JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.168.242.135

170.168.242.135 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 24%: ?

24%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.168.242.135

Whois 170.168.242.135

IP Abuse Reports for 170.168.242.135:

This IP address has been reported a total of 15 times from 12 distinct sources. 170.168.242.135 was first reported on April 12th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-02 02:14:09 (6 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| ua: wp2shell \| 2026- ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| ua: wp2shell \| 2026-09-02 02:14 UTC show less	Hacking Web App Attack
🇨🇭 backslash	2026-09-01 18:03:00 (14 hours ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇫🇷 dynamix	2026-08-03 09:38:37 (4 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 SiyCah	2026-07-09 03:00:01 (1 month ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
Anonymous	2026-06-11 16:48:57 (2 months ago)	PARMACOM WEBEXPLOIT 170.168.242.135 (170.168.242.135)	Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 17:54:55 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 13:54:50.118252 2026] [security2:error] [pid 20767:tid 20767] [client 170.168.242.135:50589] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alexetjeremy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alexetjeremy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahx16lRqxw0u48mkKRPpxwAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-05-23 11:11:00 (3 months ago)	Detected by WP fail2ban 2026-05-23T13:11:00.078787+02:00 wordpress: Authentication attempt from 170. ... show more Detected by WP fail2ban 2026-05-23T13:11:00.078787+02:00 wordpress: Authentication attempt from 170.168.242.135 show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 14:24:02 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 10:23:56.380178 2026] [security2:error] [pid 21642:tid 21642] [client 170.168.242.135:29927] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag3D_K2y9kKSvgKFXZE2XAAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-11 08:28:07 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 06:35:25 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 02:35:19.099687 2026] [security2:error] [pid 29676:tid 29676] [client 170.168.242.135:56175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sierra-broadcasting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sierra-broadcasting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afBVJ7IB7B9dTh2_TAtLQwAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-04-21 00:57:50 (4 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 nyt	2026-04-16 23:47:04 (4 months ago)	XMLRPC Attack, WP User Enumeration, WP Author Enumeration	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 10:47:48 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 06:47:42.361684 2026] [security2:error] [pid 898166:tid 898166] [client 170.168.242.135:42751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|popowich.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "popowich.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ad4bTnROOyPvGuI4yrRu7AAAACE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Jason Howell	2026-04-13 22:04:40 (4 months ago)	170.168.242.135 - - [13/Apr/2026:22:04:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 2712 "-" "Apache-Ht ... show more 170.168.242.135 - - [13/Apr/2026:22:04:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 2712 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" 170.168.242.135 - - [13/Apr/2026:22:04:21 +0000] "POST /xmlrpc.php HTTP/1.1" 200 2787 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" 170.168.242.135 - - [13/Apr/2026:22:04:21 +0000] "GET /wp-login.php HTTP/1.1" 200 3987 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 170.168.242.135 - - [13/Apr/2026:22:04:38 +0000] "POST /xmlrpc.php HTTP/1.1" 200 2713 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" 170.168.242.135 - - [13/Apr/2026:22:04:39 +0000] "POST /xmlrpc.php HTTP/1.1" 200 2788 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" ... show less	Web App Attack
🇩🇪 kjaerulff	2026-04-12 19:13:36 (4 months ago)	Failed Wordpress login using wp-login.php	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 209.38.167.114

🇧🇷 177.159.150.111

🇫🇷 91.196.152.165

🇺🇸 2604:a880:400:d1:0:4:e8d0:4001

🇳🇴 185.253.97.108

🇺🇸 185.98.168.102

🇦🇲 185.57.68.210

🇺🇸 172.59.116.22

🇵🇰 153.117.127.23

🇺🇸 136.144.35.106

🇺🇸 2604:a880:800:14:0:3:7361:d000

🇨🇳 202.46.62.13

🇸🇬 165.245.181.217

🇺🇸 162.216.150.167

🇦🇺 159.196.141.86

🇺🇸 154.83.197.98

🇺🇸 147.185.132.38

🇺🇸 146.70.202.147

🇩🇪 91.107.158.47

🇺🇸 73.1.235.24