JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.128.124.213

178.128.124.213 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.128.124.213

Whois 178.128.124.213

IP Abuse Reports for 178.128.124.213:

This IP address has been reported a total of 37 times from 29 distinct sources. 178.128.124.213 was first reported on March 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-09-16 22:17:03 (4 days ago)		Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-09-16 04:18:21 (4 days ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇫🇷 SpaceHost-Server	2026-09-15 22:16:48 (5 days ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 21:43:05 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:42:59.623432 2026] [security2:error] [pid 11029:tid 11029] [client 178.128.124.213:52830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fixmyland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fixmyland.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqm74wP7mXFelAMgojatSAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 TheDjRider	2026-09-15 17:13:48 (5 days ago)	CrowdSec detected WordPress authentication brute-force attack. Scenario: crowdsecurity/http-bf-wordp ... show more CrowdSec detected WordPress authentication brute-force attack. Scenario: crowdsecurity/http-bf-wordpress_bf. Automatic ban triggered. Detection time (UTC): 2026-09-15T17:13:26.908133379Z. Context: http_status=200 show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-09-15 15:45:19 (5 days ago)	(mod_security) mod_security (id:210410) triggered by 178.128.124.213 (SG/Singapore/-): 5 in the last ... show more (mod_security) mod_security (id:210410) triggered by 178.128.124.213 (SG/Singapore/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
Anonymous	2026-09-15 15:27:24 (5 days ago)	178.128.124.213 - - [15/Sep/2026:17:27:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 ... show more 178.128.124.213 - - [15/Sep/2026:17:27:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 178.128.124.213 - - [15/Sep/2026:17:27:22 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 178.128.124.213 - - [15/Sep/2026:17:27:22 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 178.128.124.213 - - [15/Sep/2026:17:27:23 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 178.128.124.213 - - [15/Sep/2026:17:27:24 +0200] "GET /website/wp-includes/wlwmanifest.xm ... show less	Brute-Force Web App Attack
Anonymous	2026-09-15 14:35:18 (5 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 infra-monitor	2026-09-15 11:00:04 (5 days ago)	Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe, crowdsecurity/http-probing	Port Scan Web App Attack
🇺🇸 ph	2026-09-15 10:24:43 (5 days ago)	Bad web bot attempting to run wp-includes on non-WP site	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 10:02:07 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:02:01.108029 2026] [security2:error] [pid 10482:tid 10482] [client 178.128.124.213:49628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|k2servicesinc.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k2servicesinc.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqkXmfN_l-ZFF1YWtz3l-QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-15 08:50:05 (5 days ago)	(wordpress) Apache: Failed WordPress login from 178.128.124.213 (SG/Singapore/-): 10 in the last 360 ... show more (wordpress) Apache: Failed WordPress login from 178.128.124.213 (SG/Singapore/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 dynamix	2026-09-15 08:31:59 (5 days ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-09-15 08:22:15 (5 days ago)	178.128.124.213 - - [15/Sep/2026:02:22:15 -0600] "GET //xmlrpc.php?rsd HTTP/1.1" 200 780 "-" "Mozill ... show more 178.128.124.213 - - [15/Sep/2026:02:22:15 -0600] "GET //xmlrpc.php?rsd HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 07:48:43 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 178.128.124.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:48:36.954765 2026] [security2:error] [pid 14060:tid 14060] [client 178.128.124.213:51632] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.billwegener.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.billwegener.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqj4VF8x5RZEpTCPxzpqHgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.15.228.240

🇩🇪 216.26.244.117

🇺🇸 184.58.95.109

🇺🇸 162.216.150.164

🇮🇳 157.49.48.190

🇰🇷 123.108.169.196

🇨🇳 101.96.202.177

🇷🇴 92.118.39.77

🇹🇼 59.126.224.134

🇰🇷 58.229.253.119

🇬🇧 35.242.168.101

🇩🇪 213.209.159.208

🇺🇸 191.96.196.91

🇨🇳 183.56.216.153

🇺🇸 165.22.11.168

🇰🇿 145.255.162.206

🇨🇳 115.190.188.201

🇺🇸 65.111.0.230

🇨🇳 60.16.142.52

🇺🇸 47.89.247.91