JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.216.248.28

172.216.248.28 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 14%: ?

14%

ISP	Cyberzone S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209854
Domain Name	cyberzonehub.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.216.248.28

Whois 172.216.248.28

IP Abuse Reports for 172.216.248.28:

This IP address has been reported a total of 14 times from 13 distinct sources. 172.216.248.28 was first reported on April 19th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-25 12:51:40 (1 week ago)	ICS Labs identified 172.216.248.28 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇷🇴 gtheo99	2026-05-13 21:11:51 (1 month ago)	(cpanel) Failed cPanel login from 172.216.248.28 (PH/Philippines/-): 2 in the last 900 secs	Brute-Force Web App Attack
🇺🇸 graphics-muse.org	2026-05-07 16:16:11 (1 month ago)	Thu May 07 10:14:52.020587 2026172.216.248.28 - - [07/May/2026:10:14:51 -0600] "POST /xmlrpc.php HTT ... show more Thu May 07 10:14:52.020587 2026172.216.248.28 - - [07/May/2026:10:14:51 -0600] "POST /xmlrpc.php HTTP/1.1" 200 448 Thu May 07 10:14:52.020587 2026172.216.248.28 - - [07/May/2026:10:14:51 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3611 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" Thu May 07 10:15:33.808355 2026172.216.248.28 - - [07/May/2026:10:15:32 -0600] "POST /xmlrpc.php HTTP/1.1" 200 448 Thu May 07 10:15:33.808355 2026172.216.248.28 - - [07/May/2026:10:15:32 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3609 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/77.0.0.0 Safari/537.36" Thu May 07 10:16:10.685906 2026172.216.248.28 - - [07/May/2026:10:16:10 -0600] "POST /xmlrpc.php HTTP/1.1" 200 448 Thu May 07 10:16:10.685906 2026172.216.248.28 - - [07/May/2026:10:16:10 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-28 22:34:49 (2 months ago)		Brute-Force Web App Attack
🇩🇪 expandmade.com	2026-04-28 09:00:12 (2 months ago)	trolling for wp-login [28/Apr/2026:09:00:12 "POST /wp-login.php"]	Web App Attack
🇩🇪 big-cloud.nl	2026-04-28 04:00:09 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 tentwentyfour	2026-04-27 14:59:57 (2 months ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
🇨🇭 4server	2026-04-27 11:31:26 (2 months ago)	[MonApr2713:31:20.8558052026][security2:error][pid3483742:tid3483888][client172.216.248.28:0]ModSecu ... show more [MonApr2713:31:20.8558052026][security2:error][pid3483742:tid3483888][client172.216.248.28:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/wp-login.php\"][unique_id\"ae9JCFiPKBSE73aRUL6JIgAAAEg\"]\,referer:https://avvnicolaurbani.ch/wp-login.php show less	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-04-27 02:59:55 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 AlexEventfahrtenIPDB	2026-04-27 02:29:51 (2 months ago)	[Mon Apr 27 04:29:51.153967 2026] [authz_core:error] [pid 3300530:tid 3300530] [client 172.216.248.2 ... show more [Mon Apr 27 04:29:51.153967 2026] [authz_core:error] [pid 3300530:tid 3300530] [client 172.216.248.28:38982] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php [Mon Apr 27 04:29:51.501704 2026] [authz_core:error] [pid 3300530:tid 3300530] [client 172.216.248.28:38982] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php ... show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-04-27 01:00:19 (2 months ago)	(wordpress) Apache: Failed WordPress login from 172.216.248.28 (BR/Brazil/-): 10 in the last 3600 se ... show more (wordpress) Apache: Failed WordPress login from 172.216.248.28 (BR/Brazil/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 SpaceHost-Server	2026-04-26 22:38:51 (2 months ago)		Brute-Force Web App Attack
🇸🇮 mmueller	2026-04-23 12:22:00 (2 months ago)	Continuous failed order purchase attempts with several different credit cards on woocommerce store.	Fraud Orders
🇧🇷 chronos	2026-04-19 01:44:54 (2 months ago)	Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 596 ... show more Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 59601 \| Location: United States, N/A show less	Port Scan Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.97

🇺🇸 172.93.103.2

🇸🇪 171.25.158.74

🇮🇳 103.190.253.177

🇮🇳 103.61.113.194

🇿🇦 102.129.51.92

🇺🇸 91.230.168.112

🇰🇷 20.194.101.77

🇧🇪 207.175.79.48

🇲🇽 187.141.71.166

🇮🇩 163.7.11.126

🇺🇸 138.0.240.119

🇨🇳 122.243.75.164

🇺🇸 54.173.173.237

🇺🇸 195.184.76.49

🇬🇧 188.240.71.195

🇭🇰 154.212.234.154

🇸🇬 152.32.217.163

🇺🇸 143.244.157.89

🇬🇧 81.19.219.239