JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.29.22

178.20.29.22 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 22%: ?

22%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.29.22

Whois 178.20.29.22

IP Abuse Reports for 178.20.29.22:

This IP address has been reported a total of 30 times from 14 distinct sources. 178.20.29.22 was first reported on November 18th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-25 18:37:43 (2 days ago)	Fail2Ban banned 178.20.29.22 for security violations in jail wp-armour. Log: 2026/06/25 18:37:43 [er ... show more Fail2Ban banned 178.20.29.22 for security violations in jail wp-armour. Log: 2026/06/25 18:37:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 178.20.29.22 \| Target: wplogin" , client: 178.20.29.22, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇪🇸 librebit	2026-06-25 01:00:42 (3 days ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-20 09:32:30 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 05:32:25.469654 2026] [security2:error] [pid 2012:tid 2012] [client 178.20.29.22:21493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kircali.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kircali.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajZeKbKqT4KMVbK3Bp4F3wAAAA8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-20 02:39:17 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:39:12.191957 2026] [security2:error] [pid 28876:tid 28876] [client 178.20.29.22:9077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|curryfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "curryfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abyzUKvVCWF5d-PDPGAmCgAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-18 10:12:57 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 178.20.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 06:12:51.298469 2026] [security2:error] [pid 24142:tid 24145] [client 178.20.29.22:46565] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ceol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ceol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abp6o3t_1_80qrJ07v_qtwAAAIA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-02-06 23:08:32 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-02-06 22:36:37 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (FI/Finland/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-02-04 21:01:55 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (NL/The Netherlands/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇪🇸 10dencehispahard SL	2026-01-26 08:43:29 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-21 16:46:44 (5 months ago)	wordpress-trap	Web App Attack
🇫🇷 masterguru	2025-12-24 14:06:16 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (NL/The Netherlands/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 178.20.29.22 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇨🇿 lp	2025-02-12 17:50:00 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.22 2025-02-12T18:14:27+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.22 2025-02-12T18:14:27+01:00 vpn Access-Reject 'amelie' station: 178.20.29.22 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-02-10 20:50:13 (1 year ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 178.20.29.22 2025-02-10T20:20:05+01:0 ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 178.20.29.22 2025-02-10T20:20:05+01:00 vpn Access-Reject 'sm' station: 178.20.29.22 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-02-10T20:31:17+01:00 vpn Access-Reject 'upending' station: 178.20.29.22 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-02-10T20:51:53+01:00 vpn Access-Reject 'blessing' station: 178.20.29.22 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-02-09 00:12:06 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2025-01-30 02:50:37 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.22 2025-01-30T03:04:43+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.22 2025-01-30T03:04:43+01:00 vpn Access-Reject 'prince' station: 178.20.29.22 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.123

🇸🇬 185.200.116.77

🇺🇸 143.42.164.204

🇮🇩 103.112.5.35

🇧🇾 81.30.98.142

🇬🇧 45.82.76.120

🇮🇳 20.219.13.14

🇳🇱 2a0b:8bc0:2:b562::1

🇨🇳 218.206.15.125

🇰🇷 211.253.37.225

🇺🇿 195.158.4.138

🇩🇪 178.105.192.217

🇩🇪 167.94.145.24

🇺🇸 157.230.8.30

🇻🇳 103.118.28.15

🇩🇪 85.115.29.34

🇱🇻 81.30.98.62

🇳🇱 45.198.224.115

🇸🇬 2400:8901::2000:ddff:fe03:af6d

🇮🇳 135.235.218.74