JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.252.238.236

216.252.238.236 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 69%: ?

69%

ISP	THC Servers Global, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40676
Domain Name	thcservers.com
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.252.238.236

Whois 216.252.238.236

IP Abuse Reports for 216.252.238.236:

This IP address has been reported a total of 17 times from 12 distinct sources. 216.252.238.236 was first reported on August 24th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-31 07:47:47 (20 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-08-31 07:47 UTC show less	Hacking Web App Attack
🇫🇷 mrcrassi	2026-08-31 04:12:48 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 Mugen	2026-08-30 22:29:28 (1 day ago)	Unauthorized VPN login attempts	Brute-Force
🇫🇮 6kilowatti	2026-08-30 19:26:43 (1 day ago)	216.252.238.236 - - [30/Aug/2026:22:26:43 +0300] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5. ... show more 216.252.238.236 - - [30/Aug/2026:22:26:43 +0300] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.252.238.236 - [30/Aug/2026:22:26:43 +0300] "GET /wp-login.php HTTP/1.1" 404 8192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-30 18:38:43 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇲🇽 octageeks.com	2026-08-30 04:19:55 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇹🇷 eryilmaz	2026-08-30 02:00:37 (2 days ago)	Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. / ... show more Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /wp-login.php show less	Web App Attack Hacking
🇮🇹 CoreTech srl	2026-08-29 14:08:57 (2 days ago)	cloudlinux2 fail2ban: 2026-08-29 16:04:31,738 fail2ban.filter [1478]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-29 16:04:31,738 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 154.131.41.136 - 2026-08-29 16:04:31cloudlinux2 fail2ban: 2026-08-29 16:04:47,587 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 35.241.98.47cloudlinux2 fail2ban: 2026-08-29 16:06:36,530 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 154.131.41.136 - 2026-08-29 16:06:36cloudlinux2 fail2ban: 2026-08-29 16:06:43,757 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.129.116.88cloudlinux2 fail2ban: 2026-08-29 16:06:57,786 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Ban 154.131.41.136cloudlinux2 fail2ban: 2026-08-29 16:06:57,418 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 154.131.41.136 - 2026-08-29 16:06:57cloudlinux2 fail2ban: 2026-08-29 16:06:57,792 fail2ban.filter [1478]: INFO [recidive] Found 154.131.41.136 - 2026-08-29 16:06:57cloudlinux2 fail2ban: 2026-08-29 16:07:35,044 fail2ban.actions show less	Web App Attack
🇩🇪 LRob	2026-08-29 11:28:22 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-08-29 11:28 UTC show less	Hacking Web App Attack
Anonymous	2026-08-29 03:59:45 (3 days ago)	Web application attack detected.	Web App Attack
🇨🇿 Countryman	2026-08-29 00:10:01 (3 days ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇮🇹 CoreTech srl	2026-08-28 14:48:56 (3 days ago)	cloudlinux2 fail2ban: 2026-08-28 16:44:35,531 fail2ban.filter [1478]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-28 16:44:35,531 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 157.66.56.165 - 2026-08-28 16:44:35cloudlinux2 fail2ban: 2026-08-28 16:45:46,698 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 216.252.238.236 - 2026-08-28 16:45:46cloudlinux2 fail2ban: 2026-08-28 16:46:22,888 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.86.69.94 - 2026-08-28 16:46:22cloudlinux2 fail2ban: 2026-08-28 16:46:22,930 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.86.69.94 - 2026-08-28 16:46:22cloudlinux2 fail2ban: 2026-08-28 16:46:22,869 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.86.69.94 - 2026-08-28 16:46:22cloudlinux2 fail2ban: 2026-08-28 16:46:22,912 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.86.69.94 - 2026-08-28 16:46:22cloudlinux2 fail2ban: 2026-08-28 16:46:22,904 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.86.69.94 - 2026-08-28 16:46:22cloud show less	Web App Attack
🇨🇿 Countryman	2026-08-26 06:58:51 (5 days ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
Anonymous	2026-08-25 08:36:29 (6 days ago)	This IP was involved in an brute force and password spray attack on 2026/08/25 03:32:11	Port Scan Brute-Force Exploited Host Web App Attack
🇫🇮 tjs	2026-08-25 04:55:00 (6 days ago)	VPN authentication rejected	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.4

🇺🇦 193.194.126.242

🇳🇱 185.93.89.21

🇯🇵 182.171.90.17

🇺🇸 162.216.150.243

🇩🇪 138.199.19.178

🇫🇷 85.217.140.49

🇫🇷 85.217.140.24

🇺🇸 34.82.230.33

🇺🇸 20.15.167.28

🇺🇸 18.218.118.203

🇯🇵 219.121.63.81

🇺🇸 205.210.31.60

🇹🇼 198.235.24.17

🇺🇸 195.184.76.66

🇺🇸 192.178.142.95

🇺🇬 154.72.195.50

🇺🇸 136.66.184.57

🇨🇳 119.147.123.252

🇭🇰 114.111.53.214