JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.104.108.53

178.104.108.53 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.53.108.104.178.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.104.108.53

Whois 178.104.108.53

IP Abuse Reports for 178.104.108.53:

This IP address has been reported a total of 21 times from 20 distinct sources. 178.104.108.53 was first reported on April 3rd 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-07 07:59:03 (5 months ago)	"POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1"	Hacking Web App Attack
🇧🇷 SOC-BR	2026-04-07 07:19:21 (5 months ago)	Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-04-06 15:11:0 ... show more Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-04-06 15:11:05 - Source Port 41628 show less	Port Scan Hacking
🇬🇧 openstrike.co.uk	2026-04-07 05:14:06 (5 months ago)	1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ... show more 1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 show less	Hacking
🇨🇿 lp	2026-04-06 22:48:41 (5 months ago)	SSH Brute force: 9 attempts were recorded from 178.104.108.53 2026-04-06T23:28:15+02:00 Invalid user ... show more SSH Brute force: 9 attempts were recorded from 178.104.108.53 2026-04-06T23:28:15+02:00 Invalid user admin from 178.104.108.53 port 47462 2026-04-06T23:28:45+02:00 Invalid user orangepi from 178.104.108.53 port 34774 2026-04-06T23:29:16+02:00 Connection closed by authenticating user root 178.104.108.53 port 55850 [preauth] 2026-04-06T23:29:46+02:00 Connection closed by authenticating user root 178.104.108.53 port 42428 [preauth] 2026-04-06T23:30:16+02:00 Connection closed by authenticating user root 178.104.108.53 port 43498 [preauth] 2026-04-06T23:30:46+02:00 Connection closed by authenticating user root 178.104.108.53 port 56500 [preauth] 2026-04-06T23:31:17+02:00 Connection closed by authenticating user root 178.104.108.53 port 57402 [preauth] 2026-04-06T23:31:47+02:00 Connection closed by authenticating user root 178.104.108.53 port 60676 [preauth] 2026-04-06T23:32:17+02:00 Invalid u show less	Brute-Force SSH
🇦🇺 Abuse_Detected	2026-04-06 21:48:00 (5 months ago)	Port scan, brute force, hacking	Port Scan Brute-Force Hacking
🇵🇱 webadmin	2026-04-06 21:27:43 (5 months ago)	2026/04/06 23:27:42 [error] 1852600#1852600: 691702 open() "/var/www/html/hello.world" failed (2: N ... show more 2026/04/06 23:27:42 [error] 1852600#1852600: 691702 open() "/var/www/html/hello.world" failed (2: No such file or directory), client: 178.104.108.53, server: tytan.sai.pl, request: "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1", host: "195.116.29.62:80" 2026/04/06 23:27:42 [error] 1852600#1852600: 691702 open() "/var/www/html/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" failed (2: No such file or directory), client: 178.104.108.53, server: tytan.sai.pl, request: "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", host: "195.116.29.62:80" 2026/04/06 23:27:42 [error] 1852600#1852600: 691702 open() "/var/www/html/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php" failed (2: No such file or directory), client: 178.104.108.53, server: tytan.sai.pl, request: "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1", host: "195.116.29.62:80" 2026/04/06 23:27:42 [error] 1852600#1852600: *691702 open() "/var/www/html/vend ... show less	Web App Attack
🇺🇸 MPL	2026-04-06 21:20:02 (5 months ago)	tcp/80 (4 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-04-06 21:19:00 (5 months ago)	Blocked by UFW (TCP on 23) Source port: 46138 TTL: 53 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 46138 TTL: 53 Packet length: 40 TOS: 0x00 This report (for 178.104.108.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇳🇱 Savvii	2026-04-06 21:16:04 (5 months ago)	20 attempts against mh-ssh on star	Brute-Force SSH
🇺🇸 NeverBehave	2026-04-06 21:12:50 (5 months ago)	Fail2ban Triggered	Brute-Force SSH
🇨🇿 cazae	2026-04-06 21:12:31 (5 months ago)	2026-04-06T22:11:56.624903+01:00 server1 sshd-session[945591]: Invalid user orangepi from 178.104.10 ... show more 2026-04-06T22:11:56.624903+01:00 server1 sshd-session[945591]: Invalid user orangepi from 178.104.108.53 port 53442 2026-04-06T22:11:56.635089+01:00 server1 sshd-session[945591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.108.53 2026-04-06T22:11:58.749479+01:00 server1 sshd-session[945591]: Failed password for invalid user orangepi from 178.104.108.53 port 53442 ssh2 2026-04-06T22:12:29.185698+01:00 server1 sshd-session[945602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.108.53 user=root 2026-04-06T22:12:30.768308+01:00 server1 sshd-session[945602]: Failed password for root from 178.104.108.53 port 41214 ssh2 ... show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-04-06 21:09:38 (5 months ago)	Port Scan Attack proto:TCP src:35506 dst:23	Port Scan
🇺🇸 bigscoots.com	2026-04-06 21:08:38 (5 months ago)	(sshd) Failed SSH login from 178.104.108.53 (DE/Germany/static.53.108.104.178.clients.your-server.de ... show more (sshd) Failed SSH login from 178.104.108.53 (DE/Germany/static.53.108.104.178.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 6 16:07:24 14839 sshd[15587]: Invalid user admin from 178.104.108.53 port 53512 Apr 6 16:07:25 14839 sshd[15587]: Failed password for invalid user admin from 178.104.108.53 port 53512 ssh2 Apr 6 16:07:56 14839 sshd[15599]: Invalid user orangepi from 178.104.108.53 port 33532 Apr 6 16:07:58 14839 sshd[15599]: Failed password for invalid user orangepi from 178.104.108.53 port 33532 ssh2 Apr 6 16:08:29 14839 sshd[15661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.108.53 user=root show less	Brute-Force SSH
🇹🇷 Threat.live	2026-04-06 18:35:13 (5 months ago)	Suspicious activity, tcp/2375	Port Scan
🇺🇸 MPL	2026-04-06 18:22:27 (5 months ago)	tcp ports: 80,23 (8 or more attempts)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 121.142.234.77

🇨🇳 203.83.231.93

🇺🇸 185.110.11.78

🇧🇷 179.48.18.42

🇺🇸 157.245.245.246

🇵🇭 143.44.184.4

🇺🇸 134.209.71.49

🇮🇹 37.100.126.167

🇫🇷 37.97.118.14

🇯🇵 8.216.8.64

🇱🇰 175.157.141.12

🇺🇸 162.216.149.163

🇺🇸 147.182.187.39

🇸🇬 145.223.140.234

🇳🇬 105.119.10.176

🇮🇩 103.95.40.58

🇨🇳 101.89.141.184

🇫🇷 91.231.89.213

🇧🇬 79.124.62.126

🇺🇸 2603:3:6101:7d30::