JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.168.242.200

170.168.242.200 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 20%: ?

20%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.168.242.200

Whois 170.168.242.200

IP Abuse Reports for 170.168.242.200:

This IP address has been reported a total of 11 times from 8 distinct sources. 170.168.242.200 was first reported on December 23rd 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-03 22:28:22 (1 hour ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 22:27:53 (1 day ago)		Brute-Force Web App Attack
🇬🇧 blik2108	2026-06-02 14:29:28 (1 month ago)	blog.blacknellsatsea.co.uk:80 170.168.242.200 - - [02/Jun/2026:15:29:26 +0100] "GET /wp-login.php HT ... show more blog.blacknellsatsea.co.uk:80 170.168.242.200 - - [02/Jun/2026:15:29:26 +0100] "GET /wp-login.php HTTP/1.1" 301 634 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10" blog.blacknellsatsea.co.uk:443 170.168.242.200 - - [02/Jun/2026:15:29:26 +0100] "GET /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10" blog.blacknellsatsea.co.uk:443 170.168.242.200 - - [02/Jun/2026:15:29:27 +0100] "POST /wp-login.php HTTP/1.1" 200 3902 "https://blog.blacknellsatsea.co.uk/wp-login.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552.224 Safari/534.10" blog.blacknellsatsea.co.uk:80 170.168.242.200 - - [02/Jun/2026:15:29:27 +0100] "GET /wp-login.php HTTP/1.1" 301 634 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.552. ... show less	Brute-Force Web App Attack
🇺🇸 ambor	2026-05-30 09:00:17 (1 month ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 04:55:39 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.200 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 00:55:33.732703 2026] [security2:error] [pid 7297:tid 7297] [client 170.168.242.200:45945] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|keithbowles.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keithbowles.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agFhRRircyBd7CykyKdRsgAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-03-31 08:55:11 (3 months ago)	WordPress login attempt	Brute-Force
🇺🇸 ambor	2026-03-31 08:04:04 (3 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇨🇭 backslash	2026-03-08 12:03:00 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-02-27 10:47:50 (4 months ago)	170.168.242.200 - - [27/Feb/2026:11:47:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3898 "-" "Wget/1.21 ... show more 170.168.242.200 - - [27/Feb/2026:11:47:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3898 "-" "Wget/1.21.4" ... show less	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-23 07:16:48 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-23 02:30:55 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.242.200 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 170.168.242.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 21:30:50.053596 2025] [security2:error] [pid 23788:tid 23788] [client 170.168.242.200:29285] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|talkingmess.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talkingmess.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUn-2kkq3qqBtxNXg9lhmQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.108.110

🇧🇷 189.124.15.252

🇧🇷 187.62.87.27

🇺🇸 173.214.163.42

🇨🇳 116.179.32.89

🇰🇪 102.135.168.80

🇬🇧 87.236.176.183

🇬🇧 81.19.219.251

🇬🇧 79.99.42.246

🇳🇱 45.148.10.183

🇳🇱 45.148.10.152

🇬🇧 45.61.173.86

🇸🇬 4.194.144.6

🇸🇬 2a09:bac5:55f9:1d05::2e4:1b

🇺🇸 198.73.57.78

🇸🇬 188.166.185.173

🇨🇳 182.43.164.191

🇧🇷 181.191.174.153

🇸🇦 154.205.134.214

🇬🇧 152.32.157.3