AbuseIPDB » 38.54.27.28
38.54.27.28 was found in our database!
This IP was reported 4 times. Confidence of
Abuse
is 0%: ?
| ISP |
Kaopu Cloud HK Limited
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS154177
|
| Domain Name |
kaopucloud.com
|
| Country |
๐ง๐ฌ
Bulgaria
|
| City |
Sofia, Sofia-Capital
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 38.54.27.28:
This IP address has been reported a total of
4
times from
4 distinct
sources.
38.54.27.28 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
๐ง๐ช
beruys.com
|
|
[Tue Nov 21 23:52:39.694030 2023] [proxy_fcgi:error] [pid 2999:tid 140176806336256] [client 38.54.27 ...
show more
[Tue Nov 21 23:52:39.694030 2023] [proxy_fcgi:error] [pid 2999:tid 140176806336256] [client 38.54.27.28:57082] AH01071: Got error 'Primary script unknown'
[Tue Nov 21 23:53:46.694610 2023] [proxy_fcgi:error] [pid 96998:tid 140175636158208] [client 38.54.27.28:50048] AH01071: Got error 'Primary script unknown'
[Tue Nov 21 23:56:48.003044 2023] [proxy_fcgi:error] [pid 96998:tid 140176223352576] [client 38.54.27.28:50416] AH01071: Got error 'Primary script unknown'
...
show less
|
DDoS Attack
SSH
|
|
|
๐ช๐ฌ
t0x0
|
|
/LoginSSO.jsp?id=1%20UNION%20SELECT%20md5(999999999)%20as%20id%20from%20HrmResourceManager
|
SQL Injection
Web App Attack
|
|
|
๐ง๐ช
Ivo Vynckier
|
|
38.54.27.28 - - [21/Nov/2023:20:29:02 +0100] "GET /tool/log/c.php?strip_slashes=printf&host=nl+c.php ...
show more
38.54.27.28 - - [21/Nov/2023:20:29:02 +0100] "GET /tool/log/c.php?strip_slashes=printf&host=nl+c.php HTTP/1.1" 404 2322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36"
38.54.27.28 - - [21/Nov/2023:20:29:02 +0100] "GET /jshERP-boot/user/getAllList;.ico HTTP/1.1" 403 498 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36"
38.54.27.28 - - [21/Nov/2023:20:29:02 +0100] "GET /seeyon/webmail.do?method=doDownloadAtt&filename=index.jsp&filePath=../conf/datasourceCtp.properties HTTP/1.1" 404 2322 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36"
38.54.27.28 - - [21/Nov/2023:20:29:02 +0100] "GET /install/ HTTP/1.1" 403 822 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36"
show less
|
Hacking
Web App Attack
|
|
|
Anonymous
|
|
Common attack or app scan event detected and blocked
|
Port Scan
Hacking
Web App Attack
|
|
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: