JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.242.234.55

159.242.234.55 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 0%: ?

ISP	PoP Indianapolis, IN, USA
Usage Type	Unknown
ASN	Unknown
Domain Name	gendigital.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.242.234.55

Whois 159.242.234.55

IP Abuse Reports for 159.242.234.55:

This IP address has been reported a total of 83 times from 55 distinct sources. 159.242.234.55 was first reported on December 10th 2020, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-10-23 20:09:32 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-22 20:09:31 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇹 CTK	2025-08-19 17:55:39 (1 year ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇨🇭 TOCE	2025-08-19 17:55:01 (1 year ago)	17 hits seen on 2025-08-19, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇨🇦 smick	2025-08-19 11:05:12 (1 year ago)	RDP Brute-force.	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-01 20:08:00 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-01 00:07:58 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-31 20:07:59 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-07-24 18:52:25 (1 year ago)	[redacted] 159.242.234.55 - - [24/Jul/2025:20:52:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 159.242.234.55 - - [24/Jul/2025:20:52:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:20:52:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:20:52:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:20:52:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:20:52:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" ... show less	Hacking Web App Attack
Anonymous	2025-07-24 08:02:51 (1 year ago)	[redacted] 159.242.234.55 - - [24/Jul/2025:10:02:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" ... show more [redacted] 159.242.234.55 - - [24/Jul/2025:10:02:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:10:02:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:10:02:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2025:10:02:48 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 159.242.234.55 - - [24/Jul/2 ... show less	Hacking Web App Attack
🇧🇪 cmbplf	2025-07-24 07:20:20 (1 year ago)	5.582 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-24 07:04:10 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 159.242.234.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 159.242.234.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 24 03:04:03.634604 2025] [security2:error] [pid 4611:tid 4611] [client 159.242.234.55:22777] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.peacecampus.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peacecampus.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIHa47J4d3nPpeyXpiDLRQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-24 06:22:39 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 stalker.to	2025-05-23 10:05:09 (1 year ago)	Datacenter Proxy	Web Spam
🇫🇷 Dario Luparello	2025-05-05 15:04:04 (1 year ago)	Rule : RDP UserAccount : ADMINISTRATOR S-1-0-0 - - 0x0 S-1-0-0 ADMINISTRATOR - 0xc000006d %#13 0xc0 ... show more Rule : RDP UserAccount : ADMINISTRATOR S-1-0-0 - - 0x0 S-1-0-0 ADMINISTRATOR - 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM - - - 0 0x0 - 159.242.234.55 0 show less	Brute-Force SSH

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.9.49

🇬🇧 193.163.125.241

🇺🇸 192.155.89.166

🇫🇷 85.217.140.52

🇲🇾 49.125.201.87

🇧🇩 27.147.157.138

🇮🇳 202.53.4.33

🇳🇱 193.176.31.212

🇦🇷 190.104.45.83

🇺🇸 100.29.192.49

🇭🇰 69.165.75.192

🇮🇹 5.89.112.21

🇧🇷 200.159.177.30

🇬🇧 193.176.29.6

🇳🇱 185.226.197.42

🇨🇳 150.242.97.36

🇲🇽 148.204.77.51

🇺🇸 147.185.132.31

🇺🇸 138.68.53.28

🇸🇬 129.226.193.111