JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.157.55.192

5.157.55.192 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 30%: ?

30%

ISP	Inter Connects Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58065
Domain Name	interconnects.us
Country	🇪🇪 Estonia
City	Tallinn, Harjumaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.157.55.192

Whois 5.157.55.192

IP Abuse Reports for 5.157.55.192:

This IP address has been reported a total of 17 times from 7 distinct sources. 5.157.55.192 was first reported on September 3rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-08-14 22:06:49 (2 days ago)	2026-08-10 03:17:12,465 fail2ban.actions [1112]: NOTICE [error-bots] Ban 5.157.55.192 2026-0 ... show more 2026-08-10 03:17:12,465 fail2ban.actions [1112]: NOTICE [error-bots] Ban 5.157.55.192 2026-08-10 03:17:12,465 fail2ban.actions [1112]: NOTICE [error-bots] Ban 5.157.55.192 2026-08-10 03:17:12,465 fail2ban.actions [1112]: NOTICE [error-bots] Ban 5.157.55.192 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-09 07:56:47 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-08-07 14:34:20 (1 week ago)	[Sat Aug 08 00:34:19.156837 2026] [security2:error] [pid 667300] [client 5.157.55.192:53912] [client ... show more [Sat Aug 08 00:34:19.156837 2026] [security2:error] [pid 667300] [client 5.157.55.192:53912] [client 5.157.55.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "anXs67_jw6tgPTiyW2RC2wAAAAk"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇲🇾 Rizzy	2026-08-06 08:25:50 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇭 4server	2026-07-30 17:26:32 (2 weeks ago)	[ThuJul3019:26:27.8263602026][security2:error][pid3525256:tid3525545][client5.157.55.192:0]ModSecuri ... show more [ThuJul3019:26:27.8263602026][security2:error][pid3525256:tid3525545][client5.157.55.192:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.vetreriaperletti.ch\"][uri\"/xmlrpc.php\"][unique_id\"amuJQ2gs8sFot04m76fuYgAAANU\"]\,referer:https://www.vetreriaperletti.ch/ show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-07-28 19:33:13 (2 weeks ago)	[Wed Jul 29 05:33:12.475341 2026] [security2:error] [pid 287961] [client 5.157.55.192:50104] [client ... show more [Wed Jul 29 05:33:12.475341 2026] [security2:error] [pid 287961] [client 5.157.55.192:50104] [client 5.157.55.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "amkD-ElVjxbNu42dpRzIFAAAAAM"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇲🇾 Rizzy	2026-07-28 04:58:38 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-27 00:58:53 (3 weeks ago)	[Mon Jul 27 10:58:52.256556 2026] [security2:error] [pid 42896] [client 5.157.55.192:47009] [client ... show more [Mon Jul 27 10:58:52.256556 2026] [security2:error] [pid 42896] [client 5.157.55.192:47009] [client 5.157.55.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "amatTFoECvyvU0UTWY-DvQAAAAc"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇲🇾 Rizzy	2026-07-26 21:21:54 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-26 01:46:48 (3 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇨🇭 4server	2026-07-25 21:16:13 (3 weeks ago)	[SatJul2523:16:06.8264032026][security2:error][pid1281075:tid1281318][client5.157.55.192:0]ModSecuri ... show more [SatJul2523:16:06.8264032026][security2:error][pid1281075:tid1281318][client5.157.55.192:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.vetreriaperletti.ch\"][uri\"/xmlrpc.php\"][unique_id\"amUnlq_AyjhmVMwPxDU8gwAAAQI\"]\,referer:https://www.vetreriaperletti.ch/ show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-07-24 03:24:21 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-22 15:06:16 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇱🇻 garmtech.com	2025-09-24 02:39:45 (10 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-39.5.157.55.192.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-39.5.157.55.192.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-09-23 20:06:39 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.64

🇬🇧 213.166.84.35

🇺🇸 209.50.174.75

🇨🇴 190.60.43.27

🇸🇬 162.158.189.7

🇺🇸 157.230.95.191

🇺🇸 137.184.121.86

🇨🇳 101.71.52.69

🇷🇴 80.94.92.234

🇧🇪 34.156.108.47

🇩🇪 2.27.4.125

🇹🇼 198.235.24.8

🇦🇷 181.171.76.56

🇸🇪 176.10.203.54

🇫🇷 172.71.130.171

🇫🇮 147.185.133.148

🇺🇸 147.185.132.25

🇺🇸 143.198.238.168

🇨🇳 123.10.29.108

🇳🇱 77.91.71.11