JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.253.27.124

103.253.27.124 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 53%: ?

53%

ISP	AXGN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133210
Hostname(s)	na3sys009amo112.piousdiet.com
Domain Name	axgn.com.sg
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.253.27.124

Whois 103.253.27.124

IP Abuse Reports for 103.253.27.124:

This IP address has been reported a total of 87 times from 18 distinct sources. 103.253.27.124 was first reported on March 12th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-09-02 22:22:59 (23 hours ago)	WP Login Scan Activities: "2026-09-03T05:22:59.623+07:00" "/wp-login.php" "103.253.27.124" "Mozilla/ ... show more WP Login Scan Activities: "2026-09-03T05:22:59.623+07:00" "/wp-login.php" "103.253.27.124" "Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0" show less	Web App Attack
🇮🇩 bps-statistics	2026-09-02 19:03:15 (1 day ago)	WP Login Scan Activities: "2026-09-03T02:03:15.739+07:00" "" "103.253.27.124" "Mozilla/5.0 (Macintos ... show more WP Login Scan Activities: "2026-09-03T02:03:15.739+07:00" "" "103.253.27.124" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" show less	Web App Attack
Anonymous	2026-09-01 21:23:11 (2 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/admin-ajax.php	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 15:55:41 (2 days ago)	(mod_security) mod_security (id:243420) triggered by 103.253.27.124 (na3sys009amo112.piousdiet.com): ... show more (mod_security) mod_security (id:243420) triggered by 103.253.27.124 (na3sys009amo112.piousdiet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 11:55:35.320108 2026] [security2:error] [pid 30913:tid 30929] [client 103.253.27.124:55283] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:redirect" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|colegiopiramide.edu.gt\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "colegiopiramide.edu.gt"] [uri "/wp-admin/admin-ajax.php"] [unique_id "apb1dmvnmC6gYZ5wcnFavQAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 bps-statistics	2026-09-01 13:11:00 (2 days ago)	WP Admin Scan Activities: "2026-09-01T20:11:00.624+07:00" "/wp-admin/admin-ajax.php" "103.253.27.124 ... show more WP Admin Scan Activities: "2026-09-01T20:11:00.624+07:00" "/wp-admin/admin-ajax.php" "103.253.27.124" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 bps-statistics	2026-08-31 07:27:37 (3 days ago)	WP Admin Scan Activities: "2026-08-31T14:27:37.933+07:00" "/wp-admin/admin-ajax.php" "103.253.27.124 ... show more WP Admin Scan Activities: "2026-08-31T14:27:37.933+07:00" "/wp-admin/admin-ajax.php" "103.253.27.124" "python-requests/2.34.2" show less	Web App Attack
🇭🇳 unph	2026-08-19 22:52:58 (2 weeks ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇪🇸 librebit	2026-08-19 05:41:41 (2 weeks ago)	Brute force	Brute-Force
🇨🇦 Anytech	2026-08-14 21:21:03 (2 weeks ago)	Blocked by ConnMonitor	Web App Attack Bad Web Bot
🇨🇿 SystemAdmin	2026-08-12 15:15:54 (3 weeks ago)	Doing bad things...	Web App Attack
🇧🇪 Ivo Vynckier	2026-08-11 12:48:00 (3 weeks ago)	103.253.27.124 - - [10/Aug/2026:19:03:33 +0200] "GET /templates/cassiopeia/templateDetails.xml HTTP/ ... show more 103.253.27.124 - - [10/Aug/2026:19:03:33 +0200] "GET /templates/cassiopeia/templateDetails.xml HTTP/1.1" 404 2155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.253.27.124 - - [10/Aug/2026:19:03:33 +0200] "GET /wp-json/ HTTP/1.1" 404 2155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.253.27.124 - - [10/Aug/2026:19:03:34 +0200] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 2155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Web App Attack
🇬🇧 consul.to	2026-08-10 16:11:12 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 SX Communications	2026-08-10 12:58:32 (3 weeks ago)	Web vulnerability scanning / probing from 103.253.27.124: automated requests for CMS admin paths, lo ... show more Web vulnerability scanning / probing from 103.253.27.124: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 2 hits; paths: /wp-json/, /wp-includes/css/buttons.css. show less	Port Scan Hacking Web App Attack
🇨🇦 1gz	2026-08-10 10:05:05 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 consul.to	2026-08-09 07:27:23 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 193.111.77.237

🇱🇹 62.60.130.36

🇮🇳 43.228.220.86

🇬🇪 5.152.58.234

🇰🇷 220.124.253.199

🇨🇳 218.23.192.91

🇨🇦 212.32.48.83

🇿🇦 197.90.137.241

🇨🇴 185.75.12.30

🇷🇴 185.19.40.61

🇸🇬 114.119.130.175

🇩🇪 94.159.108.238

🇺🇦 92.118.76.223

🇺🇸 91.230.168.30

🇨🇦 85.217.149.37

🇱🇹 77.90.185.107

🇯🇵 35.189.153.93

🇭🇰 20.205.10.93

🇺🇸 8.234.226.91

🇷🇴 2.57.121.25