JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 177.17.242.228

177.17.242.228 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS18881
Hostname(s)	177.17.242.228.dynamic.adsl.gvt.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Brasilia, Federal District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 177.17.242.228

Whois 177.17.242.228

IP Abuse Reports for 177.17.242.228:

This IP address has been reported a total of 30 times from 20 distinct sources. 177.17.242.228 was first reported on July 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 19:41:49 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt ... show more (mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:41:43.311566 2026] [security2:error] [pid 18869:tid 18869] [client 177.17.242.228:56435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 177.17.242.228 (+1 hits since last alert)\|nolaanime.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nolaanime.com"] [uri "/xmlrpc.php"] [unique_id "alFK987XeNqOe9R_c78NBgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-07-10 18:39:57 (2 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-10 18:39:43 (2 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 e.fierstra	2026-07-10 18:14:07 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-10 17:59:17 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 WeekendWeb	2026-07-10 17:50:10 (3 hours ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 17:40:58 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt ... show more (mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 13:40:55.126997 2026] [security2:error] [pid 5346:tid 5346] [client 177.17.242.228:53530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 177.17.242.228 (+1 hits since last alert)\|anamericanabroad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "anamericanabroad.com"] [uri "/xmlrpc.php"] [unique_id "alEup18CCK3ek-ygdwiIfQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 16:46:33 (4 hours ago)	(mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt ... show more (mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 12:46:29.257595 2026] [security2:error] [pid 22410:tid 22410] [client 177.17.242.228:63810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 177.17.242.228 (+1 hits since last alert)\|seabreezeculvert.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seabreezeculvert.com"] [uri "/xmlrpc.php"] [unique_id "alEh5XuNxhPbtOTg-vViVgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 16:08:51 (4 hours ago)	(mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt ... show more (mod_security) mod_security (id:240335) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 12:08:47.363254 2026] [security2:error] [pid 23189:tid 23189] [client 177.17.242.228:60626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 177.17.242.228 (+1 hits since last alert)\|k2servicesinc.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "k2servicesinc.net"] [uri "/xmlrpc.php"] [unique_id "alEZD6Axupz-PhMWGm7HFQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-10 16:07:01 (4 hours ago)	(wordpress) Failed wordpress login from 177.17.242.228 (BR/Brazil/177.17.242.228.dynamic.adsl.gvt.ne ... show more (wordpress) Failed wordpress login from 177.17.242.228 (BR/Brazil/177.17.242.228.dynamic.adsl.gvt.net.br): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-07-10 15:45:07 (5 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 15:40:39 (5 hours ago)	(mod_security) mod_security (id:225170) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt ... show more (mod_security) mod_security (id:225170) triggered by 177.17.242.228 (177.17.242.228.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:40:34.619233 2026] [security2:error] [pid 16840:tid 16840] [client 177.17.242.228:50925] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|seagrovesrealty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "seagrovesrealty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alEScovBuU81Hz39AbvGAAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-07-10 15:27:41 (5 hours ago)	Multiple attempts to attack Wordpress XMLRPC detected: access blocked.	Web App Attack
🇻🇳 hirosume2	2026-07-10 15:13:17 (5 hours ago)	DDoS composite score 35.9 (proxy tier) - 26 reqs/5min - high_traffic	DDoS Attack
🇳🇱 Site.eu	2026-07-10 13:07:03 (7 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 178.20.210.208

🇩🇪 144.31.125.234

🇯🇵 128.116.120.3

🇬🇧 35.203.211.248

🇨🇦 34.130.42.224

🇩🇪 2a04:4e40:e000:0:4a8:434:2280:1575

🇵🇰 223.123.44.117

🇺🇸 216.25.89.75

🇩🇪 194.88.98.85

🇧🇷 179.178.113.160

🇨🇳 171.36.7.134

🇺🇸 162.216.150.182

🇩🇪 139.59.154.49

🇺🇸 74.208.31.207

🇹🇿 41.59.111.72

🇧🇷 20.195.178.90

🇮🇹 2a00:1450:4025:1805::122

🇳🇱 195.178.110.232

🇲🇽 189.167.62.122

🇮🇱 147.235.217.193