AbuseIPDB » 5.157.52.155
5.157.52.155
This IP was reported 8 times. Confidence of
Abuse
is 25% : ?
ISP
Inter Connects Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS57858
Domain Name
interconnects.us
Country
🇸🇪
Sweden
City
Stockholm, Stockholm
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 5.157.52.155 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
5.157.52.155 was first reported on
February 26th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
ipblock.com
2026-08-21 19:07:00
(1 day ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-18 16:37:09
(4 days ago)
[Wed Aug 19 02:37:09.272928 2026] [security2:error] [pid 264847] [client 5.157.52.155:53153] [client ...
show more
[Wed Aug 19 02:37:09.272928 2026] [security2:error] [pid 264847] [client 5.157.52.155:53153] [client 5.157.52.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "aoSKNYvE0ZGeoAeJTMW7KwAAAAw"], referer: https://paulshipley.com.au/xmlrpc.php?rsd
...
show less
Web App Attack
🇲🇾
Rizzy
2026-08-18 15:39:41
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-18 05:30:27
(5 days ago)
[Tue Aug 18 15:30:26.804715 2026] [security2:error] [pid 208311] [client 5.157.52.155:57284] [client ...
show more
[Tue Aug 18 15:30:26.804715 2026] [security2:error] [pid 208311] [client 5.157.52.155:57284] [client 5.157.52.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/wp-content/plugins/woo-conditional-shipping-pro/frontend/css/woo-conditional-shipping.css"] [unique_id "aoPt8ogXYvmY95qhxszLYAAAAAU"], referer: https://ccideas.com.au/my-account/?action=register
...
show less
Web App Attack
🇺🇸
ipblock.com
2026-08-15 13:55:00
(1 week ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-08-14 15:52:00
(1 week ago)
IPBlock protected site ID [4055-d][s=01].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-06-24 08:53:00
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from SE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
HandyTreff.de
2026-02-26 01:33:25
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.773 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.773 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0
show less
Web App Attack
Bad Web Bot
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: