This IP address has been reported a total of
199
times from
140 distinct
sources.
128.1.131.78 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
128.1.131.78 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale i ...
show more128.1.131.78 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale industrial operation attempting unrelenting brute-force login attempts for months on end - between all CIDR ranges in the botnet, our servers receive over 800 authentication attempts per minute on smtp, imap and relative mail ports, as well as ssh, and other protocols.
IP INFO:
- IP 128.1.131.78
- Anycast false
- City N/A
- Region N/A
- Region Code N/A
- Country N/A (N/A)
- Continent N/A (N/A)
- Range N/A
- Provider N/A
- Organisation N/A
- Proxy N/A
- Type N/A
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /memberapi/system/config/get
UA: Mozilla/5.0 (Linux; Android 10; Redmi A1+; Build/QQ1A.220618.238) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.67 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
2026-06-08T13:56:46.501693+00:00 ubuntu-4gb-hel1-2 sshd[2107184]: Invalid user admin from 128.1.131. ...
show more2026-06-08T13:56:46.501693+00:00 ubuntu-4gb-hel1-2 sshd[2107184]: Invalid user admin from 128.1.131.78 port 59562
2026-06-08T13:58:09.576264+00:00 ubuntu-4gb-hel1-2 sshd[2108594]: Invalid user orangepi from 128.1.131.78 port 43518
2026-06-08T14:02:59.581269+00:00 ubuntu-4gb-hel1-2 sshd[2113385]: Invalid user test from 128.1.131.78 port 57684
2026-06-08T14:03:39.383651+00:00 ubuntu-4gb-hel1-2 sshd[2114071]: Invalid user user from 128.1.131.78 port 51770
2026-06-08T14:05:00.602569+00:00 ubuntu-4gb-hel1-2 sshd[2115378]: Invalid user admin from 128.1.131.78 port 60460
...
show less
Brute-Force
SSH
Anonymous
2026-06-08T13:58:23.443192+00:00 de-fra2-dns3 sshd[1633203]: Invalid user admin from 128.1.131.78 po ...
show more2026-06-08T13:58:23.443192+00:00 de-fra2-dns3 sshd[1633203]: Invalid user admin from 128.1.131.78 port 42484
2026-06-08T13:59:05.483639+00:00 de-fra2-dns3 sshd[1633219]: Invalid user orangepi from 128.1.131.78 port 37118
2026-06-08T14:03:52.076442+00:00 de-fra2-dns3 sshd[1633297]: Invalid user test from 128.1.131.78 port 60440
...
show less
2026-06-08T13:55:03.505718+00:00 hostname sshd[792392]: Invalid user orangepi from 128.1.131.78 port ...
show more2026-06-08T13:55:03.505718+00:00 hostname sshd[792392]: Invalid user orangepi from 128.1.131.78 port 43056
2026-06-08T13:55:03.516713+00:00 hostname sshd[792392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.131.78
2026-06-08T13:55:05.811223+00:00 hostname sshd[792392]: Failed password for invalid user orangepi from 128.1.131.78 port 43056 ssh2
2026-06-08T13:55:48.499984+00:00 hostname sshd[792397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.131.78 user=root
2026-06-08T13:55:50.639015+00:00 hostname sshd[792397]: Failed password for root from 128.1.131.78 port 60034 ssh2
...
show less
Jun 8 16:56:45 box sshd-session[72746]: Invalid user admin from 128.1.131.78 port 41442
Jun 8 16:5 ...
show moreJun 8 16:56:45 box sshd-session[72746]: Invalid user admin from 128.1.131.78 port 41442
Jun 8 16:56:45 box sshd-session[72746]: Connection closed by invalid user admin 128.1.131.78 port 41442 [preauth]
Jun 8 16:58:08 box sshd-session[72748]: Invalid user orangepi from 128.1.131.78 port 38310
Jun 8 16:58:09 box sshd-session[72748]: Connection closed by invalid user orangepi 128.1.131.78 port 38310 [preauth]
Jun 8 16:58:51 box sshd-session[72750]: Connection closed by authenticating user root 128.1.131.78 port 36162 [preauth]
...
show less
2026-06-08T15:45:35.206749+02:00 magic sshd-session[328454]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-08T15:45:35.206749+02:00 magic sshd-session[328454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.131.78
2026-06-08T15:45:37.624421+02:00 magic sshd-session[328454]: Failed password for invalid user admin from 128.1.131.78 port 52528 ssh2
2026-06-08T15:46:52.876906+02:00 magic sshd-session[328798]: Invalid user orangepi from 128.1.131.78 port 46844
show less
Jun 8 13:35:35 baloo sshd[351059]: Invalid user orangepi from 128.1.131.78 port 40042
Jun 8 13:35: ...
show moreJun 8 13:35:35 baloo sshd[351059]: Invalid user orangepi from 128.1.131.78 port 40042
Jun 8 13:35:35 baloo sshd[351059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.131.78
Jun 8 13:35:37 baloo sshd[351059]: Failed password for invalid user orangepi from 128.1.131.78 port 40042 ssh2
Jun 8 13:36:13 baloo sshd[351063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.131.78 user=root
Jun 8 13:36:15 baloo sshd[351063]: Failed password for root from 128.1.131.78 port 44994 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 199 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩