JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.253.209.52

192.253.209.52 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 44%: ?

44%

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Jersey City, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.253.209.52

Whois 192.253.209.52

IP Abuse Reports for 192.253.209.52:

This IP address has been reported a total of 102 times from 53 distinct sources. 192.253.209.52 was first reported on February 17th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nyt	2026-06-05 23:04:47 (4 hours ago)	WP Author Enumeration, WP User Enumeration	Web App Attack
🇧🇷 Francisco Carlos	2026-06-03 14:05:20 (2 days ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, wordpress. Sample: GET /wp-login.php show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-05-26 23:27:29 (1 week ago)	GET [wp-admin]	Port Scan
🇺🇸 ambor	2026-05-20 18:35:16 (2 weeks ago)	Attack type: wordpress_attack_attempt \| Target: /wp-login.php \| UA: Mozilla/5.0 \| Country: US	Web App Attack Brute-Force
🇬🇧 poundawebsiteltd	2026-04-21 15:42:49 (1 month ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 192.253.209.52 - - [21/Apr/2026:16:42:43 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 192.253.209.52 - - [21/Apr/2026:16:42:43 +0100] POST /wp-login.php HTTP/1.1 200 14406 - Mozilla/5.0 show less	Web App Attack
🇳🇿 Antinson	2026-04-21 13:17:34 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-04-21 09:14:12 (1 month ago)	192.253.209.52 - - [21/Apr/2026:12:14:12 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 404 706 ... show more 192.253.209.52 - - [21/Apr/2026:12:14:12 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" ... show less	Web App Attack
🇧🇷 ufn.edu.br	2026-04-21 04:25:53 (1 month ago)	[Tue Apr 21 01:16:01.055767 2026] [access_compat:error] [pid 16096] [client 192.253.209.52:56733] AH ... show more [Tue Apr 21 01:16:01.055767 2026] [access_compat:error] [pid 16096] [client 192.253.209.52:56733] AH01797: client denied by server configuration: /var/www/html/wp-admin.php [Tue Apr 21 01:16:02.099441 2026] [access_compat:error] [pid 16096] [client 192.253.209.52:56733] AH01797: client denied by server configuration: /var/www/html/wp-editor.php [Tue Apr 21 01:16:03.163429 2026] [access_compat:error] [pid 16096] [client 192.253.209.52:56733] AH01797: client denied by server configuration: /var/www/html/adminfusm.php ... show less	Exploited Host Web App Attack
🇺🇸 mnsf	2026-04-21 00:05:55 (1 month ago)	Too many Status 50X (14)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 22:43:49 (1 month ago)	(mod_security) mod_security (id:210801) triggered by 192.253.209.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210801) triggered by 192.253.209.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 18:43:39.538972 2026] [security2:error] [pid 2556523:tid 2556523] [client 192.253.209.52:30223] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sqlmap" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|10mostwantedfugitives.com\|F\|2"] [data "sqlmap/1.10.1.55#dev (https://sqlmap.org)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "10mostwantedfugitives.com"] [uri "/www.10mostwantedfugitives.com/dir/index.php"] [unique_id "aeasG5mE2dYdETxTRm8SWwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 pusathosting.com	2026-04-20 20:54:05 (1 month ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇫🇷 dynamix	2026-04-20 19:58:04 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇦 URAN Publishing Service	2026-04-20 08:51:47 (1 month ago)	192.253.209.52 - - [20/Apr/2026:11:51:45 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 404 707 "-" ... show more 192.253.209.52 - - [20/Apr/2026:11:51:45 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 404 707 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.52 - - [20/Apr/2026:11:51:46 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" ... show less	Web App Attack
🇫🇷 Yepngo	2026-04-19 04:21:37 (1 month ago)	192.253.209.52 - - [19/Apr/2026:06:21:35 +0200] "POST /wp-login.php HTTP/2.0" 200 12080 "-" "Mozilla ... show more 192.253.209.52 - - [19/Apr/2026:06:21:35 +0200] "POST /wp-login.php HTTP/2.0" 200 12080 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
🇬🇧 BRHosting	2026-04-18 15:31:02 (1 month ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.85.238.234

🇫🇷 185.177.72.10

🇨🇴 181.235.3.123

🇺🇸 104.236.60.143

🇹🇷 89.252.131.17

🇺🇸 65.49.1.135

🇭🇰 47.83.197.179

🇻🇳 36.50.134.219

🇺🇸 2602:fb54:1400::34

🇺🇸 2001:470:1:fb5::250

🇳🇱 193.176.31.204

🇬🇧 193.163.125.220

🇷🇴 193.32.162.13

🇩🇪 141.11.250.239

🇺🇸 66.132.186.248

🇰🇷 43.166.1.243

🇺🇸 216.73.216.176

🇮🇳 202.53.94.246

🇰🇿 176.124.88.29

🇺🇸 162.216.150.57