JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.172.28.53

202.172.28.53 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 100%: ?

100%

ISP	DigiRock, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37907
Hostname(s)	s52.coreserver.jp
Domain Name	digirock.co.jp
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.172.28.53

Whois 202.172.28.53

IP Abuse Reports for 202.172.28.53:

This IP address has been reported a total of 181 times from 78 distinct sources. 202.172.28.53 was first reported on December 1st 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Coolnagour	2026-08-20 10:44:06 (3 hours ago)	http-probing: /wp-json/	Web App Attack
🇩🇪 nyt	2026-08-19 15:14:23 (22 hours ago)	Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF	Brute-Force Web App Attack
Anonymous	2026-08-19 06:53:32 (1 day ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 Marc	2026-08-19 06:24:43 (1 day ago)	202.172.28.53 - - [19/Aug/2026:06:40:14 +0200] "GET /wp-login.php HTTP/2.0" 200 3463 "-" "Mozilla/5. ... show more 202.172.28.53 - - [19/Aug/2026:06:40:14 +0200] "GET /wp-login.php HTTP/2.0" 200 3463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 202.172.28.53 - - [19/Aug/2026:06:40:16 +0200] "POST /wp-login.php HTTP/2.0" 200 3395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 202.172.28.53 - - [19/Aug/2026:07:39:18 +0200] "GET /wp-login.php HTTP/2.0" 200 3966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 202.172.28.53 - - [19/Aug/2026:07:39:19 +0200] "POST /wp-login.php HTTP/2.0" 200 4637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 202.172.28.53 - - [19/Aug/2026:08:24:43 +0200] "GET /wp-login.php HTTP/2.0" 200 3896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇬🇧 AvonleaConsulting	2026-08-18 22:59:54 (1 day ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-18 19:42:36 (1 day ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇫🇷 masterguru	2026-08-18 19:37:12 (1 day ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-195)	Hacking
🇹🇷 oalver	2026-08-18 16:45:37 (1 day ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200); path_signature: request to /wp-login.php (HTTP 499). First seen: 2026-08-06. Risk score: 100/100. show less	Web App Attack
🇮🇹 VHosting	2026-08-18 13:35:03 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 Marc	2026-08-18 13:26:00 (2 days ago)	202.172.28.53 - - [18/Aug/2026:15:12:32 +0200] "GET /wp-login.php HTTP/2.0" 200 3462 "-" "Mozilla/5. ... show more 202.172.28.53 - - [18/Aug/2026:15:12:32 +0200] "GET /wp-login.php HTTP/2.0" 200 3462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 202.172.28.53 - - [18/Aug/2026:15:12:33 +0200] "POST /wp-login.php HTTP/2.0" 200 3393 "https://www.heckmann-elektro.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 202.172.28.53 - - [18/Aug/2026:15:20:06 +0200] "GET /wp-login.php HTTP/2.0" 200 3534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 202.172.28.53 - - [18/Aug/2026:15:20:07 +0200] "POST /wp-login.php HTTP/2.0" 200 3393 "https://www.heckmann-elektro.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 202.172.28.53 - - [18/Aug/2026:15:25:59 +0200] "GET /wp-login.php HTTP/2.0" 200 3965 "-" "Mozilla/5.0 (Windows NT 10.0; Win6 show less	Brute-Force Web App Attack
🇺🇸 Lee Daniel	2026-08-18 13:12:04 (2 days ago)	[17/Aug/2026:21:44:12.195323 --0400] aoO47CERxYKWaCohS9kAIgAAAQI 202.172.28.53 54660 127.0.0.1 7081 ... show more [17/Aug/2026:21:44:12.195323 --0400] aoO47CERxYKWaCohS9kAIgAAAQI 202.172.28.53 54660 127.0.0.1 7081 [18/Aug/2026:09:12:03.084436 --0400] aoRaIulJ857vpaWrgbRYeQAAAMw 202.172.28.53 45546 127.0.0.1 7081 [18/Aug/2026:09:12:03.572746 --0400] aoRaI3mUH7IoIY5aebJ2LQAAAEQ 202.172.28.53 45974 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
🇩🇪 FeG Deutschland	2026-08-18 06:58:47 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇬🇧 AvonleaConsulting	2026-08-18 03:32:57 (2 days ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2026-08-18 02:46:49 (2 days ago)		Brute-Force Web App Attack
🇩🇪 maxpower	2026-08-17 23:24:34 (2 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 202.172.28.53 (JP/Japan/s52.coreserver.jp): 1 ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 202.172.28.53 (JP/Japan/s52.coreserver.jp): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 202.172.28.53 - - [18/Aug/2026:01:24:29 +0200] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug HTTP/2.0" 200 94 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=mail.ctpescara.it show less	Port Scan

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.53.19.44

🇲🇽 189.203.163.10

🇷🇺 185.37.57.155

🇺🇸 66.132.172.126

🇸🇬 47.79.119.223

🇳🇱 45.142.193.24

🇺🇸 40.121.179.100

🇺🇸 18.97.26.104

🇬🇧 2001:41d0:801:2000::1498

🇰🇷 211.246.160.21

🇧🇷 200.149.73.2

🇷🇺 89.253.14.246

🇳🇱 195.178.110.30

🇮🇹 188.215.94.151

🇳🇱 185.242.226.58

🇺🇸 163.41.112.89

🇳🇵 103.190.40.140

🇻🇳 103.180.134.39

🇺🇸 72.221.88.20

🇦🇺 40.82.214.8