JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.28.142

178.20.28.142 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.28.142

Whois 178.20.28.142

IP Abuse Reports for 178.20.28.142:

This IP address has been reported a total of 27 times from 8 distinct sources. 178.20.28.142 was first reported on July 21st 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-11 13:14:31 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 09:14:25.939622 2026] [security2:error] [pid 3699571:tid 3699571] [client 178.20.28.142:36131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|petrovic4.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "petrovic4.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adpJMX7KIj1Z_-nCb40_ggAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 21:21:12 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 17:21:09.134721 2026] [security2:error] [pid 2002010:tid 2002010] [client 178.20.28.142:35661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aliciagrant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aliciagrant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adlpxXsOj1_cQHQTxGZxXQAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 00:57:53 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 20:57:45.638192 2026] [security2:error] [pid 9613:tid 9613] [client 178.20.28.142:35679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tecnoconce.cl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tecnoconce.cl"] [uri "/wp-json/wp/v2/users"] [unique_id "acxtiUyX68dIWSNwmKP8NwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-26 22:00:18 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 18:00:13.670174 2026] [security2:error] [pid 30558:tid 30558] [client 178.20.28.142:35859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|asduk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "asduk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acWsbS5cZBoEoD5uv3OwAQAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-21 16:52:09 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.28.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 12:52:01.346069 2026] [security2:error] [pid 8960:tid 8960] [client 178.20.28.142:34297] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ehrlichfamily.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ehrlichfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab7MsXUPEklJqJfIRCMKjQAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-06-02 20:06:56 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-06-01 20:08:32 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-05-31 22:26:53 (1 year ago)		Brute-Force Web App Attack
🇨🇭 backslash	2025-02-04 07:45:06 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2025-02-04 04:25:17 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-02-02 19:18:38 (1 year ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-01-30 07:58:30 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-01-28 16:39:04 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-01-24 13:25:41 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-01-19 22:05:54 (1 year ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 196.196.53.104

🇨🇳 106.117.109.68

🇫🇷 91.231.89.150

🇬🇧 195.140.214.22

🇨🇳 60.16.213.39

🇺🇸 52.200.76.145

🇮🇳 49.207.57.54

🇧🇷 45.167.187.110

🇺🇸 18.212.73.216

🇧🇷 201.16.238.49

🇧🇴 190.181.4.12

🇧🇷 177.131.30.176

🇺🇸 151.241.125.174

🇭🇰 144.48.241.162

🇨🇳 124.88.113.187

🇱🇻 90.133.77.127

🇺🇸 66.132.224.30

🇳🇱 45.148.10.147

🇨🇳 36.140.123.73

🇮🇩 36.64.68.99