JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.192.157.18

14.192.157.18 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 99%: ?

99%

ISP	Fariya Networks (Pvt.) Ltd.
Usage Type	Fixed Line ISP
ASN	AS133933
Hostname(s)	fn157-static18.fariya.com
Domain Name	fariya.com
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.192.157.18

Whois 14.192.157.18

IP Abuse Reports for 14.192.157.18:

This IP address has been reported a total of 40 times from 27 distinct sources. 14.192.157.18 was first reported on March 8th 2021, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tsumugi Kotobuki	2026-07-14 01:40:32 (11 hours ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 44 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 44 \| Len: 44B \| Win: 52173(1) \| rDNS: fn157-static18.fariya.com \| F2B/ufw-honeypot@2026-07-14T01:40:32Z show less	Port Scan Hacking
🇩🇪 4server	2026-07-13 14:26:55 (22 hours ago)	[MonJul1316:26:51.0200742026][security2:error][pid734736:tid734749][client14.192.157.18:0]ModSecurit ... show more [MonJul1316:26:51.0200742026][security2:error][pid734736:tid734749][client14.192.157.18:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"autoeuro.lv\"][uri\"/xmlrpc.php\"][unique_id\"alT1q5MgWVOPocOdRkWbYgAAAAo\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-12 18:57:09 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-07-12 16:38:47 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇵🇾 armandosaucedo.me	2026-07-11 20:20:41 (2 days ago)	Threat Intelligence via ARMTI, Web Attack: POST /xmlrpc.php	Web App Attack
🇫🇷 Baking333	2026-07-11 19:47:03 (2 days ago)	[redacted] 14.192.157.18 - - [11/Jul/2026:20:37:11 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/499 ... show more [redacted] 14.192.157.18 - - [11/Jul/2026:20:37:11 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/49921 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/96.0.0.0 Safari/537.36" [redacted] 14.192.157.18 - - [11/Jul/2026:20:47:01 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/58561 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/77.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 19:10:53 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 15:10:46.500816 2026] [security2:error] [pid 20361:tid 20384] [client 14.192.157.18:57085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aafm.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aafm.us"] [uri "/wp-json/wp/v2/users"] [unique_id "alKVNniVvlS8N8RtlXTBswAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 04:22:06 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 00:22:01.705768 2026] [security2:error] [pid 2006:tid 2006] [client 14.192.157.18:57056] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|f40ph.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "f40ph.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alHE6asMWFAHGi7JAvsvAgAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 01:58:14 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 14.192.157.18 (fn157-static18.fariya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 21:58:07.754309 2026] [security2:error] [pid 5978:tid 5978] [client 14.192.157.18:57202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|daebakdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daebakdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alGjL-NFJJA3IUY5ThCrmQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-07-10 14:28:12 (3 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇦🇹 urnilxfgbez	2026-07-09 22:45:00 (4 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-07-09 08:37:15 (5 days ago)	Unauthorized connection to Telnet port 23	Port Scan
🇫🇮 6kilowatti	2026-07-08 08:11:10 (6 days ago)	2026-07-08T11:11:09.622588+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-08T11:11:09.622588+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=14.192.157.18 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=63620 PROTO=TCP SPT=59037 DPT=23 WINDOW=58035 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-07-07 22:45:00 (6 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-07-07 21:58:20 (6 days ago)	2026-07-07 21:58:20 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.117

🇬🇧 193.32.209.238

🇳🇱 185.223.235.26

🇺🇸 172.234.25.187

🇺🇸 154.58.229.20

🇩🇪 151.243.11.232

🇺🇸 147.185.132.177

🇺🇸 141.11.88.235

🇧🇩 103.204.69.235

🇬🇧 81.19.219.212

🇺🇸 44.1.0.252

🇨🇳 221.13.86.21

🇳🇱 195.178.110.26

🇧🇷 179.157.103.19

🇨🇳 123.178.210.93

🇨🇳 123.160.221.155

🇰🇷 121.131.220.142

🇺🇸 44.215.219.236

🇻🇳 42.96.33.3

🇺🇸 34.193.119.44