JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.130.55.170

170.130.55.170 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 1%: ?

ISP	servinga GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62904
Domain Name	servinga.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.130.55.170

Whois 170.130.55.170

IP Abuse Reports for 170.130.55.170:

This IP address has been reported a total of 167 times from 37 distinct sources. 170.130.55.170 was first reported on December 15th 2020, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-05 19:27:07 (3 weeks ago)	ICS Labs identified 170.130.55.170 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
Anonymous	2025-10-20 05:24:55 (8 months ago)	AndroxGh0st.Malware	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-20 02:38:23 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 22:38:19.133674 2025] [security2:error] [pid 7055:tid 7082] [client 170.130.55.170:61715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ejspizzeriahudson.com"] [uri "/.env"] [unique_id "aPWgm25A1jqUBg3I-mxa-AAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-10-19 21:05:08 (8 months ago)	Too many Status 40X (18)	Brute-Force Web App Attack
🇺🇸 mnsf	2025-10-18 20:05:04 (8 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-18 17:33:00 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 13:32:56.530379 2025] [security2:error] [pid 2008:tid 2008] [client 170.130.55.170:51819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.restaurant-napkins.com"] [uri "/.env"] [unique_id "aPPPSOvnchDmsCyr6XpS0AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-10-18 04:08:47 (8 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2025-10-18 02:07:30 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 22:07:24.968108 2025] [security2:error] [pid 14758:tid 14758] [client 170.130.55.170:52625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/.env"] [unique_id "aPL2XI1gBq6GlnrM_TgyqgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-17 23:35:34 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 19:35:30.279147 2025] [security2:error] [pid 1298:tid 1298] [client 170.130.55.170:53900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calvarycavaliers.org"] [uri "/.env"] [unique_id "aPLSwjwP9lz5GiYzZNodYgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-15 16:43:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.130.55.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 12:43:04.028400 2025] [security2:error] [pid 32300:tid 32300] [client 170.130.55.170:60088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.creartest.com"] [uri "/.env"] [unique_id "aO_PGL_tUfuqcck354qKOgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-10-15 14:05:24 (8 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇬🇧 Swiptly	2025-10-15 05:24:07 (8 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 inspectorgdgt	2025-07-04 01:27:29 (11 months ago)	"Failed password for invalid user root from 170.130.55.170"	Brute-Force
🇺🇸 inspectorgdgt	2025-07-04 01:27:29 (11 months ago)	"Failed password for invalid user"	Brute-Force
Anonymous	2025-05-01 19:55:02 (1 year ago)	Attempted brute force login to web vpn 30 time(s); last attempt for 2025.05.01 is noted in report ti ... show more Attempted brute force login to web vpn 30 time(s); last attempt for 2025.05.01 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 172.253.237.24

🇭🇰 123.58.213.20

🇩🇪 89.163.206.178

🇸🇬 84.75.148.196

🇳🇱 81.19.216.76

🇳🇱 45.148.10.183

🇳🇱 45.148.10.151

🇩🇪 43.228.157.10

🇰🇷 211.51.132.104

🇫🇷 185.177.72.23

🇨🇴 179.50.76.1

🇮🇳 120.57.125.13

🇨🇳 115.190.173.91

🇨🇳 106.75.187.128

🇲🇦 105.188.100.27

🇷🇴 92.118.39.77

🇺🇸 52.248.40.17

🇬🇧 45.82.76.138

🇺🇸 45.39.4.253

🇻🇳 42.118.247.28