JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.15.235.48

157.15.235.48 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 44%: ?

44%

ISP	K-anandraj Inet Solutions Private Limited
Usage Type	Fixed Line ISP
ASN	AS151750
Domain Name	inetsolutions.in
Country	🇮🇳 India
City	Bhiwandi, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.15.235.48

Whois 157.15.235.48

IP Abuse Reports for 157.15.235.48:

This IP address has been reported a total of 17 times from 11 distinct sources. 157.15.235.48 was first reported on August 1st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-06-30 03:31:29 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-06-30 03:19:16 (2 weeks ago)	(wordpress) Failed wordpress login from 157.15.235.48 (IN/India/-/-/-/[redacted])	Brute-Force
Anonymous	2026-06-30 02:52:39 (2 weeks ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-30 02:52:39 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 22:52:34.241372 2026] [security2:error] [pid 8124:tid 8124] [client 157.15.235.48:57820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.235.48 (+1 hits since last alert)\|gellertdealers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gellertdealers.com"] [uri "/xmlrpc.php"] [unique_id "akMvcis7BR_r4ESsdY1v0QAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 02:47:04 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 01:46:06 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 21:46:00.265427 2026] [security2:error] [pid 3008:tid 3008] [client 157.15.235.48:62321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.235.48 (+1 hits since last alert)\|braintechsoftwaresolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "braintechsoftwaresolutions.com"] [uri "/xmlrpc.php"] [unique_id "akMf2J8KtA7284A1cNutdQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 11:28:08 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 07:28:04.335759 2026] [security2:error] [pid 26691:tid 26691] [client 157.15.235.48:49258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.235.48 (+1 hits since last alert)\|innovacionesnimba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "innovacionesnimba.com"] [uri "/xmlrpc.php"] [unique_id "akJWxNRDmfZLisK7IA9c7gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-29 10:11:24 (2 weeks ago)	(wordpress) Failed wordpress login from 157.15.235.48 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-29 09:39:53 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 05:39:50.486433 2026] [security2:error] [pid 22268:tid 22268] [client 157.15.235.48:64504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.235.48 (+1 hits since last alert)\|btsalesrep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "btsalesrep.com"] [uri "/xmlrpc.php"] [unique_id "akI9ZhZly2TuU-12hLQb7wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-06-29 09:36:59 (2 weeks ago)	Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 09:04:09 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 157.15.235.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 05:04:02.366813 2026] [security2:error] [pid 12638:tid 12638] [client 157.15.235.48:64702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 157.15.235.48 (+1 hits since last alert)\|madisonmedia.ai\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "madisonmedia.ai"] [uri "/xmlrpc.php"] [unique_id "akI1Ag9zchGkWl0VS_UhJwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-06-29 08:18:55 (2 weeks ago)	157.15.235.48 - - [29/Jun/2026:10:17:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack/12. ... show more 157.15.235.48 - - [29/Jun/2026:10:17:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack/12.1; WordPress/6.4; http://site45918065.com" 157.15.235.48 - - [29/Jun/2026:10:18:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3467 "-" "WordPress.com; https://wordpress.com" 157.15.235.48 - - [29/Jun/2026:10:18:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3466 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-29 07:16:39 (2 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 dynamix	2026-06-29 07:03:40 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 exxos	2025-08-28 10:05:25 (10 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.200

🇺🇸 174.138.44.8

🇧🇩 163.47.36.206

🇭🇰 152.32.239.15

🇺🇸 147.185.132.12

🇹🇷 94.154.43.178

🇺🇸 45.79.191.178

🇩🇪 43.228.157.80

🇬🇧 35.203.210.27

🇺🇸 2a03:2880:16ff:5e::

🇹🇷 195.33.200.58

🇺🇸 172.252.13.101

🇸🇪 158.174.211.17

🇩🇰 158.173.46.145

🇭🇰 103.210.21.242

🇹🇷 78.181.195.73

🇺🇸 72.14.147.161

🇺🇸 66.132.186.206

🇺🇸 45.156.129.92

🇳🇱 45.142.193.161