JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.78.128.117

201.78.128.117 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 62%: ?

62%

ISP	Cheuk Wang Wu trading as Zesty Technologies
Usage Type	Data Center/Web Hosting/Transit
ASN	AS152586
Domain Name	zesty.group
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Birmingham, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.78.128.117

Whois 201.78.128.117

IP Abuse Reports for 201.78.128.117:

This IP address has been reported a total of 15 times from 11 distinct sources. 201.78.128.117 was first reported on July 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-09 05:16:18 (1 day ago)	11 attacks on config grabbing URLs (type 2), password grabbing URLs, VC URLs, env grabbing URLs: GET ... show more 11 attacks on config grabbing URLs (type 2), password grabbing URLs, VC URLs, env grabbing URLs: GET /config.json HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /.git/config HTTP/1.1 GET /.env.production HTTP/1.1 show less	Hacking
🇺🇸 TPI-Abuse	2026-07-09 05:04:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:04:24.003066 2026] [security2:error] [pid 32205:tid 32205] [client 201.78.128.117:33874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web217.dnchosting.com"] [uri "/.git/HEAD"] [unique_id "ak8r2OojOu79gkjVPsqRcwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-09 05:00:26 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-07-09 04:54:53 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 04:44:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 00:44:33.821332 2026] [security2:error] [pid 20400:tid 20400] [client 201.78.128.117:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hvacs-aircon.com"] [uri "/.git/HEAD"] [unique_id "ak8nMXOe5tQFLUO_dBIyngAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-09 04:44:39 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇮 payincog	2026-07-08 18:00:11 (1 day ago)	Date: Jul 08 20:37:24 2026 EAT \| Reported IP: 201.78.128.117 mod_security \| id: 930130 949110 \| GB/p ... show more Date: Jul 08 20:37:24 2026 EAT \| Reported IP: 201.78.128.117 mod_security \| id: 930130 949110 \| GB/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-08 17:40:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:40:47.809386 2026] [security2:error] [pid 6782:tid 6782] [client 201.78.128.117:48512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watermarks.info"] [uri "/.git/HEAD"] [unique_id "ak6LnweA2aGlUocJDe2ojgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-08 13:42:29 (2 days ago)	[redacted] 201.78.128.117 - - [08/Jul/2026:14:42:26 +0100] "GET /.git/HEAD HTTP/1.1" 302 1579 0/7105 ... show more [redacted] 201.78.128.117 - - [08/Jul/2026:14:42:26 +0100] "GET /.git/HEAD HTTP/1.1" 302 1579 0/71057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" [redacted] 201.78.128.117 - - [08/Jul/2026:14:42:27 +0100] "GET /.env HTTP/1.1" 302 6798 0/79437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 08:24:14 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 04:24:08.607704 2026] [security2:error] [pid 8874:tid 8874] [client 201.78.128.117:40542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shafie.net"] [uri "/.git/HEAD"] [unique_id "ak4JKGAaGWB6MJ4u6ogaUAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-08 04:22:25 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 03:53:35 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 201.78.128.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 23:53:28.473348 2026] [security2:error] [pid 30216:tid 30216] [client 201.78.128.117:42790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serviciosysolucionesindustrialesreal.com"] [uri "/.git/HEAD"] [unique_id "ak3JuKJemP2WFCOR7Fwj9AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-07 22:00:00 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-07	Web App Attack SSH Hacking
🇮🇹 VHosting	2026-07-07 20:35:03 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇦🇪 CG	2026-07-06 17:37:16 (3 days ago)	Web application attack, Automated scan	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.98.56.205

🇺🇸 135.237.125.223

🇮🇳 98.70.48.241

🇺🇸 54.145.82.217

🇷🇺 188.191.167.103

🇨🇳 183.223.46.28

🇳🇱 176.65.132.162

🇺🇸 136.107.243.187

🇮🇳 122.168.194.41

🇩🇪 47.245.130.209

🇳🇱 20.71.254.235

🇺🇸 216.25.89.75

🇳🇱 195.178.110.227

🇵🇾 186.16.46.105

🇺🇸 162.216.149.40

🇺🇸 147.185.132.106

🇫🇷 91.238.181.6

🇬🇧 78.153.140.93

🇺🇸 64.225.120.201

🇳🇱 45.142.193.144