JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 50.28.1.56

50.28.1.56 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 0%: ?

ISP	Tucows
Usage Type	Data Center/Web Hosting/Transit
ASN	AS32244
Hostname(s)	rhino.exacthosting.com
Domain Name	tucows.com
Country	🇺🇸 United States of America
City	Lansing, Michigan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 50.28.1.56

Whois 50.28.1.56

IP Abuse Reports for 50.28.1.56:

This IP address has been reported a total of 85 times from 53 distinct sources. 50.28.1.56 was first reported on May 27th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 wlt-blocker	2025-05-05 06:33:04 (1 year ago)	Spam with a high level and/or caught by honeypot detected	Email Spam
🇬🇷 JCB	2022-06-02 08:36:13 (4 years ago)	wp-login.php	Web App Attack
🇫🇷 geot	2022-06-01 08:09:05 (4 years ago)	GET /wp-login.php HTTP/1.1	Web App Attack
🇫🇷 francoisunix	2022-06-01 02:15:03 (4 years ago)	50.28.1.56 - - [31/May/2022:09:08:01 +0000] "GET /wp-login.php HTTP/1.1" 401 11828 "-" "Mozilla/5.0 ... show more 50.28.1.56 - - [31/May/2022:09:08:01 +0000] "GET /wp-login.php HTTP/1.1" 401 11828 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.28.1.56 - - [31/May/2022:09:08:02 +0000] "POST /wp-login.php HTTP/1.1" 401 12144 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.28.1.56 - - [01/Jun/2022:06:15:00 +0000] "GET /wp-login.php HTTP/1.1" 401 11828 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇨🇿 akac	2022-06-01 00:44:18 (4 years ago)	WordPress XML-RPC attack with username "admin" and password "admin123". Method Name: system.multical ... show more WordPress XML-RPC attack with username "admin" and password "admin123". Method Name: system.multicall, Route: wp.getUsersBlogs Request: POST /xmlrpc.php User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 SleepyHosting	2022-06-01 00:43:38 (4 years ago)	(mod_security) mod_security (id:400010) triggered by 50.28.1.56 (US/United States/frog.exacthosting. ... show more (mod_security) mod_security (id:400010) triggered by 50.28.1.56 (US/United States/frog.exacthosting.com): 5 in the last 3600 secs show less	Brute-Force
🇨🇿 akac	2022-06-01 00:06:33 (4 years ago)	WordPress XML-RPC attack with username "admin" and password "admin". Method Name: system.multicall, ... show more WordPress XML-RPC attack with username "admin" and password "admin". Method Name: system.multicall, Route: wp.getUsersBlogs Request: POST /xmlrpc.php User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2022-05-31 19:54:24 (4 years ago)	MYH: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 vestibtech	2022-05-31 19:36:22 (4 years ago)	50.28.1.56 - - [31/May/2022:17:36:21 -0600] "GET /wp-login.php HTTP/1.1" 301 476 "-" "Mozilla/5.0 (X ... show more 50.28.1.56 - - [31/May/2022:17:36:21 -0600] "GET /wp-login.php HTTP/1.1" 301 476 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Web App Attack
🇩🇪 bsoft.de	2022-05-31 14:41:06 (4 years ago)	50.28.1.56 - - [31/May/2022:15:55:34 +0200] "GET /wp-login.php HTTP/1.1" 200 9173 "-" "Mozilla/5.0 ( ... show more 50.28.1.56 - - [31/May/2022:15:55:34 +0200] "GET /wp-login.php HTTP/1.1" 200 9173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.28.1.56 - - [31/May/2022:15:55:37 +0200] "POST /wp-login.php HTTP/1.1" 200 10063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.28.1.56 - - [31/May/2022:20:41:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 rstular	2022-05-31 10:39:26 (4 years ago)	[2022-05-31T14:39:26.326115227+00:00] 50.28.1.56 - GET /wp-login.php	Hacking Brute-Force Web App Attack
🇩🇪 Sysadmin Peter	2022-05-31 08:01:17 (4 years ago)	50.28.1.56 - - [31/May/2022:14:01:17 +0200] "POST /wp-login.php HTTP/1.1" 200 9659 "-" "Mozilla/5.0 ... show more 50.28.1.56 - - [31/May/2022:14:01:17 +0200] "POST /wp-login.php HTTP/1.1" 200 9659 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
🇩🇪 Tha_14	2022-05-31 05:09:07 (4 years ago)	Attempt to log in with non-existing username: admin	Bad Web Bot
🇨🇿 akac	2022-05-31 01:44:55 (4 years ago)	Probing for the WordPress login endpoint. Request: GET /wp-login.php User-Agent: Mozilla/5.0 (X11; U ... show more Probing for the WordPress login endpoint. Request: GET /wp-login.php User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇸🇬 Samuel K	2022-05-30 19:00:04 (4 years ago)	Web scan/attack	Port Scan Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:300:5b6:0:26::

🇺🇸 147.185.132.187

🇺🇸 64.62.197.81

🇺🇸 216.25.89.128

🇧🇷 205.210.31.209

🇳🇱 185.242.226.97

🇨🇳 180.184.84.77

🇧🇷 177.10.203.106

🇳🇱 176.65.148.197

🇵🇰 160.187.180.175

🇹🇼 106.1.10.110

🇮🇳 27.123.113.30

🇺🇸 2604:a940:301:225:0:1d::

🇺🇿 213.230.127.104

🇱🇻 196.196.53.93

🇩🇪 194.187.176.247

🇧🇷 186.215.245.175

🇺🇸 147.182.239.104

🇳🇱 146.190.24.31

🇺🇸 107.173.144.114