This IP address has been reported a total of
24
times from
18 distinct
sources.
170.168.30.152 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 3
reports;
Germany
with 3
reports;
Australia
with 1
report.
Over the same time period, 170.168.30.152 has changed
country of origin 3 times.
The most common categories in these recent reports were:
Bad Web Bot
6
times;
Web App Attack
3
times;
Hacking
2
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
http-bad-user-agent - IP: 170.168.30.152 - time="2026-09-30T09:17:38+02:00" level=info msg="(555f66 ...
show morehttp-bad-user-agent - IP: 170.168.30.152 - time="2026-09-30T09:17:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.30.152 (NL/59651) : 4h ban on Ip 170.168.30.152" module=db
show less
[TueSep2909:19:02.0446012026][security2:error][pid492709:tid492822][client170.168.30.152:0]ModSecuri ...
show more[TueSep2909:19:02.0446012026][security2:error][pid492709:tid492822][client170.168.30.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.noisetosound.ch\"][uri\"/robots.txt\"][unique_id\"artmZr7SuoUV06ApAcN_kgAAAQ0\"]
show less
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show moreTriggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
[SunMay1015:11:53.3895212026][security2:error][pid3782654:tid3782659][client170.168.30.152:0]ModSecu ...
show more[SunMay1015:11:53.3895212026][security2:error][pid3782654:tid3782659][client170.168.30.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"agCEGXtAlmLyqyopJrPITQAAAAM\"]
show less
[SatApr2512:34:10.7058862026][security2:error][pid625148:tid625257][client170.168.30.152:0]ModSecuri ...
show more[SatApr2512:34:10.7058862026][security2:error][pid625148:tid625257][client170.168.30.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"specialfood.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeyYohpQMVkxpsnUuSqoYQAAAMM\"]
show less
