AbuseIPDB » 175.157.142.232
175.157.142.232
This IP was reported 8 times. Confidence of
Abuse
is 38% : ?
ISP
Dialog Axiata PLC.
Usage Type
Mobile ISP
ASN
AS18001
Domain Name
dialog.lk
Country
🇱🇰
Sri Lanka
City
Maharagama, Western Province
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 175.157.142.232 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
175.157.142.232 was first reported on
July 6th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-06 13:19:55
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:19:53.030845 2026] [security2:error] [pid 1626:tid 1626] [client 175.157.142.232:50831] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.157.142.232 (+1 hits since last alert)|latentpixel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "latentpixel.com"] [uri "/xmlrpc.php"] [unique_id "akureeijt8gnX4gT-Fo0CQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-07-06 11:43:41
(1 day ago)
175.157.142.232 - - [06/Jul/2026:13:43:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3294 "-" "WordPress ...
show more
175.157.142.232 - - [06/Jul/2026:13:43:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3294 "-" "WordPress.com; https://wordpress.com" 175.157.142.232 - - [06/Jul/2026:13:43:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3294 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 175.157.142.232 - - [06/Jul/2026:13:43:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3296 "-" "Jetpack/13.0; WordPress/6.1; http://site49914803.com"
show less
Brute-Force
Web App Attack
2026-07-06 08:07:43
(1 day ago)
WordPress Brute Force
Brute-Force
🇺🇸
integrantservices.com
2026-07-06 07:44:10
(1 day ago)
(wordpress) Failed wordpress login from 175.157.142.232 (LK/Sri Lanka/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-06 05:29:38
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:29:30.613791 2026] [security2:error] [pid 18609:tid 18609] [client 175.157.142.232:64448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.157.142.232 (+1 hits since last alert)|kh6jim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kh6jim.com"] [uri "/xmlrpc.php"] [unique_id "aks9Ol8OmLHw32w9FQLdMQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-07-06 05:25:26
(2 days ago)
(xmlrpc_405) XMLRPC-Bot 405 175.157.142.232 (LK/Sri Lanka/-)
Hacking
🇺🇸
TPI-Abuse
2026-07-06 05:05:52
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:05:45.321167 2026] [security2:error] [pid 28796:tid 28796] [client 175.157.142.232:59818] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.157.142.232 (+1 hits since last alert)|konahawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "konahawaiirealty.com"] [uri "/xmlrpc.php"] [unique_id "aks3qVrCmb2ymPAI4dsR3QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 04:09:33
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 175.157.142.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:09:28.671055 2026] [security2:error] [pid 26933:tid 26933] [client 175.157.142.232:57087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.157.142.232 (+1 hits since last alert)|yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yogawithbubba.com"] [uri "/xmlrpc.php"] [unique_id "aksqePjd7E56R_azjE2rywAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: