AbuseIPDB » 178.128.192.54

178.128.192.54 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 42%: ?

42%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 178.128.192.54

Whois 178.128.192.54

IP Abuse Reports for 178.128.192.54:

This IP address has been reported a total of 21 times from 20 distinct sources. 178.128.192.54 was first reported on January 1st 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rshict	2024-08-08 12:31:40 (4 weeks ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
gu-alvareza	2024-08-05 07:05:09 (1 month ago)	SystemBC.Botnet	DDoS Attack Hacking
Anonymous	2024-08-05 07:01:27 (1 month ago)	Fail2Ban Log Report 178.128.192.54 - [05/Aug/2024:09:01:25 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x0 ... show moreFail2Ban Log Report 178.128.192.54 - [05/Aug/2024:09:01:25 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xF80<>,h\xF8\x04}DP}\x90]\xD6\x22\x9DI\x0F\x98H+!D\xA3kf\x15\xBBc\x95\xEA\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 403 146 "-" "-" "-" "-" ... show less	Hacking SQL Injection Web App Attack
beruys.com	2024-08-05 04:56:33 (1 month ago)	[Mon Aug 05 06:56:32.769451 2024] [proxy_fcgi:error] [pid 2223840:tid 140073479681792] [client 178.1 ... show more[Mon Aug 05 06:56:32.769451 2024] [proxy_fcgi:error] [pid 2223840:tid 140073479681792] [client 178.128.192.54:35126] AH01071: Got error 'Primary script unknown' [Mon Aug 05 06:56:33.067259 2024] [proxy_fcgi:error] [pid 2223804:tid 140073043490560] [client 178.128.192.54:35170] AH01071: Got error 'Primary script unknown' [Mon Aug 05 06:56:33.216604 2024] [proxy_fcgi:error] [pid 2223840:tid 140074019854080] [client 178.128.192.54:35186] AH01071: Got error 'Primary script unknown' ... show less	DDoS Attack SSH
flaus	2024-08-05 03:56:38 (1 month ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
PulseServers	2024-08-05 02:34:08 (1 month ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - US10 Honeypot ...	Hacking Web App Attack
anon333	2024-08-05 01:34:27 (1 month ago)	Hacker syslog review 1722821667	Hacking
hermawan	2024-08-05 01:25:12 (1 month ago)	[Mon Aug 05 05:32:20.400898 2024] [security2:error] [pid 246551:tid 139481088788032] [client 178.128 ... show more[Mon Aug 05 05:32:20.400898 2024] [security2:error] [pid 246551:tid 139481088788032] [client 178.128.192.54:33782] [client 178.128.192.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "58"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x request_line = GET /ab2g HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "matomo.staklim-malang.info"] [uri "/ab2g"] [unique_id "ZrABdD1zakPrjPPqjB2AFQAAABA"] [matomo.staklim-malang.info] [matomo.staklim-malang.info] top=[246609] [EyYsIjsl2AE] [ZrABdD1zakPrjPPqjB2AFQAAABA] ... show less	Hacking Web App Attack
Countryman	2024-08-05 00:57:16 (1 month ago)	IPS detection: SystemBC.Botnet	Hacking
webbfabriken	2024-08-05 00:29:34 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
swiszczu	2024-08-04 20:37:54 (1 month ago)	Fail2Ban automatic report: Multiple malformed HTTP requests: 178.128.192.54 - - [04/Aug/ ... show moreFail2Ban automatic report: Multiple malformed HTTP requests: 178.128.192.54 - - [04/Aug/2024:22:37:53 +0200] "GET / HTTP/1.1" 400 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" 178.128.192.54 - - [04/Aug/2024:22:37:53 +0200] "GET /t4 HTTP/1.1" 400 255 "-" "Mozilla/5.0" "-" 178.128.192.54 - - [04/Aug/2024:22:37:53 +0200] "GET /favicon.ico HTTP/1.1" 400 657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" show less	Hacking Web App Attack
ne1for23	2024-08-04 20:08:28 (1 month ago)	178.128.192.54 - - [04/Aug/2024:20:08:27 +0000] "GET /ab2g HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/ ... show more178.128.192.54 - - [04/Aug/2024:20:08:27 +0000] "GET /ab2g HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/0.x" show less	Bad Web Bot
Anonymous	2024-08-04 17:36:41 (1 month ago)	2024/08/04 17:36:40 [info] 18312#0: 122521 client sent plain HTTP request to HTTPS port while readi ... show more2024/08/04 17:36:40 [info] 18312#0: 122521 client sent plain HTTP request to HTTPS port while reading client request headers, client: 178.128.192.54, server: m.nims.edu.gh, request: "GET / HTTP/1.1", host: "129.122.17.235:443" ... show less	Brute-Force Web App Attack
Anonymous	2024-08-04 14:45:29 (1 month ago)	178.128.192.54 - - [04/Aug/2024:16:45:28 +0200] "GET /ab2g HTTP/1.1" 403 4728 "-" "Mozilla/5.0 zgrab ... show more178.128.192.54 - - [04/Aug/2024:16:45:28 +0200] "GET /ab2g HTTP/1.1" 403 4728 "-" "Mozilla/5.0 zgrab/0.x" 178.128.192.54 - - [04/Aug/2024:16:45:28 +0200] "GET /ab2h HTTP/1.1" 403 4728 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
anon333	2024-08-04 13:34:35 (1 month ago)	Hacker syslog review 1722778475	Hacking