JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.16.54.184

178.16.54.184 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.16.54.184

Whois 178.16.54.184

IP Abuse Reports for 178.16.54.184:

This IP address has been reported a total of 126 times from 90 distinct sources. 178.16.54.184 was first reported on October 27th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-21 02:05:09 (1 hour ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
Anonymous	2026-09-21 01:02:10 (2 hours ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-21 00:40:06 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TAY	2026-09-21 00:00:58 (3 hours ago)	178.16.54.184 - - [21/Sep/2026:08:00:53 +0800] "GET /wp-config.php.swp HTTP/1.1" 301 471 "-" "Mozill ... show more 178.16.54.184 - - [21/Sep/2026:08:00:53 +0800] "GET /wp-config.php.swp HTTP/1.1" 301 471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [21/Sep/2026:08:00:53 +0800] "GET /wp-config.php HTTP/1.1" 301 463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [21/Sep/2026:08:00:56 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 6445 "http://www.ms4.maestroseed.com/wp-config.php.swp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [21/Sep/2026:08:00:58 +0800] "GET /wp-config.php HTTP/1.1" 404 6445 "http://www.ms4.maestroseed.com/wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [21/Sep/2026:08:00:58 +0800] "GET /wp-config.php~ HTTP/1.1" 301 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [21/Sep/2026:08:00:58 +0800] "GET /wp-config.php.save HTTP/1.1" 301 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show less	Brute-Force
🇫🇮 mnazibo	2026-09-20 23:30:17 (3 hours ago)	Date: Sep 21 02:00:40 2026 EAT \| Reported IP: 178.16.54.184 mod_security \| id: 920440 930130 949110 ... show more Date: Sep 21 02:00:40 2026 EAT \| Reported IP: 178.16.54.184 mod_security \| id: 920440 930130 949110 \| NL/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; URL file extension is restricted by policy; URL file extension is restricted by policy; URL file extension is restricted by policy; URL file extension is restricted by policy; URL file extension is restricted by policy; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score E show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 TheDjRider	2026-09-20 23:14:05 (4 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-20T23:14:04.224271842Z. Context: http_status=200 show less	Web App Attack
🇩🇪 wpadm3	2026-09-20 23:09:28 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 [email protected]	2026-09-20 23:08:42 (4 hours ago)	CrowdSec ban: crowdsecurity/http-probing (duration: 71h59m59s)	Web App Attack
🇩🇪 AetherFox	2026-09-20 23:08:34 (4 hours ago)	AetherFox VoidGuard detected: [Sun Sep 20 23:08:18.647517 2026] [authz_core:error] [pid 3234462:tid ... show more AetherFox VoidGuard detected: [Sun Sep 20 23:08:18.647517 2026] [authz_core:error] [pid 3234462:tid 3234510] [client 178.16.54.184:44822] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/reg.html, referer: http://event.draconigen.net [Sun Sep 20 23:08:34.061849 2026] [authz_core:error] [pid 3234462:tid 3234486] [client 178.16.54.184:7550] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/reg.html.env.local, referer: http://event.draconigen.net/.env.local [Sun Sep 20 23:08:34.504400 2026] [authz_core:error] [pid 3234462:tid 3234484] [client 178.16.54.184:7642] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/reg.html.env.dist, referer: http://event.draconigen.net/.env.dist [Sun Sep 20 23:08:34.505913 2026] [authz_core:error] [pid 3234462:tid 3234506] [client 178.16.54.184:7586] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/reg. ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-20 23:01:20 (4 hours ago)	178.16.54.184 - - [20/Sep/2026:23:01:20 +0000] "GET /.env.backup HTTP/1.1" 404 134 "http://mail.chir ... show more 178.16.54.184 - - [20/Sep/2026:23:01:20 +0000] "GET /.env.backup HTTP/1.1" 404 134 "http://mail.chirila.me/.env.backup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [20/Sep/2026:23:01:20 +0000] "GET /.env.production HTTP/1.1" 404 134 "http://mail.chirila.me/.env.production" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 22:40:50 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.16.54.184 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.16.54.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:40:45.425940 2026] [security2:error] [pid 5575:tid 5575] [client 178.16.54.184:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswithcamerasmovie.com"] [uri "/.env"] [unique_id "arBg7b7vcq07aZQ1Wi_DmQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-09-20 22:17:25 (5 hours ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 Blexyel	2026-09-20 20:14:07 (7 hours ago)	178.16.54.184 - - [20/Sep/2026:22:14:07 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 178.16.54.184 - - [20/Sep/2026:22:14:07 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "stream.pingusmc.org" ... show less	Brute-Force Web App Attack
Anonymous	2026-09-20 19:45:09 (7 hours ago)	178.16.54.184 - - [20/Sep/2026:21:45:08 +0200] "GET /wp-config.php.save HTTP/1.1" 404 196 "http://ww ... show more 178.16.54.184 - - [20/Sep/2026:21:45:08 +0200] "GET /wp-config.php.save HTTP/1.1" 404 196 "http://www.destrandfuif.com/wp-config.php.save" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [20/Sep/2026:21:45:08 +0200] "GET /wp-config.php~ HTTP/1.1" 404 196 "http://www.destrandfuif.com/wp-config.php~" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 178.16.54.184 - - [20/Sep/2026:21:45:08 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 196 "http://www.destrandfuif.com/wp-config.php.swp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-09-20 18:50:08 (8 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 190.14.223.82

🇨🇳 182.43.235.218

🇳🇱 77.91.71.32

🇸🇬 66.96.215.92

🇨🇳 218.0.56.78

🇮🇳 210.212.183.61

🇦🇷 190.173.201.92

🇺🇸 185.180.141.112

🇨🇦 142.44.225.109

🇨🇳 124.222.124.101

🇰🇷 121.189.103.2

🇰🇷 121.131.220.153

🇰🇷 118.43.233.221

🇨🇳 115.59.47.1

🇮🇷 85.198.19.241

🇳🇱 81.19.216.103

🇬🇧 62.60.130.117

🇸🇬 47.84.143.141

🇷🇴 2.57.121.25

🇰🇷 199.241.120.131