JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.218.128.4

178.218.128.4 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 31%: ?

31%

ISP	EANCENTER TELECOM LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206943
Domain Name	eancenter.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.218.128.4

Whois 178.218.128.4

IP Abuse Reports for 178.218.128.4:

This IP address has been reported a total of 22 times from 7 distinct sources. 178.218.128.4 was first reported on July 11th 2024, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-12 06:44:54 (53 minutes ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:44:46.607900 2026] [security2:error] [pid 31395:tid 31395] [client 178.218.128.4:18402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eye7graphics.com"] [uri "/sftp-config.json"] [unique_id "aiuq3p0rOO0uzE7h0uY1oQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 04:22:25 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:22:21.703919 2026] [security2:error] [pid 21883:tid 21883] [client 178.218.128.4:4636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expresstires.us"] [uri "/sftp-config.json"] [unique_id "aiuJfbqp1_40fxhgPimv2wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 02:03:56 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:03:52.604883 2026] [security2:error] [pid 25173:tid 25173] [client 178.218.128.4:10628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expertprofessionalcleaners.com"] [uri "/sftp-config.json"] [unique_id "aitpCI9--xRMs5c2YbqIMAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 01:23:02 (6 hours ago)	(mod_security) mod_security (id:949110) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:949110) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:22:53.802563 2026] [security2:error] [pid 30164:tid 30164] [client 178.218.128.4:55074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "experimentalscene.com"] [uri "/sftp-config.json"] [unique_id "aitfbe-oDt7wIuzX18inyAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 00:11:41 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:11:35.770798 2026] [security2:error] [pid 2058:tid 2058] [client 178.218.128.4:21392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exotic-dancers-los-angeles.com"] [uri "/sftp-config.json"] [unique_id "aitOt_jIp0Wkk1_sSxGeuAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 23:49:59 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 19:49:52.160269 2026] [security2:error] [pid 27704:tid 27704] [client 178.218.128.4:33052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exners.com"] [uri "/sftp-config.json"] [unique_id "aitJoN3djjwXgryCfNJndAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 22:40:52 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:40:47.311972 2026] [security2:error] [pid 28767:tid 28790] [client 178.218.128.4:22068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exede-sales.com"] [uri "/sftp-config.json"] [unique_id "ais5b_tkwF7NhAv8OtlToQAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 22:24:43 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:24:38.324232 2026] [security2:error] [pid 31343:tid 31357] [client 178.218.128.4:31676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveaccounting.net"] [uri "/sftp-config.json"] [unique_id "ais1pr_c94SRD9dltlju2wAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 YF	2026-06-11 18:00:16 (13 hours ago)	Config JSON probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 08:04:55 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:04:49.685452 2026] [security2:error] [pid 10779:tid 10779] [client 178.218.128.4:51822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurobrake.com"] [uri "/sftp-config.json"] [unique_id "aipsISf8Yi1d_8nko4uuuQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 05:15:03 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 178.218.128.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:14:58.973266 2026] [security2:error] [pid 3504:tid 3504] [client 178.218.128.4:20690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taekwondoit.com"] [uri "/about-us/sftp-config.json"] [unique_id "aipEUv2oq7PMPoRIwzndIgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-06-11 02:36:52 (1 day ago)	GET /sftp-config.json HTTP/1.1	Web App Attack
🇩🇪 4server	2026-06-10 19:09:20 (1 day ago)	[WedJun1021:09:14.5336432026][security2:error][pid820636:tid820653][client178.218.128.4:0]ModSecurit ... show more [WedJun1021:09:14.5336432026][security2:error][pid820636:tid820653][client178.218.128.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"eselectronic.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"aim2Wu1vGxweoffA86zx0wAAAAE\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2024-07-24 14:15:18 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2024-07-19 20:12:32 (1 year ago)	Form spam	Web Spam

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.182.65.219

🇮🇩 182.10.97.132

🇳🇱 176.65.148.229

🇮🇳 168.144.31.76

🇮🇩 103.154.231.122

🇺🇸 20.169.48.140

🇺🇸 13.86.116.129

🇪🇹 196.189.237.172

🇻🇳 160.30.113.59

🇺🇸 130.131.162.156

🇭🇰 101.36.122.139

🇮🇪 34.240.52.241

🇳🇱 5.83.143.40

🇩🇪 213.209.159.227

🇺🇸 192.210.228.134

🇺🇸 192.3.145.26

🇨🇳 124.77.184.134

🇨🇳 118.196.13.204

🇬🇧 89.37.172.148

🇺🇸 45.33.14.197