JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.168.29.149

170.168.29.149 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 44%: ?

44%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.168.29.149

Whois 170.168.29.149

IP Abuse Reports for 170.168.29.149:

This IP address has been reported a total of 15 times from 12 distinct sources. 170.168.29.149 was first reported on February 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-01 17:44:43 (2 hours ago)	[01/Sep/2026:20:44:42 +0300] -- 170.168.29.149 Ban reason: User-Agent curl/	Bad Web Bot Web App Attack
🇺🇸 FreeMyIP	2026-09-01 16:31:24 (3 hours ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-01 01:06:32 (18 hours ago)	Web password guessing	Brute-Force
🇸🇪 vaia.cloud	2026-08-31 12:15:02 (1 day ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇩🇪 Ilop	2026-08-27 00:06:53 (5 days ago)	[hp-100] 15 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)	Port Scan
🇺🇸 TPI-Abuse	2026-08-06 12:39:17 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 08:39:10.921264 2026] [security2:error] [pid 28717:tid 28717] [client 170.168.29.149:25877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|secure-rep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "secure-rep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anSAbq5AcFrY8ldS_koSygAAABk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-04 18:32:49 (4 weeks ago)	Web password guessing	Brute-Force
🇺🇸 OceanTreasure	2026-08-03 19:27:24 (4 weeks ago)	tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-08-03T19:20:52Z [proxy]	Brute-Force
🇺🇸 TPI-Abuse	2026-08-01 20:09:48 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 16:09:33.650392 2026] [security2:error] [pid 2271094:tid 2271094] [client 170.168.29.149:15775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hshr.com"] [uri "/symfony/.env"] [unique_id "am5Sfah95OZx8jgpvEDpCgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-07-15 14:32:14 (1 month ago)	Failed login attempt for admin	Brute-Force Web App Attack
🇫🇷 Tilellit.PRO	2026-06-27 09:17:47 (2 months ago)	Fail2Ban banned 170.168.29.149 for security violations in jail wp-armour. Log: 2026/06/27 09:17:46 [ ... show more Fail2Ban banned 170.168.29.149 for security violations in jail wp-armour. Log: 2026/06/27 09:17:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 170.168.29.149 \| Target: wplogin" , client: 170.168.29.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-06-23 00:22:23 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 170.168.29.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:22:16.696486 2026] [security2:error] [pid 16721:tid 16738] [client 170.168.29.149:48873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|transiit.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transiit.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajnRuDMjNhnORFvIshKNpAAAAIY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-09 19:15:12 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-05-14 23:30:07 (3 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-02-24 23:04:10 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.145

🇭🇰 180.131.167.125

🇨🇳 106.15.236.209

🇺🇸 45.156.129.125

🇶🇦 2600:1900:4260:40e::162

🇧🇷 205.210.31.152

🇳🇱 195.178.110.137

🇦🇺 193.115.92.96

🇮🇳 183.82.115.50

🇨🇳 180.153.197.104

🇧🇷 177.22.174.160

🇳🇱 176.65.149.196

🇺🇸 174.138.63.13

🇧🇷 170.239.242.138

🇳🇬 152.32.141.2

🇮🇳 110.173.190.221

🇸🇪 95.141.241.126

🇺🇸 45.132.115.200

🇸🇬 43.159.39.29

🇨🇳 220.189.253.198