JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.175.234.40

5.175.234.40 was found in our database!

This IP was reported 272 times. Confidence of Abuse is 3%: ?

ISP	Servitro
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213495
Domain Name	servitro.com
Country	🇩🇪 Germany
City	Bad Soden am Taunus, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.175.234.40

Whois 5.175.234.40

IP Abuse Reports for 5.175.234.40:

This IP address has been reported a total of 272 times from 122 distinct sources. 5.175.234.40 was first reported on September 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-08-24 09:09:08 (1 week ago)	NOQUEUE - IP: 5.175.234.40 - Aug 24 11:09:08 plesk postfix/smtpd[1912604]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 5.175.234.40 - Aug 24 11:09:08 plesk postfix/smtpd[1912604]: NOQUEUE: reject: RCPT from unknown[5.175.234.40]: 554 5.7.1 Service unavailable; Client host [5.175.234.40] blocked using dnsbl-2.uceprotect.net; Net 5.175.234.0/24 is UCEPROTECT-Level2 listed because 162 impacts are seen from /AS213495 there. See: http://www.uceprotect.net/rblcheck.php?ipr=5.175.234.40; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<axa.com> show less	Email Spam
🇨🇭 Origon	2026-08-20 06:27:33 (1 week ago)	NOQUEUE - IP: 5.175.234.40 - Aug 20 08:27:33 plesk postfix/smtpd[109730]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 5.175.234.40 - Aug 20 08:27:33 plesk postfix/smtpd[109730]: NOQUEUE: reject: RCPT from unknown[5.175.234.40]: 554 5.7.1 Service unavailable; Client host [5.175.234.40] blocked using dnsbl-2.uceprotect.net; Net 5.175.234.0/24 is UCEPROTECT-Level2 listed because 14 impacts are seen from /AS213495 there. See: http://www.uceprotect.net/rblcheck.php?ipr=5.175.234.40; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<axa.com> show less	Email Spam
🇮🇳 Altis Shield	2025-12-01 08:21:39 (9 months ago)	Connection closed by 5.175.234.40 [preauth] or weird packet	Brute-Force SSH
🇫🇮 [email protected]	2025-10-27 06:46:09 (10 months ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on www.trackpunkracing.co ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on www.trackpunkracing.com (User enumeration scan (WP REST API)) 5.175.234.40 (DE/Germany/-): 1 in the last 3600 secs (CF_ENABLE); IP: 5.175.234.40; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇫🇷 service Informatique	2025-10-25 04:00:37 (10 months ago)	GET /wp-content	Web App Attack
🇺🇸 BSG Webmaster	2025-10-24 07:35:30 (10 months ago)	Port scanning (Port 80)	Port Scan Hacking
🇦🇺 FEWA	2025-10-24 02:02:50 (10 months ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
Anonymous	2025-10-24 00:39:57 (10 months ago)	Legion Credential Harvester / SMTP Hijacker: /.env	Hacking Bad Web Bot Web App Attack
🇪🇸 loadsoporte	2025-10-23 23:58:53 (10 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇮🇩 Burayot	2025-10-23 21:08:39 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.175.234.40 (DE/Germany/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.175.234.40 (DE/Germany/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 Floofie	2025-10-23 20:27:11 (10 months ago)	5.175.234.40 - - [23/Oct/2025:16:27:10 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh ... show more 5.175.234.40 - - [23/Oct/2025:16:27:10 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 5.175.234.40 - - [23/Oct/2025:16:27:10 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 5.175.234.40 - - [23/Oct/2025:16:27:10 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-19 04:19:36 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 5.175.234.40 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 5.175.234.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 00:19:32.468664 2025] [security2:error] [pid 15733:tid 15733] [client 5.175.234.40:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.yggdrasil.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.yggdrasil.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aPRm1BdLDe5MEUqvFlsjywAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2025-10-19 03:01:39 (10 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇯🇵 S.O.B.A. Dev.	2025-10-19 01:30:03 (10 months ago)	Web vulnerability scanning	Web Spam Brute-Force Web App Attack
🇳🇱 CryptoYakari	2025-10-19 00:41:51 (10 months ago)	5.175.234.40 - - [19/Oct/2025:03:41:49 +0300] "GET /wp-json/wp/v2/users HTTP/1.0" 404 6993 "-" "Mozi ... show more 5.175.234.40 - - [19/Oct/2025:03:41:49 +0300] "GET /wp-json/wp/v2/users HTTP/1.0" 404 6993 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 5.175.234.40 - - [19/Oct/2025:03:41:49 +0300] "GET /wp-admin HTTP/1.0" 404 3515 "-" "-" 5.175.234.40 - - [19/Oct/2025:03:41:49 +0300] "GET /wordpress HTTP/1.0" 404 3515 "-" "-" 5.175.234.40 - - [19/Oct/2025:03:41:50 +0300] "GET /wp-admin/setup-config.php HTTP/1.0" 404 3515 "-" "-" 5.175.234.40 - - [19/Oct/2025:03:41:50 +0300] "GET /wp-admin/install.php HTTP/1.0" 404 3515 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 272 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.187

🇨🇦 165.245.231.25

🇨🇳 117.156.238.160

🇨🇳 114.246.204.251

🇨🇳 114.245.50.233

🇮🇹 83.217.180.129

🇲🇽 68.155.159.216

🇨🇦 20.48.160.90

🇩🇪 213.182.213.57

🇺🇸 209.90.232.81

🇧🇷 200.201.194.8

🇪🇹 196.188.93.169

🇪🇨 190.154.139.227

🇨🇿 188.120.222.94

🇰🇷 180.182.236.143

🇺🇸 174.126.222.110

🇹🇼 107.167.181.44

🇯🇵 107.155.15.8

🇹🇷 94.154.43.36

🇩🇰 89.150.163.220