JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.168.173.80

Activity Trending Down

Abuse Confidence Score

28% Elevated

11 reports

9 reporters · latest 1 week ago

ISP: Fine Group Servers Solutions LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS59651
Domain Name: finegroupservers.com
Country: 🇳🇱 Netherlands
City: Keuningswijk, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

11 from 9 distinct reporters

First reported

January 18th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 2 🇩🇪 Germany 1 🇸🇪 Sweden 1

Most common categories Bad Web Bot 4 SSH 1 Hacking 1 DDoS Attack 1 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Zandro	2026-11-02 20:00:14 UTC · (1 week ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
🇸🇪 SkyDancer	2026-10-28 00:13:53 UTC · (2 weeks ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx	Hacking Brute-Force SSH
🇨🇭 backslash	2026-10-27 04:18:03 UTC · (2 weeks ago)	block ruleset 7B8FD6B12C4E12B6F0DAE02E53C0597FBEDDF5BC	Bad Web Bot
🇩🇪 arthome.info	2026-10-26 15:05:00 UTC · (2 weeks ago)	"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPSHOT"	Bad Web Bot
🇨🇭 Origon	2026-10-14 02:19:52 UTC · (1 month ago)	http-bad-user-agent - IP: 170.168.173.80 - time="2026-10-14T04:19:52+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.173.80 (NL/59651) : 4h ban on Ip 170.168.173.80" ... show more http-bad-user-agent - IP: 170.168.173.80 - time="2026-10-14T04:19:52+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.173.80 (NL/59651) : 4h ban on Ip 170.168.173.80" module=db show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-09-16 09:29:27 UTC · (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇨🇭 backslash	2026-09-15 11:48:01 UTC · (2 months ago)	block ruleset 7B8FD6B12C4E12B6F0DAE02E53C0597FBEDDF5BC	Bad Web Bot
🇨🇦 Mediashaker	2026-09-15 01:31:48 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 170.168.173.80 (-)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-27 19:19:22 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.173.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 15:19:17.675055 2026] [security2:error] [pid 26728:tid 26728] [client 170.168.173.80:41961] ... show more (mod_security) mod_security (id:225170) triggered by 170.168.173.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 15:19:17.675055 2026] [security2:error] [pid 26728:tid 26728] [client 170.168.173.80:41961] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|specialtywebservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "specialtywebservice.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acbYNdsnguYCbqAJcW6_YgAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-21 20:45:38 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.173.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 16:45:30.930508 2026] [security2:error] [pid 5484:tid 5484] [client 170.168.173.80:65383] M ... show more (mod_security) mod_security (id:225170) triggered by 170.168.173.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 16:45:30.930508 2026] [security2:error] [pid 5484:tid 5484] [client 170.168.173.80:65383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab8DatGONav8vJVJLI_lcgAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-01-18 14:18:46 UTC · (9 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 170.168.173.80 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 179.184.85.167

🇳🇱 81.19.216.74

🇰🇷 61.76.112.4

🇸🇪 81.230.37.224

🇩🇪 69.5.169.34

🇺🇸 66.132.172.155

🇺🇸 45.159.20.86

🇳🇱 45.148.10.151

🇷🇴 2.57.121.112

🇦🇺 2400:6180:10:200::f7d2:6000

🇺🇸 172.69.17.122

🇬🇧 91.227.220.35

🇩🇪 69.5.169.68

🇧🇷 45.184.138.144

🇺🇸 206.189.188.203

🇺🇸 184.105.247.227

🇺🇸 147.185.132.211

🇻🇳 118.70.182.193

🇱🇧 94.187.19.68

🇺🇸 91.230.168.65