JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.85.57.55

115.85.57.55 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 88%: ?

88%

ISP	Eastern Telecom Philippines Inc.
Usage Type	Fixed Line ISP
ASN	AS9658
Hostname(s)	55.57.85.115.dsl.service.static.eastern-tele.com
Domain Name	easterntelecom.com.ph
Country	🇵🇭 Philippines
City	Manila, National Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 115.85.57.55

Whois 115.85.57.55

IP Abuse Reports for 115.85.57.55:

This IP address has been reported a total of 47 times from 18 distinct sources. 115.85.57.55 was first reported on May 21st 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 QT	2026-06-08 06:48:25 (3 minutes ago)	Unauthorised WordPress admin login attempted at 2026-06-08 16:48:18 +1000	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 03:46:29 (3 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.e ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 23:46:25.975594 2026] [security2:error] [pid 24773:tid 24773] [client 115.85.57.55:56504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.85.57.55 (+1 hits since last alert)\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "36sovereignchambers.com"] [uri "/xmlrpc.php"] [unique_id "aiY7EdQLjFEcJF-BDXQmyAAAAGc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-08 02:58:26 (3 hours ago)	115.85.57.55 - - [08/Jun/2026:04:58:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "WordPress.co ... show more 115.85.57.55 - - [08/Jun/2026:04:58:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "WordPress.com; https://wordpress.com" 115.85.57.55 - - [08/Jun/2026:04:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "WordPress.com; https://wordpress.com" 115.85.57.55 - - [08/Jun/2026:04:58:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-08 02:43:03 (4 hours ago)	115.85.57.55 - - [08/Jun/2026:04:42:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by W ... show more 115.85.57.55 - - [08/Jun/2026:04:42:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com" 115.85.57.55 - - [08/Jun/2026:04:42:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack/12.1; WordPress/6.4; http://site56331547.com" 115.85.57.55 - - [08/Jun/2026:04:43:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 01:43:05 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.e ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:42:59.707367 2026] [security2:error] [pid 29584:tid 29584] [client 115.85.57.55:50946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.85.57.55 (+1 hits since last alert)\|bfpsamoa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bfpsamoa.com"] [uri "/xmlrpc.php"] [unique_id "aiYeI7DGNJUnoKTsYAOJGgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 09:38:24 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.e ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:38:17.517060 2026] [security2:error] [pid 29522:tid 29522] [client 115.85.57.55:64842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.85.57.55 (+1 hits since last alert)\|fivecentmiracle.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fivecentmiracle.com"] [uri "/xmlrpc.php"] [unique_id "aiU8CVZYglsa7zJGeSXT3gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 09:09:23 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.e ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:09:16.002094 2026] [security2:error] [pid 10415:tid 10415] [client 115.85.57.55:53513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.85.57.55 (+1 hits since last alert)\|geodogs.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geodogs.org"] [uri "/xmlrpc.php"] [unique_id "aiU1O14WkCyh5U3IAWpRPAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 07:44:10 (23 hours ago)	Attac	Brute-Force
🇬🇧 Apache	2026-06-07 06:46:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (PH/Philippines/55.57.85.115.dsl.s ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (PH/Philippines/55.57.85.115.dsl.service.static.eastern-tele.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
Anonymous	2026-06-07 02:56:01 (1 day ago)	(wordpress) Failed wordpress login from 115.85.57.55 (PH/Philippines/55.57.85.115.dsl.service.static ... show more (wordpress) Failed wordpress login from 115.85.57.55 (PH/Philippines/55.57.85.115.dsl.service.static.eastern-tele.com) show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-06-07 01:11:42 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Tha_14	2026-06-05 08:59:35 (2 days ago)	Limit on login attempts is reached	Brute-Force
Anonymous	2026-06-05 00:57:10 (3 days ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-02 07:11:26 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.e ... show more (mod_security) mod_security (id:240335) triggered by 115.85.57.55 (55.57.85.115.dsl.service.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 03:11:20.269666 2026] [security2:error] [pid 3777:tid 3777] [client 115.85.57.55:50715] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 115.85.57.55 (+1 hits since last alert)\|graymatterofdc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "graymatterofdc.com"] [uri "/xmlrpc.php"] [unique_id "ah6CGKFSw6BKOw3ZWpRO0wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-01 09:06:20 (6 days ago)	Attac	Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:4780:27:1036:0:15dd:228d:1

🇭🇰 154.221.17.137

🇮🇳 120.57.127.22

🇲🇾 49.124.152.254

🇹🇼 34.81.67.11

🇮🇷 5.114.243.211

🇨🇦 198.50.202.93

🇺🇸 170.187.165.134

🇮🇳 168.144.95.137

🇮🇳 123.108.206.19

🇵🇭 112.202.62.92

🇺🇸 107.20.0.215

🇺🇸 65.49.1.130

🇨🇳 58.240.17.66

🇫🇮 34.88.77.195

🇳🇱 5.61.209.33

🇬🇧 2a06:4880:2000::31

🇪🇹 196.190.43.162

🇳🇱 185.223.235.39

🇻🇳 171.244.143.209