This IP address has been reported a total of
6
times from
6 distinct
sources.
170.239.252.179 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 1
report;
United Kingdom of Great Britain and Northern Ireland
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Exploited Host
2
times;
Bad Web Bot
2
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:225170) triggered by 170.239.252.179 (179-252-239-170.utopianet.com. ...
show more(mod_security) mod_security (id:225170) triggered by 170.239.252.179 (179-252-239-170.utopianet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:07:37.739930 2026] [security2:error] [pid 3250:tid 3250] [client 170.239.252.179:12830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lusineweb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lusineweb.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6dmdLQ7SDNktfv-SZlBgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Participated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using ...
show moreParticipated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using 15,000+ unique IPs with 8 round-robined browser user agents. Behavior: deep pagination of search/tag queries (up to page 1500+), findComment chain crawling, 87% requests closed before response (499). No static assets loaded. Attack ramped from ~1,800 req/hr to ~14,000 req/hr over 17 hours then stopped abruptly. Observed 2026-04-01.
show less
DDoS Attack
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
