JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.253.27.55

103.253.27.55 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 82%: ?

82%

ISP	AXGN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133210
Hostname(s)	ip-253-27-55.axgn.com
Domain Name	axgn.com.sg
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.253.27.55

Whois 103.253.27.55

IP Abuse Reports for 103.253.27.55:

This IP address has been reported a total of 35 times from 17 distinct sources. 103.253.27.55 was first reported on August 3rd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-08-24 14:54:10 (3 hours ago)	Type: credential_attack Risk: 60 Events: 214003 Evidence: - Repeated authentication attack activity ... show more Type: credential_attack Risk: 60 Events: 214003 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified show less	Brute-Force SSH
🇫🇷 dynamix	2026-08-24 13:18:23 (4 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-08-24 08:05:00 (9 hours ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-24 03:58:22 (14 hours ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇮🇩 soc-yk	2026-08-24 02:54:09 (15 hours ago)	Type: credential_attack Risk: 58 Events: 146869 Evidence: - Repeated authentication attack activity ... show more Type: credential_attack Risk: 58 Events: 146869 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified show less	Brute-Force SSH
🇨🇭 lufi	2026-08-24 01:24:54 (16 hours ago)	2026-08-24 03:24:54 103.253.27.55: blacklisted Pattern: wp-includes/ ...	Web Spam Brute-Force Hacking Web App Attack
🇵🇱 ketovoila.pl	2026-08-24 01:07:20 (16 hours ago)	ketovoila.pl WordPress login/xmlrpc probing: hits=9; unique_paths=8; sample_paths=/xmlrpc.php?rsd,/2 ... show more ketovoila.pl WordPress login/xmlrpc probing: hits=9; unique_paths=8; sample_paths=/xmlrpc.php?rsd,/2020/wp-includes/wlwmanifest.xml,/blog/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"; window=2026-08-24T01:07:20Z..2026-08-24T01:19:08Z show less	Brute-Force Web App Attack
🇮🇩 soc-yk	2026-08-24 01:06:09 (16 hours ago)	Type: suspicious_network_activity Risk: 57 Events: 195349 Evidence: - Persistent suspicious network ... show more Type: suspicious_network_activity Risk: 57 Events: 195349 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇫🇷 dynamix	2026-08-22 05:17:48 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-08-22 02:30:42 (2 days ago)	9.749 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-21 22:54:56 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 103.253.27.55 (ip-253-27-55.axgn.com): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 103.253.27.55 (ip-253-27-55.axgn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 18:54:51.415421 2026] [security2:error] [pid 18716:tid 18716] [client 103.253.27.55:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|southernbroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southernbroadcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aojXO-XAAsUvfI4Z_aMhQAAAAAY"], referer: https://incentiv.io:443//blog//wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 lufi	2026-08-21 03:59:25 (3 days ago)	2026-08-21 05:59:24 103.253.27.55: blacklisted Pattern: wp-includes/ ...	Web Spam Brute-Force Hacking Web App Attack
🇵🇱 ketovoila.pl	2026-08-21 03:31:22 (3 days ago)	ketovoila.pl WordPress reconnaissance scan: hits=13; unique_paths=11; sample_paths=/2019/wp-includes ... show more ketovoila.pl WordPress reconnaissance scan: hits=13; unique_paths=11; sample_paths=/2019/wp-includes/wlwmanifest.xml,/2020/wp-includes/wlwmanifest.xml,/blog/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"; window=2026-08-21T03:31:22Z..2026-08-21T03:51:21Z show less	Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-08-20 23:40:54 (3 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇵🇱 ketovoila.pl	2026-08-20 11:13:05 (4 days ago)	ketovoila.pl WordPress reconnaissance scan: hits=14; unique_paths=11; sample_paths=/2019/wp-includes ... show more ketovoila.pl WordPress reconnaissance scan: hits=14; unique_paths=11; sample_paths=/2019/wp-includes/wlwmanifest.xml,/2020/wp-includes/wlwmanifest.xml,/blog/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"; window=2026-08-20T11:13:05Z..2026-08-21T03:51:21Z show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 2607:f8b0:4023:2407::122

🇺🇸 2607:f8b0:4001:c13::126

🇹🇳 197.238.11.92

🇬🇧 195.96.139.116

🇷🇴 193.46.255.86

🇺🇦 176.103.11.188

🇺🇸 170.187.145.209

🇳🇱 86.54.31.44

🇲🇽 68.155.159.216

🇬🇧 35.177.100.227

🇺🇸 35.144.171.35

🇺🇸 20.114.175.89

🇮🇳 2406:da1a:daa:f401:8d28:a4d1:b860:e26b

🇺🇸 209.207.191.193

🇩🇪 194.187.176.33

🇧🇷 177.98.167.180

🇺🇸 165.154.182.187

🇵🇭 165.154.59.90

🇰🇪 102.211.145.161

🇺🇸 99.45.236.27