JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.242.228.238

159.242.228.238

Neutral Activity

18 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

PoP Indianapolis, IN, USA

Usage Type

Data Center/Web Hosting/Transit

ASN

AS60068

Domain Name

gendigital.com

Country

🇫🇷 France

City

Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.242.228.238 has been reported 18 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.242.228.238:

This IP address has been reported a total of 18 times from 8 distinct sources. 159.242.228.238 was first reported on January 22nd 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mind5t0rm	2025-06-18 21:07:48 (1 year ago)	(XMLRPC) WP XMLPRC Attack 159.242.228.238 (FR/France/-): 3 in the last 3600 secs; Ports: ; Directio ... show more (XMLRPC) WP XMLPRC Attack 159.242.228.238 (FR/France/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 159.242.228.238 - - [19/Jun/2025:04:06:41 +0700] "POST /xmlrpc.php HTTP/1.1" 200 5383 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 159.242.228.238 - - [19/Jun/2025:04:07:08 +0700] "POST /xmlrpc.php HTTP/1.1" 200 244 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 159.242.228.238 - - [19/Jun/2025:04:07:47 +0700] "POST /xmlrpc.php HTTP/1.1" 200 152 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" show less	Port Scan
Anonymous	2025-04-15 09:53:53 (1 year ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2025-04-02 14:15:06 (1 year ago)	BruteForce IMAP/POP3	Brute-Force
Anonymous	2025-02-15 14:04:15 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇷 hostseries	2024-12-21 20:37:02 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 hostseries	2024-10-21 15:55:23 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 TPI-Abuse	2024-09-18 20:34:56 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 18 16:34:50.549859 2024] [security2:error] [pid 1247:tid 1247] [client 159.242.228.238:3388] [client 159.242.228.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 159.242.228.238 (+1 hits since last alert)\|realclean.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "realclean.net"] [uri "/xmlrpc.php"] [unique_id "Zus5apDrAzYmt7KhZKr47gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-01 11:51:41 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 hostseries	2024-08-18 11:48:01 (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2024-07-30 02:14:42 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-07-25 20:25:50 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 25 16:25:46.464958 2024] [security2:error] [pid 14114:tid 14114] [client 159.242.228.238:9851] [client 159.242.228.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rannals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rannals.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZqK0yrrrfSiVjhH-hhPaKwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-14 01:02:18 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇧🇷 hostseries	2023-12-20 11:35:48 (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 TPI-Abuse	2023-11-18 22:21:00 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 159.242.228.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 18 17:20:52.771275 2023] [security2:error] [pid 23870] [client 159.242.228.238:7195] [client 159.242.228.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robertlundquist.com"] [uri "/.git/config"] [unique_id "ZVk4xPGWz9Ir13CMURoJnAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2023-11-18 22:10:03 (2 years ago)	block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6	Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇯🇵 221.241.56.90

🇺🇸 192.161.49.2

🇺🇸 147.185.132.75

🇮🇳 122.168.194.41

🇮🇳 122.166.49.42

🇺🇸 64.23.217.180

🇺🇸 23.23.212.212

🇺🇸 195.184.76.2

🇺🇸 154.217.253.190

🇨🇳 121.227.152.171

🇰🇷 121.184.144.232

🇨🇳 120.52.18.141

🇭🇰 118.193.40.61

🇺🇸 71.6.232.29

🇺🇸 66.132.195.78

🇺🇸 44.220.188.152

🇻🇪 38.74.245.90

🇭🇰 199.45.155.48

🇧🇷 177.221.205.218