AbuseIPDB » 157.20.35.19
157.20.35.19
This IP was reported 8 times. Confidence of
Abuse
is 42% : ?
ISP
PT Desible Eradata Komunikasi
Usage Type
Fixed Line ISP
ASN
AS152424
Domain Name
eranet.id
Country
🇮🇩
Indonesia
City
VILLA PERMATA HIJAU, West Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 157.20.35.19 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
157.20.35.19 was first reported on
June 10th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-25 02:35:24
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 157.20.35.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 157.20.35.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:35:18.994917 2026] [security2:error] [pid 9947:tid 9947] [client 157.20.35.19:64358] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 157.20.35.19 (+1 hits since last alert)|thebrotherhoodlounge.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thebrotherhoodlounge.com"] [uri "/xmlrpc.php"] [unique_id "ajyT5vKmnDTJ6vLk_SVPagAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
sasbau
2026-06-25 02:04:00
(1 day ago)
157.20.35.19 - - [25/Jun/2026:04:03:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by Wo ...
show more
157.20.35.19 - - [25/Jun/2026:04:03:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
157.20.35.19 - - [25/Jun/2026:04:03:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
157.20.35.19 - - [25/Jun/2026:04:04:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 01:38:46
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 157.20.35.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 157.20.35.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 21:38:37.986312 2026] [security2:error] [pid 5740:tid 5740] [client 157.20.35.19:50461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 157.20.35.19 (+1 hits since last alert)|opticasprisma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "opticasprisma.com"] [uri "/xmlrpc.php"] [unique_id "ajyGnRUz6_p6HZesOpDW7AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
noise.agency
2026-06-25 00:58:02
(1 day ago)
(wordpress) Failed wordpress login from 157.20.35.19 (ID/Indonesia/-)
Brute-Force
2026-06-15 02:06:34
(1 week ago)
(wordpress) Failed wordpress login from 157.20.35.19 (ID/Indonesia/-)
Brute-Force
🇫🇷
dynamix
2026-06-15 02:05:23
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇮🇩
sockominfo
2026-06-14 17:00:52
(1 week ago)
User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. C ...
show more
User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇩🇪
Vegascosmetics
2026-06-10 08:36:47
(2 weeks ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: