JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.56.161.23

152.56.161.23 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 63%: ?

63%

ISP	Reliance Jio Infocomm Limited
Usage Type	Mobile ISP
ASN	AS55836
Domain Name	jio.com
Country	🇮🇳 India
City	Indore, Madhya Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.56.161.23

Whois 152.56.161.23

IP Abuse Reports for 152.56.161.23:

This IP address has been reported a total of 14 times from 12 distinct sources. 152.56.161.23 was first reported on November 23rd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 dineshskt4all	2026-07-30 13:19:11 (1 day ago)	[Thu Jul 30 13:19:09.781632 2026] [proxy_fcgi:error] [pid 1013248:tid 134489552402112] [client 152.5 ... show more [Thu Jul 30 13:19:09.781632 2026] [proxy_fcgi:error] [pid 1013248:tid 134489552402112] [client 152.56.161.23:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇮🇹 CoreTech srl	2026-07-29 19:13:57 (1 day ago)	cloudlinux2 fail2ban: 2026-07-29 21:09:09,853 fail2ban.filter [1584]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-29 21:09:09,853 fail2ban.filter [1584]: INFO [plesk-modsecurity] Found 197.221.109.66 - 2026-07-29 21:09:09cloudlinux2 fail2ban: 2026-07-29 21:09:10,900 fail2ban.filter [1584]: INFO [plesk-modsecurity] Found 35.237.12.111 - 2026-07-29 21:09:10cloudlinux2 fail2ban: 2026-07-29 21:09:48,816 fail2ban.filter [1584]: INFO [plesk-apache] Found 52.238.199.152 - 2026-07-29 21:09:48cloudlinux2 fail2ban: 2026-07-29 21:10:27,450 fail2ban.filter [1584]: INFO [plesk-wordpress] Found 45.131.193.142 - 2026-07-29 21:10:26cloudlinux2 fail2ban: 2026-07-29 21:10:35,818 fail2ban.filter [1584]: INFO [plesk-modsecurity] Found 197.221.109.66 - 2026-07-29 21:10:35cloudlinux2 fail2ban: 2026-07-29 21:10:36,417 fail2ban.actions [1584]: NOTICE [plesk-modsecurity] Ban 197.221.109.66cloudlinux2 fail2ban: 2026-07-29 21:10:41,740 fail2ban.filter [1584]: INFO [plesk-modsecurity] Found 152.56.161.23 - 2026-07-29 21:10:41cloudlinux2 fail2ban: show less	Web App Attack
🇳🇿 Tripwire	2026-07-29 14:57:01 (2 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
Anonymous	2026-07-29 13:06:04 (2 days ago)	Trying to access config files	Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=32; exact paths: /xmlrpc.php	Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Automated Apache web application probing in selected 24h window; attempts=19, unique_paths=1, error_ ... show more Automated Apache web application probing in selected 24h window; attempts=19, unique_paths=1, error_responses=9; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 04:43:27 (2 days ago)	IP banned by Fail2Ban due to multiple malicious requests on Nginx	Brute-Force SSH Web App Attack
🇫🇷 masterguru	2026-07-29 02:52:42 (2 days ago)	(xmlrpc) Apache: Failed xmlrpc access from 152.56.161.23 (IN/India/-): 10 in the last 3600 secs (0-2 ... show more (xmlrpc) Apache: Failed xmlrpc access from 152.56.161.23 (IN/India/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇩🇪 findlab	2026-07-28 20:00:01 (2 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇦🇺 electronico	2026-07-27 17:45:20 (3 days ago)	152.56.161.23 - - [28/Jul/2026:04:45:20 +1100] "POST /xmlrpc.php HTTP/1.1" 301 2973 "-" "Mozilla/5.0 ... show more 152.56.161.23 - - [28/Jul/2026:04:45:20 +1100] "POST /xmlrpc.php HTTP/1.1" 301 2973 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/94.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TAY	2026-07-27 11:38:18 (4 days ago)	152.56.161.23 - - [27/Jul/2026:19:34:27 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6347 "-" "Mozilla/5.0 ... show more 152.56.161.23 - - [27/Jul/2026:19:34:27 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6347 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/71.0.0.0 Safari/537.36" 152.56.161.23 - - [27/Jul/2026:19:37:33 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6363 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/65.0.0.0 Safari/537.36" 152.56.161.23 - - [27/Jul/2026:19:38:18 +0800] "POST /xmlrpc.php HTTP/1.1" 200 6379 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36" ... show less	Brute-Force
🇪🇸 masterguru	2026-07-27 06:00:25 (4 days ago)	(xmlrpc) Failed xmlrpc access from 152.56.161.23 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 kosada.com	2026-07-27 04:23:45 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2025-11-23 10:08:32 (8 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 157.10.201.135

🇨🇳 58.57.154.146

🇧🇷 190.102.43.177

🇨🇳 180.76.243.197

🇭🇰 168.76.131.178

🇨🇳 117.33.236.100

🇮🇩 103.98.176.164

🇮🇩 103.97.101.25

🇺🇸 31.77.227.109

🇳🇱 213.176.26.76

🇧🇷 200.232.114.71

🇺🇸 195.184.76.58

🇺🇸 172.98.32.101

🇳🇱 154.21.34.16

🇻🇳 104.218.166.62

🇺🇦 93.170.4.14

🇺🇸 70.120.203.193

🇨🇳 14.103.122.182

🇵🇹 2001:8a0:75b3:d300:4c8c:4e78:68f2:68e1

🇳🇱 213.176.26.133