AbuseIPDB » 119.28.78.54

119.28.78.54 was found in our database!

This IP was reported 1,557 times. Confidence of Abuse is 61%: ?

61%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 119.28.78.54

Whois 119.28.78.54

IP Abuse Reports for 119.28.78.54:

This IP address has been reported a total of 1,557 times from 156 distinct sources. 119.28.78.54 was first reported on September 3rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bogdanv	2025-01-12 12:22:47 (1 week ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
LRob.fr	2024-12-14 23:00:29 (1 month ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
LRob.fr	2024-12-12 23:01:09 (1 month ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2024-12-12 00:37:30 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
wnbhosting.dk	2024-12-11 08:48:54 (1 month ago)	WP xmlrpc [2024-12-11T09:48:54+01:00]	Hacking Web App Attack
Malta	2024-12-11 06:22:24 (1 month ago)	119.28.78.54 - - [11/Dec/2024:07:22:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more119.28.78.54 - - [11/Dec/2024:07:22:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.70 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
KIsmay	2024-12-11 06:20:39 (1 month ago)	Dec 10 20:57:52 www4 WPAudit[585580]: 119.28.78.54 terencegower.com "Mozilla/5.0 (Windows NT 6.1; WO ... show moreDec 10 20:57:52 www4 WPAudit[585580]: 119.28.78.54 terencegower.com "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" admin:1234 FAIL Dec 10 23:28:40 www4 WPAudit[595553]: 119.28.78.54 bcadjuster.com "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" doug:doug23456 FAIL Dec 10 23:56:18 www4 WPAudit[597525]: 119.28.78.54 imaginesalmon.com "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" imagine:imagine34 FAIL Dec 11 01:19:12 www4 WPAudit[603755]: 119.28.78.54 www.servicesfyi.ca "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4" ncs-admin:12345678 FAIL Dec 11 01:20:39 www4 WPAudit[604145]: 119.28.78.54 terencegower.com "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" terenc ... show less	Brute-Force Web App Attack
graphics-muse.org	2024-12-11 05:54:10 (1 month ago)	Tue Dec 10 21:38:38.380099 2024119.28.78.54 - - [10/Dec/2024:21:40:05 -0700] "POST /xmlrpc.php HTTP/ ... show moreTue Dec 10 21:38:38.380099 2024119.28.78.54 - - [10/Dec/2024:21:40:05 -0700] "POST /xmlrpc.php HTTP/1.1" 200 446 Tue Dec 10 21:38:38.380099 2024119.28.78.54 - - [10/Dec/2024:21:40:05 -0700] "POST /xmlrpc.php HTTP/1.1" 200 4654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36" Tue Dec 10 22:52:22.490753 2024119.28.78.54 - - [10/Dec/2024:22:53:08 -0700] "POST /xmlrpc.php HTTP/1.1" 200 446 Tue Dec 10 22:52:22.490753 2024119.28.78.54 - - [10/Dec/2024:22:53:08 -0700] "POST /xmlrpc.php HTTP/1.1" 200 4654 "-" "Mozilla/5.0 (Linux; Android 10; SM-N960U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" Tue Dec 10 22:53:45.671094 2024119.28.78.54 - - [10/Dec/2024:22:54:08 -0700] "POST /xmlrpc.php HTTP/1.1" 200 446 Tue Dec 10 22:53:45.671094 2024119.28.78.54 - - [10/Dec/2024:22:54:08 -0700] "POST /xmlrpc.php HTTP/1.1" 200 4654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/201001 ... show less	Brute-Force Web App Attack
wnbhosting.dk	2024-12-11 05:34:06 (1 month ago)	WP xmlrpc [2024-12-11T06:34:06+01:00]	Hacking Web App Attack
Dadelinux	2024-12-11 01:34:17 (1 month ago)	119.28.78.54 - - [11/Dec/2024:02:30:21 +0100] "GET /wp-login.php HTTP/2.0" 200 4566 "-" "Mozilla/5.0 ... show more119.28.78.54 - - [11/Dec/2024:02:30:21 +0100] "GET /wp-login.php HTTP/2.0" 200 4566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 119.28.78.54 - - [11/Dec/2024:02:30:26 +0100] "POST /wp-login.php HTTP/2.0" 200 4472 "https://lorenzogramaccia.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 119.28.78.54 - - [11/Dec/2024:02:34:16 +0100] "GET /wp-login.php HTTP/2.0" 200 4566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	SQL Injection Web App Attack
LRob.fr	2024-12-10 23:05:05 (1 month ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
tecnicorioja	2024-12-10 23:00:36 (1 month ago)	wp-login attack [10/Dec/2024:23:53:54	Brute-Force Web App Attack
himanshu LNU	2024-12-10 21:27:34 (1 month ago)	Domain : tdrjuniorcollege.com Rule : wp-login 2024-12-10 21:09:19 *hidden-privacy* G ... show moreDomain : tdrjuniorcollege.com Rule : wp-login 2024-12-10 21:09:19 *hidden-privacy* GET /wp-login.php - 443 - 119.28.78.54 HTTP/2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 - tdrjuniorcollege.com 404 0 2 1245 300 173 - - show less	Web App Attack
rtbh.com.tr	2024-12-10 20:52:49 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Mendip_Defender	2024-12-10 17:03:28 (1 month ago)	119.28.78.54 - - [10/Dec/2024:16:10:07 +0000] "POST /wp-login.php HTTP/1.0" 200 4398 "https://ashwic ... show more119.28.78.54 - - [10/Dec/2024:16:10:07 +0000] "POST /wp-login.php HTTP/1.0" 200 4398 "https://ashwickparish.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 119.28.78.54 - - [10/Dec/2024:17:03:36 +0000] "POST /wp-login.php HTTP/1.0" 200 4398 "https://ashwickparish.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	Brute-Force