JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.147.242.136

212.147.242.136 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

ISP	UpCloud Cloud Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202053
Domain Name	upcloud.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.147.242.136

Whois 212.147.242.136

IP Abuse Reports for 212.147.242.136:

This IP address has been reported a total of 23 times from 23 distinct sources. 212.147.242.136 was first reported on July 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-03 02:23:08 (1 hour ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇺 Andrey Ganichvili	2026-07-02 09:50:07 (18 hours ago)	Unauthorized sitemap access (/sitemap.xml) from 212.147.242.136	Web App Attack
🇩🇪 SwinT	2026-07-01 23:00:05 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇳🇱 SysAdmin Dylan	2026-07-01 21:46:47 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 212.147.242.136 (FI/Finland/-): 10 in the last ... show more (mod_security) mod_security (id:210492) triggered by 212.147.242.136 (FI/Finland/-): 10 in the last 3600 secs show less	Brute-Force
🇩🇪 Hazzard	2026-07-01 20:43:03 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
Anonymous	2026-07-01 20:42:24 (1 day ago)	[Wed Jul 01 20:42:20.363481 2026] [php:error] [pid 3359054] [client 212.147.242.136:51422] script '/ ... show more [Wed Jul 01 20:42:20.363481 2026] [php:error] [pid 3359054] [client 212.147.242.136:51422] script '/var/www/vhosts/mcdermit.org/BOISD/wp-config.php' not found or unable to stat [Wed Jul 01 20:42:20.398388 2026] [php:error] [pid 3358233] [client 212.147.242.136:51456] script '/var/www/vhosts/mcdermit.org/BOISD/configuration.php' not found or unable to stat [Wed Jul 01 20:42:20.634241 2026] [php:error] [pid 3358696] [client 212.147.242.136:51320] script '/var/www/vhosts/mcdermit.org/BOISD/config.php' not found or unable to stat [Wed Jul 01 20:42:23.783749 2026] [php:error] [pid 3359062] [client 212.147.242.136:51402] script '/var/www/vhosts/mcdermit.org/BOISD/p.php' not found or unable to stat [Wed Jul 01 20:42:23.910785 2026] [php:error] [pid 3359062] [client 212.147.242.136:51402] script '/var/www/vhosts/mcdermit.org/BOISD/settings.php' not found or unable to stat ... show less	Brute-Force
🇫🇷 dwmp	2026-07-01 20:26:25 (1 day ago)	[01/Jul/2026:22:26:23.502645 +0200] akV378M@4pOe-5F-uMQ4AQAAAQ0 212.147.242.136 57082 38.242.227.117 ... show more [01/Jul/2026:22:26:23.502645 +0200] akV378M@4pOe-5F-uMQ4AQAAAQ0 212.147.242.136 57082 38.242.227.117 7080 [01/Jul/2026:22:26:23.502870 +0200] akV377xp-dkDKIUs8mLVDgAAAMU 212.147.242.136 57058 38.242.227.117 7080 [01/Jul/2026:22:26:23.506727 +0200] akV374Ra9POGs-4yJwfREwAAAUI 212.147.242.136 57046 38.242.227.117 7080 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-01 18:11:04 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 212.147.242.136 (FI/Finland/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 212.147.242.136 (FI/Finland/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-01 14:11:00 dovecot_plain authenticator failed for H=(localhost) [212.147.242.136]:56572: 535 Incorrect authentication data ([email protected]) 2026-07-01 14:11:00 dovecot_plain authenticator failed for H=(localhost) [212.147.242.136]:56608: 535 Incorrect authentication data ([email protected]) 2026-07-01 14:11:00 dovecot_plain authenticator failed for H=(localhost) [212.147.242.136]:56600: 535 Incorrect authentication data ([email protected]) 2026-07-01 14:11:00 dovecot_plain authenticator failed for H=(localhost) [212.147.242.136]:56586: 535 Incorrect authentication data ([email protected]) 2026-07-01 14:11:03 dovecot_login authenticator failed for H=(localhost) [212.147.242.136]:37404: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇳🇱 lns.bz	2026-07-01 18:07:10 (1 day ago)	Too many 404 requests [DOOZ]	Web App Attack
🇮🇹 mgarofano80	2026-07-01 17:41:23 (1 day ago)		Brute-Force Web App Attack
🇧🇪 voormedia	2026-07-01 17:14:36 (1 day ago)	Accessed trap at '/.env'	Web App Attack
🇩🇪 Dominik Lysiak	2026-07-01 16:33:56 (1 day ago)	212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /application.yml HTTP/1.1" 444 0 "-" "Mozilla/ ... show more 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /application.yml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /server/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /env.txt HTTP/1.1" 444 0 "-" "Wget/1.21.4" 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /.aws/credentials HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /config/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 212.147.242.136 - - [01/Jul/2026:18:33:55 +0200] "GET /.env.development.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ... show less	Web App Attack
🇩🇪 bescared	2026-07-01 15:31:47 (1 day ago)	F2B - Malicious activity detected. URL Probing. -c23856ef-	Hacking Bad Web Bot Web App Attack
🇺🇸 KitsuneTech	2026-07-01 15:13:59 (1 day ago)	212.147.242.136 - - [01/Jul/2026:10:13:58 -0500] "GET /wp-config.php.bak HTTP/1.1" 301 248 "-" "pyth ... show more 212.147.242.136 - - [01/Jul/2026:10:13:58 -0500] "GET /wp-config.php.bak HTTP/1.1" 301 248 "-" "python-requests/2.31.0" ... show less	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-01 14:14:36 (1 day ago)	212.147.242.136 - - [01/Jul/2026:15:14:33 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Wind ... show more 212.147.242.136 - - [01/Jul/2026:15:14:33 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 2026/07/01 15:14:34 [error] 1094874#1094874: 2594469 access forbidden by rule, client: 212.147.242.136, server: [redacted], request: "GET /app/.env HTTP/1.1", host: "[redacted]" 2026/07/01 15:14:34 [error] 1094875#1094875: 2594489 access forbidden by rule, client: 212.147.242.136, server: [redacted], request: "GET /api/.env HTTP/1.1", host: "[redacted]" show less	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.232.5.164

🇳🇱 185.226.197.99

🇨🇦 99.247.245.53

🇬🇧 194.164.91.60

🇨🇴 181.237.76.229

🇺🇦 178.212.96.77

🇨🇳 118.249.191.163

🇮🇩 103.97.101.25

🇺🇸 88.216.73.101

🇩🇪 69.5.169.176

🇪🇨 191.99.67.138

🇻🇪 181.191.227.148

🇭🇳 181.115.59.221

🇮🇩 158.140.182.5

🇲🇴 125.31.4.70

🇳🇱 92.63.197.5

🇺🇸 77.91.118.18

🇰🇷 61.72.55.130

🇲🇽 189.203.29.245

🇲🇽 187.140.176.44