AbuseIPDB » 80.78.27.66

80.78.27.66 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 29%: ?

29%

ISP	AB Stract
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	504e1b42.host.njalla.net
Domain Name	abstract.fi
Country	Sweden
City	Oxie, Skane lan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 80.78.27.66

Whois 80.78.27.66

IP Abuse Reports for 80.78.27.66:

This IP address has been reported a total of 46 times from 23 distinct sources. 80.78.27.66 was first reported on July 1st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
moohric.com	2024-08-10 02:30:00 (2 months ago)	This IP address was actively involved in an DDOS attack (layer 7) and detected as being a proxy	DDoS Attack Open Proxy
moohric.com	2024-08-10 02:30:00 (2 months ago)	This IP address was actively involved in an DDOS attack (layer 7) and detected as being a proxy	DDoS Attack Open Proxy
packets-decreaser.net	2024-08-09 19:10:36 (2 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
TPI-Abuse	2024-08-09 15:14:27 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 11:14:19.258859 2024] [security2:error] [pid 1845:tid 1845] [client 80.78.27.66:50080] [client 80.78.27.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cnphilos.com"] [uri "/wp-config.php.in"] [unique_id "ZrYyS-JSNUgn26-kKAyw_AAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-08 21:00:04 (2 months ago)	Bot / scanning and/or hacking attempts: GET /wp-config-backup1.txt HTTP/1.1, GET /wp-config HTTP/1.1 ... show moreBot / scanning and/or hacking attempts: GET /wp-config-backup1.txt HTTP/1.1, GET /wp-config HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.txt HTTP/1.1, GET /wp-config%20fix.txt HTTP/1.1, GET /wp-config.bak HTTP/1.1, GET /wp-config.phpOLD HTTP/1.1 show less	Hacking Web App Attack
mnsf	2024-08-07 19:05:09 (2 months ago)	Too many Status 40X (16)	Brute-Force Web App Attack
mnsf	2024-08-06 19:01:09 (2 months ago)	Xmlrpc Caught (10)	Brute-Force Web App Attack
TPI-Abuse	2024-08-06 13:49:00 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in th ... show more(mod_security) mod_security (id:225170) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 06 09:48:52.485610 2024] [security2:error] [pid 14083:tid 14092] [client 80.78.27.66:56726] [client 80.78.27.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.teritemme.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.teritemme.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "ZrIpxBgaWA8iL5GX9HCTNAAAAUc"], referer: https://www.teritemme.com/ show less	Brute-Force Bad Web Bot Web App Attack
Kenshin869	2024-08-06 06:55:26 (2 months ago)	Wordpress unauthorized access attempt	Brute-Force
Anonymous	2024-08-06 05:03:02 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
oncord	2024-08-06 04:41:24 (2 months ago)	Form spam	Web Spam
TPI-Abuse	2024-08-05 05:12:16 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 01:12:09.868261 2024] [security2:error] [pid 17434:tid 17434] [client 80.78.27.66:51480] [client 80.78.27.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whodatnation.com"] [uri "/wp-config.phpOLD"] [unique_id "ZrBfKfwtTM4W97Bd5mowYAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-05 04:47:54 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 80.78.27.66 (504e1b42.host.njalla.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 00:47:48.202931 2024] [security2:error] [pid 15124:tid 15124] [client 80.78.27.66:52152] [client 80.78.27.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muggleshop.com"] [uri "/wp-config.php.txt"] [unique_id "ZrBZdKL19uSWWU1cNvsqmwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
plzenskypruvodce.cz	2024-08-04 10:14:08 (2 months ago)	2024-08-04T12:14:08.576630+02:00 web wordpress(varhanykolin.cz)[387812]: Immediately block connectio ... show more2024-08-04T12:14:08.576630+02:00 web wordpress(varhanykolin.cz)[387812]: Immediately block connections from 80.78.27.66 ... show less	Brute-Force
Anonymous	2024-08-03 09:41:32 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH