JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.134.198.151

112.134.198.151 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 67%: ?

67%

ISP	Internet Service Provider in Sri Lanka.
Usage Type	Fixed Line ISP
ASN	AS9329
Hostname(s)	v4.dns.slt.lk
Domain Name	sltnet.lk
Country	🇱🇰 Sri Lanka
City	Negombo, Western Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.134.198.151

Whois 112.134.198.151

IP Abuse Reports for 112.134.198.151:

This IP address has been reported a total of 17 times from 13 distinct sources. 112.134.198.151 was first reported on June 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-21 04:50:25 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 04:45:28 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-20 09:05:20 (2 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samp ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-19 13:48:49 (3 days ago)	Try to access /xmlrpc.php	Web App Attack
🇬🇧 consul.to	2026-07-17 15:30:49 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 11:30:49 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 112.134.198.151 (v4.dns.slt.lk): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 112.134.198.151 (v4.dns.slt.lk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:30:42.279912 2026] [security2:error] [pid 1038:tid 1038] [client 112.134.198.151:9394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iconbizpromo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconbizpromo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aljA4rbq8W3a__k_-P4DDgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 17:04:11 (1 week ago)	[ssd1.kdns.gr] httpd-xmlrpc-post: sites=www.gflawoffice.com; logs=/var/log/httpd/domains/gflawoffice ... show more [ssd1.kdns.gr] httpd-xmlrpc-post: sites=www.gflawoffice.com; logs=/var/log/httpd/domains/gflawoffice.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-07-15 05:53:05 (1 week ago)	[redacted] 112.134.198.151 - - [15/Jul/2026:07:52:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" ... show more [redacted] 112.134.198.151 - - [15/Jul/2026:07:52:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [15/Jul/2026:07:52:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [15/Jul/2026:07:52:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [15/Jul/2026:07:52:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537.36" [redacted] 112.134.198.151 ... show less	Hacking Web App Attack
Anonymous	2026-07-14 07:47:26 (1 week ago)	[redacted] 112.134.198.151 - - [14/Jul/2026:09:46:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" ... show more [redacted] 112.134.198.151 - - [14/Jul/2026:09:46:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/98.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [14/Jul/2026:09:46:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [14/Jul/2026:09:46:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [14/Jul/2026:09:47:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" [redacted] 112.134.198.151 - - [14/Jul/ ... show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-07-12 07:06:56 (1 week ago)	Known malicious PHP file or CMS probe	Web App Attack
Anonymous	2026-07-11 18:05:27 (1 week ago)		Web App Attack
🇬🇧 consul.to	2026-07-11 07:12:44 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:43:51 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 112.134.198.151 (v4.dns.slt.lk): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 112.134.198.151 (v4.dns.slt.lk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:43:46.578359 2026] [security2:error] [pid 5655:tid 5655] [client 112.134.198.151:9642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenmountainfeeds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak3xovv7Xhq4e8rv-UP7JAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 09:43:36 (2 weeks ago)	(wordpress) Failed wordpress login from 112.134.198.151 (LK/Sri Lanka/v4.dns.slt.lk)	Brute-Force
🇪🇸 masterguru	2026-07-07 08:48:01 (2 weeks ago)	(xmlrpc) Failed xmlrpc access from 112.134.198.151 (LK/Sri Lanka/v4.dns.slt.lk): 5 in the last 3600 ... show more (xmlrpc) Failed xmlrpc access from 112.134.198.151 (LK/Sri Lanka/v4.dns.slt.lk): 5 in the last 3600 secs (0-122) show less	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.119.225.68

🇫🇮 147.185.133.152

🇳🇱 64.225.65.42

🇬🇧 5.252.83.102

🇩🇪 193.124.20.253

🇧🇩 103.4.145.50

🇬🇧 90.220.142.202

🇷🇴 82.152.132.24

🇺🇸 66.228.53.207

🇧🇪 35.233.42.65

🇩🇪 194.187.176.21

🇧🇴 181.115.161.194

🇺🇸 174.172.129.141

🇺🇸 152.32.234.97

🇺🇸 147.185.132.166

🇨🇳 106.117.107.168

🇻🇳 103.63.108.25

🇺🇸 71.6.134.233

🇺🇸 47.254.70.175

🇳🇱 31.14.32.8