AbuseIPDB » 152.59.144.168
152.59.144.168
This IP was reported 11 times. Confidence of
Abuse
is 4% : ?
ISP
Reliance Jio Infocomm Limited
Usage Type
Mobile ISP
ASN
AS55836
Domain Name
jio.com
Country
🇮🇳
India
City
Patna, Bihar
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 152.59.144.168 :
This IP address has been reported a total of
11
times from
7 distinct
sources.
152.59.144.168 was first reported on
January 31st 2024 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-20 02:02:51
(2 days ago)
[Tue Oct 20 09:02:50.769392 2026] [security2:error] [pid 28939:tid 139777118439104] [client 152.59.1 ...
show more
[Tue Oct 20 09:02:50.769392 2026] [security2:error] [pid 28939:tid 139777118439104] [client 152.59.144.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Linux; Android 13; SM-N981U Build/TP1A.220624.014; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843
...
show less
Email Spam
Hacking
🇺🇸
Jason Howell
2026-03-19 08:10:33
(7 months ago)
152.59.144.168 - - [19/Mar/2026:02:30:51 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3008 "-" "Mozilla/5. ...
show more
152.59.144.168 - - [19/Mar/2026:02:30:51 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3008 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.0.0 Safari/537.36"
152.59.144.168 - - [19/Mar/2026:03:04:40 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36"
152.59.144.168 - - [19/Mar/2026:03:06:35 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3009 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/90.0.0.0 Safari/537.36"
152.59.144.168 - - [19/Mar/2026:03:08:25 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3009 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/66.0.0.0 Safari/537.36"
152.59.144.168 - - [19/Mar/2026:03:10:26 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2387 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/88.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇸🇪
Johan Finn
2025-11-06 09:51:18
(11 months ago)
malicious activity, botnet
Web App Attack
🇳🇱
exxos
2025-07-31 03:24:56
(1 year ago)
http-no-verb
Hacking
🇳🇱
exxos
2025-07-29 04:51:35
(1 year ago)
http-no-verb
Hacking
🇳🇱
exxos
2025-07-29 02:58:28
(1 year ago)
http-no-verb
Hacking
🇳🇱
exxos
2025-07-24 17:49:49
(1 year ago)
http-no-verb
Hacking
2024-08-04 03:29:33
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-29 03:27:22
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-06-03 18:51:58
(2 years ago)
Try to connect to Port_Scan_443_tcp
Port Scan
🇫🇷
sbocquet
2024-01-31 16:13:59
(2 years ago)
Port 443 scanned.
Port Scan
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: