239.124.121

🇨🇴 45.239.107.84

🇧🇷 45.231.254.60

🇬🇧 35.203.211.171

🇬🇧 35.203.211.56

🇦🇺 13.236.94.221

🇨🇳 106.75.37.123

🇮🇩 101.128.102.1

🇨🇳 101.126.144.212

🇺🇸 68.225.62.188

🇬🇧 35.203.210.237

🇨🇳 203.83.234.180

🇧🇪 198.235.24.192