JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.20.51.162

157.20.51.162 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	VAST WEB INDIA PRIVATE LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS140641
Hostname(s)	staging.raajkart.com
Domain Name	vastwebindia.com
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.20.51.162

Whois 157.20.51.162

IP Abuse Reports for 157.20.51.162:

This IP address has been reported a total of 38 times from 32 distinct sources. 157.20.51.162 was first reported on July 5th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sonot	2026-07-06 14:28:53 (1 minute ago)	Blocked by UFW on mail [2087/tcp] \| SPT: 47425 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [2087/tcp] \| SPT: 47425 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇷 setupgr	2026-07-06 14:03:59 (26 minutes ago)	157.20.51.162 (IN/India/Rajasthan/Laxmangarh/-/[AS140641 YOTTA YOTTA NETWORK SERVICES PRIVATE LIMITE ... show more 157.20.51.162 (IN/India/Rajasthan/Laxmangarh/-/[AS140641 YOTTA YOTTA NETWORK SERVICES PRIVATE LIMITED]), 2 distributed cpanel attacks on account [root] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-07-06 17:03:55 +0300] info [whostmgrd] 157.20.51.162 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user root) has locked out IP 157.20.51.162 [2026-07-06 08:11:27 +0300] info [whostmgrd] 68.178.167.214 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: brute force attempt (user root) has locked out IP 68.178.167.214 IP Addresses Blocked: show less	Port Scan
Anonymous	2026-07-06 13:44:31 (45 minutes ago)	[Mon Jul 06 15:44:30.339389 2026] [:error] [pid 142670:tid 142670] [client 157.20.51.162:48516] ModS ... show more [Mon Jul 06 15:44:30.339389 2026] [:error] [pid 142670:tid 142670] [client 157.20.51.162:48516] ModSecurity: Warning. Matched "Operator `Rx' with parameter `\\$(?:\$(?:[^\$]+\|\$[^\$]+\\))\\)\|\\{[^\\}]+\\}\|\\[[^\\]]\\])\|[<>]\$[^\$]+\\)\|/[0-9A-Z_a-z]\\[[^\\]]+\\]' against variable `ARGS:0' (Value: `{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\\"then\\":\\"$B1337\\"}","_ (277 characters omitted)' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "297"] [id "932130"] [rev ""] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: ${res} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(pwd) (172 characters omitted)"] [severity "2"] [ver "OWASP_CRS/4.29.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [ ... show less	Web App Attack
🇫🇮 mnazibo	2026-07-06 11:45:18 (2 hours ago)	Date: Jul 06 14:40:32 2026 EAT \| Reported IP: 157.20.51.162 mod_security \| id: 920350 932130 933135 ... show more Date: Jul 06 14:40:32 2026 EAT \| Reported IP: 157.20.51.162 mod_security \| id: 920350 932130 933135 934100 934130 942151 942550 949110 \| IN/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Remote Command Execution: Unix Shell Expression Found; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; SQL Injection Attack: SQL function name detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 48) show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 check-the-sum.fr	2026-07-06 11:22:33 (3 hours ago)	Port Scanning	Port Scan
🇺🇸 MPL	2026-07-06 10:58:47 (3 hours ago)	tcp/2087	Port Scan
🇺🇸 MPL	2026-07-06 10:36:25 (3 hours ago)	tcp ports: 443,2087 (3 or more attempts)	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-06 10:31:34 (3 hours ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Web Attack)	Web App Attack Port Scan Hacking
🇺🇸 xmission.com	2026-07-06 10:13:42 (4 hours ago)	Blocked by UFW (TCP on 443) Source port: 52889 TTL: 241 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 52889 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 157.20.51.162) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇭 Kepler-1649c	2026-07-06 10:05:15 (4 hours ago)	Detected Attack: React.Server.Components.react-flight.Remote.Code.Execution	Hacking
🇺🇸 chronos	2026-07-06 07:49:36 (6 hours ago)	[AUTORAVALT][[06/07/2026 - 04:49:35 -03:00 UTC] Attack from [Asia Pacific Network Information Centre ... show more [AUTORAVALT][[06/07/2026 - 04:49:35 -03:00 UTC] Attack from [Asia Pacific Network Information Centre] [157.20.51.162]-[RANGE:157.20.51.0 - 157.20.51.255] [staging.raajkart.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other C] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇩🇪 sdos.es	2026-07-06 06:33:52 (7 hours ago)	"Remote Command Execution: Unix Shell Expression Found - Matched Data: ${res} 307 `}) _chunks:$q2 _f ... show more "Remote Command Execution: Unix Shell Expression Found - Matched Data: ${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}} found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(pwd).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}" show less	Web App Attack
🇩🇪 ghostwarriors	2026-07-06 05:50:04 (8 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 sumnone	2026-07-06 05:31:22 (8 hours ago)	Port probing on unauthorized port 2087	Port Scan Hacking Exploited Host
🇮🇪 AutosOnShow	2026-07-06 05:26:05 (9 hours ago)	blocked for webapp attack \| path requested: / \| seen at 2026-07-06 05:25:38.179 \|	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.33

🇫🇷 51.83.10.134

🇺🇸 44.154.167.139

🇬🇧 176.58.125.90

🇸🇬 152.42.178.76

🇺🇸 142.93.4.52

🇺🇸 44.107.74.76

🇺🇸 34.106.166.234

🇭🇰 20.247.24.165

🇩🇪 152.53.42.70

🇺🇸 135.237.126.194

🇨🇳 120.48.154.88

🇹🇷 94.154.43.43

🇺🇸 44.246.102.92

🇵🇱 176.53.159.54

🇺🇸 44.235.171.109

🇭🇰 43.129.193.109

🇬🇧 31.59.33.15

🇧🇷 2400:cb00:1233:1000:65cf:4004:57ef:35cc

🇺🇸 147.182.183.153