JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.185.53.142

109.185.53.142 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 42%: ?

42%

ISP	JSC Moldtelecom S.A.
Usage Type	Fixed Line ISP
ASN	AS8926
Hostname(s)	host-static-109-185-53-142.moldtelecom.md
Domain Name	moldtelecom.md
Country	🇲🇩 Moldova (the Republic of)
City	Cahul, Cahul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.185.53.142

Whois 109.185.53.142

IP Abuse Reports for 109.185.53.142:

This IP address has been reported a total of 17 times from 12 distinct sources. 109.185.53.142 was first reported on March 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-07-25 08:00:30 (1 day ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 IndigoRidge	2026-07-25 07:09:20 (1 day ago)	109.185.53.142 - - [25/Jul/2026:03:08:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress. ... show more 109.185.53.142 - - [25/Jul/2026:03:08:26 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 109.185.53.142 - - [25/Jul/2026:03:08:47 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 109.185.53.142 - - [25/Jul/2026:03:08:57 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 109.185.53.142 - - [25/Jul/2026:03:09:08 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 109.185.53.142 - - [25/Jul/2026:03:09:20 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇱🇻 garmtech.com	2026-07-18 07:45:13 (1 week ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-18 07:43:35 (1 week ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 07:34:36 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.mold ... show more (mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.moldtelecom.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 03:34:28.465878 2026] [security2:error] [pid 1576837:tid 1576837] [client 109.185.53.142:54586] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.185.53.142 (+1 hits since last alert)\|seskalee.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seskalee.com"] [uri "/xmlrpc.php"] [unique_id "alsshMeA21fx8V7ZsXDzVAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 07:31:32 (1 week ago)	[redacted] 109.185.53.142 - - [18/Jul/2026:09:30:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 109.185.53.142 - - [18/Jul/2026:09:30:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 109.185.53.142 - - [18/Jul/2026:09:30:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 109.185.53.142 - - [18/Jul/2026:09:31:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 109.185.53.142 - - [18/Jul/2026:09:31:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.4; http://site28032803.com" [redacted] 109.185.53.142 - - [18/Jul/2026:09:31:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.1; WordPress/6.1; http://site40076650.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-11 19:58:57 (2 weeks ago)		Bad Web Bot Web App Attack
Anonymous	2026-07-11 08:55:12 (2 weeks ago)	[redacted] 109.185.53.142 - - [11/Jul/2026:10:54:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 109.185.53.142 - - [11/Jul/2026:10:54:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 109.185.53.142 - - [11/Jul/2026:10:54:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 109.185.53.142 - - [11/Jul/2026:10:54:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 109.185.53.142 - - [11/Jul/2026:10:55:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site71915058.com" [redacted] 109.185.53.142 - - [11/Jul/2026:10:55:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-04 16:12:40 (3 weeks ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 08:34:29 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.mold ... show more (mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.moldtelecom.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 04:34:23.232706 2026] [security2:error] [pid 28373:tid 28373] [client 109.185.53.142:53139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.185.53.142 (+1 hits since last alert)\|pakistanvision.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pakistanvision.com"] [uri "/xmlrpc.php"] [unique_id "akjFjzu_XT1ymkTMHtU7MAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 07:38:55 (4 weeks ago)	(mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.mold ... show more (mod_security) mod_security (id:240335) triggered by 109.185.53.142 (host-static-109-185-53-142.moldtelecom.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:38:50.808786 2026] [security2:error] [pid 26609:tid 26609] [client 109.185.53.142:22263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.185.53.142 (+1 hits since last alert)\|modmove.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "modmove.com"] [uri "/xmlrpc.php"] [unique_id "aj9-Chmr63nf5Z8BsuoutQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-11 09:06:13 (3 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇳🇱 wlt-blocker	2026-04-04 19:27:26 (3 months ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 big-cloud.nl	2026-04-04 09:12:06 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 07:49:07 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 109.185.53.142 (host-static-109-185-53-142.mold ... show more (mod_security) mod_security (id:225170) triggered by 109.185.53.142 (host-static-109-185-53-142.moldtelecom.md): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:49:00.004076 2026] [security2:error] [pid 1549:tid 1549] [client 109.185.53.142:48711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "36sovereignchambers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adDCbESXqYDm9U2Ue27x7wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.205.173.133

🇺🇦 85.239.147.3

🇮🇷 81.29.245.77

🇳🇱 77.239.124.243

🇧🇷 170.0.62.173

🇺🇸 164.92.70.255

🇧🇷 147.15.20.173

🇳🇱 91.92.40.35

🇨🇳 47.92.253.168

🇮🇪 34.242.217.155

🇬🇧 188.240.59.12

🇺🇸 173.239.240.117

🇺🇸 165.154.172.68

🇸🇪 155.4.244.107

🇫🇮 147.185.133.150

🇰🇷 118.194.249.8

🇫🇷 91.231.89.44

🇩🇪 69.5.169.192

🇺🇸 24.144.83.199

🇮🇪 3.249.93.50