JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.15.158.247

157.15.158.247 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 87%: ?

87%

ISP	DIRECTORATE OF EDCS
Usage Type	Government
ASN	AS55824
Domain Name	karnataka.gov.in
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.15.158.247

Whois 157.15.158.247

IP Abuse Reports for 157.15.158.247:

This IP address has been reported a total of 38 times from 23 distinct sources. 157.15.158.247 was first reported on June 1st 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 10:34:22 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:34:17.191875 2026] [security2:error] [pid 553293:tid 553293] [client 157.15.158.247:50708] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.158.247 (+1 hits since last alert)\|stoughtonpipeandwelding.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stoughtonpipeandwelding.net"] [uri "/xmlrpc.php"] [unique_id "altWqbri1Y8vPyzLdbQa4gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-18 09:20:28 (8 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 integrantservices.com	2026-07-17 11:51:30 (1 day ago)	(wordpress) Failed wordpress login from 157.15.158.247 (IN/India/-)	Brute-Force
🇳🇱 Site.eu	2026-07-17 06:55:22 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-17 05:52:42 (1 day ago)	[redacted] 157.15.158.247 - - [17/Jul/2026:07:52:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 157.15.158.247 - - [17/Jul/2026:07:52:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 157.15.158.247 - - [17/Jul/2026:07:52:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 157.15.158.247 - - [17/Jul/2026:07:52:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 157.15.158.247 - - [17/Jul/2026:07:52:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 157.15.158.247 - - [17/Jul/2026:07:52:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇳🇱 javierin	2026-07-17 05:15:42 (1 day ago)	157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:10 +0000] "POST /xmlrpc.php HTTP/1.1" 503 192 ... show more 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:10 +0000] "POST /xmlrpc.php HTTP/1.1" 503 19273 "-" "WordPress.com; https://wordpress.com" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:17 +0000] "POST /xmlrpc.php HTTP/1.1" 503 18297 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:28 +0000] "POST /xmlrpc.php HTTP/1.1" 503 18269 "-" "WordPress.com; https://wordpress.com" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:38 +0000] "POST /xmlrpc.php HTTP/1.1" 503 18269 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:49 +0000] "POST /xmlrpc.php HTTP/1.1" 503 18282 "-" "Jetpack/12.5; WordPress/6.3; http://site90432092.com" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:14:59 +0000] "POST /xmlrpc.php HTTP/1.1" 503 18269 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 157.15.158.247 - mamaexperta.es - - [17/Jul/2026:05:15 ... show less	Brute-Force Web App Attack
Anonymous	2026-07-16 11:48:57 (2 days ago)	(wordpress) Failed wordpress login from 157.15.158.247 (IN/India/-)	Brute-Force
🇫🇷 dynamix	2026-07-16 11:17:18 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇮 YF	2026-07-16 11:00:27 (2 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 10:34:41 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:34:33.584193 2026] [security2:error] [pid 27331:tid 27331] [client 157.15.158.247:57966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.158.247 (+1 hits since last alert)\|radicalchange.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "radicalchange.org"] [uri "/xmlrpc.php"] [unique_id "alizuZJyNvvtir1-j40LHQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 06:43:05 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:42:59.590944 2026] [security2:error] [pid 17962:tid 17962] [client 157.15.158.247:52642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.158.247 (+1 hits since last alert)\|cubbylure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cubbylure.com"] [uri "/xmlrpc.php"] [unique_id "alh9c7Rn-Snk3P6mMN5fegAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 05:41:03 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:40:55.468023 2026] [security2:error] [pid 24904:tid 24904] [client 157.15.158.247:50275] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.158.247 (+1 hits since last alert)\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yerevanpress.am"] [uri "/xmlrpc.php"] [unique_id "alhu57T6lPY2ThinHNUQ-gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-15 10:58:10 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-15 09:01:47 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 08:57:55 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 157.15.158.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 04:57:47.391113 2026] [security2:error] [pid 9251:tid 9251] [client 157.15.158.247:51144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.158.247 (+1 hits since last alert)\|thepercussionworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thepercussionworks.com"] [uri "/xmlrpc.php"] [unique_id "aldLiwAm1z1Xpct9OoyVCwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.31

🇺🇸 162.241.132.172

🇸🇬 103.20.122.54

🇸🇪 46.59.68.211

🇳🇱 45.148.10.240

🇯🇵 40.81.194.185

🇸🇬 152.32.218.149

🇰🇷 114.203.87.250

🇨🇳 111.225.148.37

🇺🇸 68.3.147.172

🇬🇧 51.89.129.21

🇬🇧 37.10.113.217

🇺🇸 2a09:bac1:76a0:518::289:23

🇬🇧 2a06:4880:2000::37

🇫🇷 194.163.145.41

🇺🇸 192.222.54.212

🇫🇮 147.185.133.124

🇮🇳 122.166.154.21

🇻🇳 117.0.21.154

🇭🇰 101.36.110.164