This IP address has been reported a total of
5
times from
5 distinct
sources.
59.153.28.110 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Belgium
with 1
report;
Czechia
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Hacking
2
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This address sends abusive requests to WordPress sites we host: user enumeration through the REST AP ...
show moreThis address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: POST | path: /xmlrpc.php | 2026-09-27 11:01 UTC
show less
Triggered Cloudflare WAF (firewallCustom) from BD.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show moreTriggered Cloudflare WAF (firewallCustom) from BD.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/%E3%81%82%E3%82%84%E3%81%A4%E3%81%8D | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.3718.1118 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
[Thu May 28 13:29:37.874121 2026] [security2:error] [pid 489787:tid 139852247963328] [client 59.153. ...
show more[Thu May 28 13:29:37.874121 2026] [security2:error] [pid 489787:tid 139852247963328] [client 59.153.28.110:51962] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin Request Basename = infografis-bulanan-buletin"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag
...
show less
Email Spam
Hacking
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
