JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.20.253.28

157.20.253.28 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 26%: ?

26%

ISP	PT Majoe Praka Perkasa
Usage Type	Fixed Line ISP
ASN	AS138089
Hostname(s)	ptr-157-20-253-28.gmdp.net.id
Domain Name	mpp.web.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.20.253.28

Whois 157.20.253.28

IP Abuse Reports for 157.20.253.28:

This IP address has been reported a total of 19 times from 17 distinct sources. 157.20.253.28 was first reported on February 11th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-06-19 14:23:51 (1 day ago)	LF_CPANEL: (cpanel) Failed cPanel login from 157.20.253.28 (ID/Indonesia/ptr-157-20-253-28.gmdp.net. ... show more LF_CPANEL: (cpanel) Failed cPanel login from 157.20.253.28 (ID/Indonesia/ptr-157-20-253-28.gmdp.net.id): 1 in the last 3600 secs show less	Brute-Force
🇩🇪 Vegascosmetics	2026-06-18 14:04:36 (2 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-06 13:10:07 (2 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 stechusa	2026-05-06 05:06:58 (1 month ago)	[Askari] \| country=ID \| Behavior: HTTP/1.1 over TLS, URL template abuse, Outdated browser, Concurren ... show more [Askari] \| country=ID \| Behavior: HTTP/1.1 over TLS, URL template abuse, Outdated browser, Concurrent page load during attack, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-05-06 05:06:58 (1 month ago)	ELEVATED_THREAT \| country=ID \| ASN=PT.Global Media Data Prima \| AbuseIPDB=19% \| 13 IPs targeting /br ... show more ELEVATED_THREAT \| country=ID \| ASN=PT.Global Media Data Prima \| AbuseIPDB=19% \| 13 IPs targeting /brand/satco-products-inc/satco-light-bulbs.html \| Facet request during elevated threat (facet_ratio=0.74, unique_ips=168) \| URL template shared by 5 IPs: /brand/satco-products-inc.html?bulb_base=&bulb_shape=&bulb_type=*&mode=list&p= show less	Bad Web Bot DDoS Attack
🇫🇷 Sklurk	2026-04-30 00:08:42 (1 month ago)	Web App Attack	Web App Attack
🇹🇼 kk_it_man	2026-04-21 19:10:27 (1 month ago)		Hacking
🇺🇸 TPI-Abuse	2026-04-04 23:10:52 (2 months ago)	(mod_security) mod_security (id:211030) triggered by 157.20.253.28 (ptr-157-20-253-28.gmdp.net.id): ... show more (mod_security) mod_security (id:211030) triggered by 157.20.253.28 (ptr-157-20-253-28.gmdp.net.id): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 19:10:45.274814 2026] [security2:error] [pid 6473:tid 6473] [client 157.20.253.28:40282] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|watermarks.info\|F\|2"] [data "Matched Data: )>(/! found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "watermarks.info"] [uri "/bus.php"] [unique_id "adGadeyn1-C1tON8_quP6wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-30 04:58:28 (4 months ago)	2026-01-30T05:58:27.639161+01:00 vps kernel: [31489385.055397] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-01-30T05:58:27.639161+01:00 vps kernel: [31489385.055397] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=157.20.253.28 DST=54.37.14.118 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=20556 DF PROTO=TCP SPT=23425 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇸🇪 KIDOS	2025-10-21 19:32:53 (7 months ago)	malicious activity, botnet	Web App Attack
🇷🇺 ago.su	2025-10-09 16:29:00 (8 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack
🇺🇸 SuperEvilLuke	2025-10-07 23:55:31 (8 months ago)	Malicious activity detected from 138089 GMDP-AS-ID PT.Global Media Data Prima towards host dash.embo ... show more Malicious activity detected from 138089 GMDP-AS-ID PT.Global Media Data Prima towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:31Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 Audir8 \| RRHosting	2025-10-05 20:55:10 (8 months ago)	2025-10-05T20:47:55.547179rrhostingusa wings[2058776]: 2025/10/05 20:47:54 http: TLS handshake error ... show more 2025-10-05T20:47:55.547179rrhostingusa wings[2058776]: 2025/10/05 20:47:54 http: TLS handshake error from 157.20.253.28:37028: EOF 2025-10-05T20:52:27.152745rrhostingusa wings[2058776]: 2025/10/05 20:52:23 http: TLS handshake error from 157.20.253.28:42686: write tcp 10.0.0.206:8443->157.20.253.28:42686: write: broken pipe 2025-10-05T20:53:26.468759rrhostingusa wings[2058776]: 2025/10/05 20:53:22 http: TLS handshake error from 157.20.253.28:44370: EOF ... show less	Web App Attack
Anonymous	2025-10-03 12:00:22 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 check-the-sum.fr	2025-10-03 11:47:46 (8 months ago)	Port Scanning	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 168.138.197.172

🇷🇴 80.94.92.182

🇭🇺 78.131.0.114

🇪🇹 196.191.151.172

🇳🇱 188.166.54.221

🇩🇪 185.176.94.38

🇧🇷 177.104.185.182

🇩🇪 167.94.146.77

🇺🇸 162.216.150.68

🇮🇷 89.43.88.61

🇸🇬 47.82.13.54

🇨🇳 14.18.113.233

🇺🇸 170.199.228.113

🇺🇸 165.154.182.179

🇺🇸 138.197.16.14

🇺🇸 64.50.183.57

🇺🇸 216.25.89.130

🇨🇴 204.199.116.180

🇫🇮 178.20.210.208

🇺🇸 146.190.151.103