AbuseIPDB » 195.78.54.18

195.78.54.18 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 30%: ?

30%

ISP	IPXO LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	ipxo.com
Country	Netherlands (Kingdom of the)
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 195.78.54.18

Whois 195.78.54.18

IP Abuse Reports for 195.78.54.18:

This IP address has been reported a total of 85 times from 34 distinct sources. 195.78.54.18 was first reported on August 18th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
quicksand	2024-09-14 15:50:09 (3 weeks ago)	Malicious URI path [GET /admin/phpMyAdmin/setup/index.php] [Mozilla/5.0 (Windows NT 10.0; Win64; x64 ... show moreMalicious URI path [GET /admin/phpMyAdmin/setup/index.php] [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36] Reported from WAF sampled requests show less	Bad Web Bot Web App Attack
Anonymous	2024-09-14 14:02:29 (3 weeks ago)		Web App Attack
Anonymous	2024-09-14 11:27:44 (3 weeks ago)	Aggressive web scan	Web App Attack
diego	2024-09-08 15:25:31 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 17 times in the last 10800 seconds	DDoS Attack
diego	2024-09-08 12:05:17 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 23 times in the last 10800 seconds	DDoS Attack
TPI-Abuse	2024-08-27 00:33:24 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 195.78.54.18 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 195.78.54.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 20:33:19.541853 2024] [security2:error] [pid 4173518:tid 4173541] [client 195.78.54.18:54403] [client 195.78.54.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|adventuresdotcom.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adventuresdotcom.com"] [uri "/mailto:[email protected]"] [unique_id "Zs0ez3KIL5i7zms0rJZ-ZwAAAJI"], referer: http://adventuresdotcom.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
physke	2024-08-26 23:29:17 (1 month ago)	REQUESTED PAGE: /Scripts/sendform1.php	Web App Attack
nationaleventpros.com	2024-08-26 21:11:21 (1 month ago)	web form spam (Nilsimsa: URqkyYgl6GfWItNb5jggmaWuYOhd4q7vrLgOIvp1hs8)	Web Spam
nowyouknow	2024-08-26 13:43:09 (1 month ago)	Malicious Traffic/Form Submission	Phishing Web Spam
nowyouknow	2024-08-26 12:20:32 (1 month ago)	(From [email protected]) Hello. Lets integrate AI into your bus ... show more(From [email protected]) Hello. Lets integrate AI into your business, because it is no longer optional! AI integration is essential for any business wanting to stay competitive. Whether it’s improving efficiency or driving innovation, mastering AI integration is the key. For just $90, you can join our AI Integration Training and gain the tools to transform your business. Use code SUPERAI2024 https://krigerinternational.trainercentralsite.com/course/ai-integration-specialist-certification-training Only the first 50 to register get this exclusive deal. Don’t wait. Secure your spot now! See you soon at the training, KRC International show less	Phishing Web Spam
Dave Brooks	2024-08-26 12:17:19 (1 month ago)	contact form abuse	Web Spam Email Spam Brute-Force
oncord	2024-08-26 12:16:59 (1 month ago)	Form spam	Web Spam
TPI-Abuse	2024-08-26 11:42:36 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 195.78.54.18 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 195.78.54.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 07:42:32.017376 2024] [security2:error] [pid 20507:tid 20574] [client 195.78.54.18:21335] [client 195.78.54.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|isoceansl.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isoceansl.com"] [uri "/mailto:[email protected]"] [unique_id "ZsxqKNpqrLa5QFvAR2pqawAAAEs"], referer: http://isoceansl.com/ show less	Brute-Force Bad Web Bot Web App Attack
jcbriar	2024-03-16 21:28:50 (6 months ago)	CSRF or other malfeasance	Hacking Web App Attack
Anonymous	2024-03-16 20:32:11 (6 months ago)	Malicious activity detected	Hacking Web App Attack