JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.242.234.35

159.242.234.35 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 0%: ?

ISP	PoP Indianapolis, IN, USA
Usage Type	Unknown
ASN	Unknown
Domain Name	gendigital.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.242.234.35

Whois 159.242.234.35

IP Abuse Reports for 159.242.234.35:

This IP address has been reported a total of 64 times from 44 distinct sources. 159.242.234.35 was first reported on November 23rd 2020, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-24 03:10:05 (11 months ago)	159.242.234.35 (DE/Germany/-)	Brute-Force
Anonymous	2025-09-22 19:37:43 (11 months ago)	Ports: 20,21,22,25,2525,53,80,110,143,443,465,587,993,995,2082,2083,2095,2096; Direction: 0; Trigger ... show more Ports: 20,21,22,25,2525,53,80,110,143,443,465,587,993,995,2082,2083,2095,2096; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇫🇷 Dario Luparello	2025-08-18 14:22:02 (1 year ago)	Rule : RDP UserAccount : administrator S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : administrator S-1-0-0 - - 0x0 S-1-0-0 administrator - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 159.242.234.35 0 show less	Brute-Force SSH
🇨🇭 TOCE	2025-08-02 06:24:16 (1 year ago)	8 hits seen on 2025-08-02, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
Anonymous	2025-07-24 20:50:13 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇷🇴 vpnromania.ro	2024-12-11 12:52:00 (1 year ago)	lfd: (XMLRPC) WP XMLPRC Attack 159.242.234.35 (DE/Germany/-): 10 in the last 3600 secs - Wed Dec 11 ... show more lfd: (XMLRPC) WP XMLPRC Attack 159.242.234.35 (DE/Germany/-): 10 in the last 3600 secs - Wed Dec 11 13:05:01 2024 show less	DDoS Attack Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2024-12-08 20:52:50 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 Study Bitcoin 🤗	2024-11-11 18:00:54 (1 year ago)	4 port probes: 2x tcp/443 (https), 2x tcp/80 (http) [srv125,srv126,srv124]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇿 0x44	2024-11-10 06:20:50 (1 year ago)	159.242.234.35 [10/Nov/2024 * Port Scan]	Port Scan
🇺🇸 TPI-Abuse	2024-10-07 07:14:37 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 03:14:32.803503 2024] [security2:error] [pid 20982:tid 20982] [client 159.242.234.35:19508] [client 159.242.234.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 159.242.234.35 (+1 hits since last alert)\|guitarwisdom.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guitarwisdom.com"] [uri "/xmlrpc.php"] [unique_id "ZwOKWHMK0J192hvj_kzxNgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-14 02:07:50 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 13 22:07:45.767686 2024] [security2:error] [pid 8657:tid 8657] [client 159.242.234.35:3421] [client 159.242.234.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|delawaremade.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "delawaremade.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZuTv8ZTPqAndVU45805XgAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-14 02:06:08 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇩🇪 futuremakers.gr	2024-07-12 01:39:32 (2 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 159.242.234.35 (DE/Germa ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 159.242.234.35 (DE/Germany/-): (CF_ENABLE) show less	Port Scan
🇺🇸 TPI-Abuse	2024-07-08 12:13:35 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 159.242.234.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 08 08:13:28.389064 2024] [security2:error] [pid 26933] [client 159.242.234.35:26109] [client 159.242.234.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.whichmoody.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.whichmoody.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZovX6OLCDQz3pIXjvh3bUgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-07-08 11:28:14 (2 years ago)	13.706 requests to */xmlrpc.php	Brute-Force Bad Web Bot

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.150

🇳🇱 185.224.128.16

🇳🇱 160.119.76.64

🇺🇸 143.110.225.244

🇩🇪 139.162.181.116

🇮🇩 103.121.20.18

🇺🇸 12.138.125.82

🇺🇦 188.190.94.93

🇧🇷 177.72.87.7

🇺🇸 162.244.38.38

🇫🇮 147.185.133.162

🇮🇩 103.31.250.251

🇺🇸 98.184.76.3

🇹🇷 85.107.76.147

🇱🇹 62.60.130.242

🇳🇱 45.148.10.151

🇹🇼 34.80.9.150

🇸🇬 8.222.160.19

🇦🇷 201.220.21.176

🇭🇰 180.219.155.152