JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.242.228.114

159.242.228.114 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 0%: ?

ISP	PoP Indianapolis, IN, USA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60068
Domain Name	gendigital.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.242.228.114

Whois 159.242.228.114

IP Abuse Reports for 159.242.228.114:

This IP address has been reported a total of 41 times from 10 distinct sources. 159.242.228.114 was first reported on July 12th 2022, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 hostseries	2025-10-08 17:57:18 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇧🇷 hostseries	2024-12-19 17:46:30 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇹🇷 rtbh.com.tr	2024-10-29 20:53:40 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2024-09-20 21:09:08 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 20 17:09:05.061347 2024] [security2:error] [pid 28887:tid 28887] [client 159.242.228.114:4996] [client 159.242.228.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.tatethegreat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tatethegreat.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zu3kcT_7F81wiSM7h6oZ_AAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-18 06:46:53 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 18 02:46:50.798603 2024] [security2:error] [pid 20792:tid 20792] [client 159.242.228.114:6432] [client 159.242.228.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 159.242.228.114 (+1 hits since last alert)\|peterjohnsonauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "peterjohnsonauthor.com"] [uri "/xmlrpc.php"] [unique_id "Zup3WiCvwulSSv5Ir0cYxwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 hostseries	2024-08-18 09:26:19 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇨🇦 Largnet SOC	2024-08-04 00:46:33 (1 year ago)	159.242.228.114 triggered Icarus honeypot on port 3389. Check us out on github.	Port Scan Hacking
🇸🇪 webbfabriken	2024-08-04 00:35:46 (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇹🇼 kk_it_man	2024-08-04 00:10:06 (1 year ago)	honey catch	Port Scan
Anonymous	2024-08-03 23:03:21 (1 year ago)	Trying ports that it shouldn't be.	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2023-12-12 02:04:30 (2 years ago)	(mod_security) mod_security (id:240335) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 159.242.228.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 21:04:26.997685 2023] [security2:error] [pid 19535] [client 159.242.228.114:1581] [client 159.242.228.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 159.242.228.114 (+1 hits since last alert)\|1031planning.thestarfinancialgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "1031planning.thestarfinancialgroup.com"] [uri "/xmlrpc.php"] [unique_id "ZXe_qpCmw_JWfgYR51ndWgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 BotReportFR	2023-11-27 12:55:08 (2 years ago)	spam	Web Spam
🇨🇭 unifr	2022-07-17 01:42:25 (3 years ago)	Unauthorized IMAP connection attempt	Brute-Force
🇨🇦 Skynet	2022-07-13 14:28:45 (3 years ago)	Honeypot IPBan.com 2022-07-13 14:28:42 Login failure: 159.242.228.114 RDP,	Brute-Force
🇨🇦 Skynet	2022-07-13 13:53:14 (3 years ago)	Honeypot IPBan.com 2022-07-13 13:53:11 Login failure: 159.242.228.114 RDP,	Brute-Force

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.233.118.22

🇺🇸 157.230.82.57

🇨🇳 139.227.188.247

🇭🇰 199.45.154.180

🇷🇴 92.118.39.71

🇭🇰 65.52.171.87

🇺🇸 195.184.76.100

🇧🇷 187.36.219.26

🇦🇷 181.23.32.135

🇧🇷 177.11.94.190

🇳🇱 172.235.173.150

🇨🇦 144.217.135.243

🇺🇸 137.184.88.79

🇹🇷 131.222.246.85

🇨🇳 112.28.153.193

🇺🇸 104.168.28.15

🇳🇱 45.198.224.120

🇹🇼 35.185.141.157

🇺🇸 34.181.204.108

🇺🇸 34.171.77.47