JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

150.241.100.78

Neutral Activity

Abuse Confidence Score

0% Low Risk

16 reports

12 reporters · latest 1 year ago

ISP: SERV.HOST GROUP LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS207957
Domain Name: serv.host
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

150.241.100.78 has been reported 16 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

16 from 12 distinct reporters

First reported

December 5th 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 Vinesh Doorgapershad	2024-12-11 14:01:00 UTC · (1 year ago)	Hacking	Hacking
🇨🇦 polycoda	2024-12-05 12:37:03 UTC · (1 year ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-05 07:10:31 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 02:10:27.738897 2024] [security2:error] [pid 17610:tid 17610] [client 1 ... show more (mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 02:10:27.738897 2024] [security2:error] [pid 17610:tid 17610] [client 150.241.100.78:42184] [client 150.241.100.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lcoor.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lcoor.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1FR49Ot2RaLzK16zy-OrwAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2024-12-05 07:02:13 UTC · (1 year ago)	Wordpress_xmlrpc_attack	Bad Web Bot
Anonymous	2024-12-05 07:00:05 UTC · (1 year ago)	\| CMS (WordPress or Joomla) brute force attempt 10 times (rewritten)	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2024-12-05 06:52:37 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:52:31.194206 2024] [security2:error] [pid 3505140:tid 3505140] [clie ... show more (mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:52:31.194206 2024] [security2:error] [pid 3505140:tid 3505140] [client 150.241.100.78:43932] [client 150.241.100.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|passy.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "passy.us"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1FNr0jDM4CU7PSQnH7WaQAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 maxxsense	2024-12-05 06:50:32 UTC · (1 year ago)	(wordpress) Failed wordpress login from 150.241.100.78 (DE/Germany/top-hope.aeza.network)	Brute-Force
🇫🇷 Jean Valjean	2024-12-05 06:41:08 UTC · (1 year ago)	Fail2ban Caboom : wp-login.php Bruteforce	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-12-05 06:18:59 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:18:55.290086 2024] [security2:error] [pid 18644:tid 18644] [client 1 ... show more (mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:18:55.290086 2024] [security2:error] [pid 18644:tid 18644] [client 150.241.100.78:43924] [client 150.241.100.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kalvanna.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kalvanna.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1FFz5WFEu08kgYpLMgy5QAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 weblite	2024-12-05 06:09:33 UTC · (1 year ago)	WP_XMLRPC_ABUSE	Brute-Force Web App Attack
🇦🇺 Proxay Fox	2024-12-05 06:03:47 UTC · (1 year ago)	150.241.100.78 - - [05/Dec/2024:16:03:28 +1000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Apache-HttpClient/4.5.13 (Java/11.0.25)" "-" 225 621 TLSv1.2/ECDHE-RSA-AES256-GCM-SHA384 . d3914689ae06e4415c344d84f85eb8c06a381111ba4aad52e21677c5df79cb10 150. ... show more 150.241.100.78 - - [05/Dec/2024:16:03:28 +1000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Apache-HttpClient/4.5.13 (Java/11.0.25)" "-" 225 621 TLSv1.2/ECDHE-RSA-AES256-GCM-SHA384 . d3914689ae06e4415c344d84f85eb8c06a381111ba4aad52e21677c5df79cb10 150.241.100.78 - - [05/Dec/2024:16:03:29 +1000] "GET /wp-login.php HTTP/1.1" 200 2965 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-" 254 3641 TLSv1.2/ECDHE-RSA-AES256-GCM-SHA384 . 953fa3e30825b3510752afe144f72b97715696a9e153681c7ac701153556f4f5 150.241.100.78 - - [05/Dec/2024:16:03:30 +1000] "POST /wp-login.php HTTP/1.1" 200 3117 "https://ecoflo.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-" 530 3793 TLSv1.2/ECDHE-RSA-AES256-GCM-SHA384 . 5aed551bf67b2850b825a7d62d5f1d2946648e79f43b2030cc1aeea54f7bc148 150.241.100.78 - - [05/Dec/2024:16:03:33 +1000] "GET /wp-login.php?redirect_t ... show less	Brute-Force
🇺🇸 TPI-Abuse	2024-12-05 06:02:23 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:02:20.802105 2024] [security2:error] [pid 16823:tid 16823] [client 1 ... show more (mod_security) mod_security (id:225170) triggered by 150.241.100.78 (top-hope.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 01:02:20.802105 2024] [security2:error] [pid 16823:tid 16823] [client 150.241.100.78:39836] [client 150.241.100.78] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|schmitzcomm.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schmitzcomm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1FB7JF7bnmYuEv4ME_KIwAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-05 05:59:40 UTC · (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack
Anonymous	2024-12-05 05:53:51 UTC · (1 year ago)	(WPLOGIN) WP Login Attack 150.241.100.78 (DE/Germany/top-hope.aeza.network): 5 in the last 3600 secs; Ports: *; Direction: 1	Brute-Force SSH
Anonymous	2024-12-05 05:40:47 UTC · (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.55

🇨🇳 182.127.83.77

🇺🇸 172.70.111.37

🇮🇩 163.7.15.25

🇵🇱 162.158.172.244

🇺🇸 147.185.132.225

🇺🇸 63.135.161.181

🇨🇳 219.156.129.52

🇫🇷 201.24.162.153

🇦🇷 181.230.14.217

🇨🇳 175.150.94.20

🇺🇸 172.234.217.192

🇮🇳 125.22.69.166

🇳🇱 109.160.32.160

🇳🇱 109.160.32.129

🇩🇪 104.23.239.106

🇮🇳 103.172.95.162

🇫🇷 91.231.89.250

🇺🇸 63.246.149.245

🇨🇳 183.63.125.162