JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.134.194.24

112.134.194.24 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 26%: ?

26%

ISP	Internet Service Provider in Sri Lanka.
Usage Type	Fixed Line ISP
ASN	AS9329
Domain Name	sltnet.lk
Country	🇱🇰 Sri Lanka
City	Negombo, Western Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.134.194.24

Whois 112.134.194.24

IP Abuse Reports for 112.134.194.24:

This IP address has been reported a total of 6 times from 6 distinct sources. 112.134.194.24 was first reported on November 20th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-10-23 10:04:10 (3 hours ago)	[FriOct2312:04:05.7889992026][security2:error][pid2433334:tid2433451][client112.134.194.24:0]ModSecu ... show more [FriOct2312:04:05.7889992026][security2:error][pid2433334:tid2433451][client112.134.194.24:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cst-ranghetti.ch\"][uri\"/xmlrpc.php\"][unique_id\"atsxFYw49nv3N-DOP1_IHAAAAQk\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-10-21 14:16:11 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
🇳🇱 Alt255	2026-10-21 14:14:48 (1 day ago)	[ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 112.134.194.24 - - [21/Oct/2026:16:07:19 +0200] "POST /xmlrpc.php HTTP/1.1" 301 6353 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.0.0 Safari/537.36" 112.134.194.24 - - [21/Oct/2026:16:07:23 +0200] "POST /xmlrpc.php HTTP/1.1" 301 6367 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.0.0 Safari/537.36" 112.134.194.24 - - [21/Oct/2026:16:07:24 +0200] "POST /xmlrpc.php HTTP/1.1" 301 6375 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36" 112.134.194.24 - - [21/Oct/2026:16:14:36 +0200] "POST /xmlrpc.php HTTP/1.1" 301 6360 "-" "Mozilla ... show less	Brute-Force Web App Attack
Anonymous	2026-10-20 11:20:50 (3 days ago)	WordPress login / xmlrpc probing across multiple sites	Web App Attack
🇩🇪 neverdown.eu	2023-04-02 16:18:48 (3 years ago)	(XMLRPC) WP XMLPRC Attack 112.134.194.24 (LK/Sri Lanka/-): 1 in the last 3600 secs; Ports: ; Direct ... show more (XMLRPC) WP XMLPRC Attack 112.134.194.24 (LK/Sri Lanka/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 112.134.194.24 - - [02/Apr/2023:19:17:45 +0300] "POST /xmlrpc.php HTTP/1.1" 301 707 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Port Scan
🇩🇪 Invisiblemen	2022-11-20 01:46:36 (3 years ago)	Unauthorized connection attempt from IP address 112.134.194.24 on Port 445(SMB)	Port Scan

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.253.209.135

🇵🇾 181.122.250.161

🇧🇷 179.118.246.60

🇧🇩 157.10.80.49

🇮🇹 151.59.122.208

🇯🇵 139.162.70.53

🇰🇷 49.247.214.126

🇺🇸 45.132.187.160

🇫🇷 217.60.184.59

🇺🇸 213.108.0.250

🇩🇪 130.12.180.176

🇺🇸 91.132.198.208

🇳🇱 77.91.71.90

🇺🇸 73.93.207.215

🇰🇪 41.90.172.232

🇴🇲 37.40.237.218

🇻🇳 27.79.41.99

🇺🇾 190.135.160.156

🇮🇷 185.141.107.80

🇩🇪 143.20.60.56