Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
109.197.78.137 has been reported 31
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
31
times from
24 distinct
sources.
109.197.78.137 was first reported on
, and the most recent report was
.
Triggered Cloudflare WAF (firewallCustom) from RU.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show moreTriggered Cloudflare WAF (firewallCustom) from RU.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /mah.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
(mod_security) mod_security (id:225170) triggered by 109.197.78.137 (78-137.i-network.ru): 1 in the ...
show more(mod_security) mod_security (id:225170) triggered by 109.197.78.137 (78-137.i-network.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 18:27:05.259831 2025] [security2:error] [pid 4896:tid 4896] [client 109.197.78.137:59582] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kenometer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kenometer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aP1Ouf_1w1DO7bOXN4HvigAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /i.php HTTP/1.1, GET /test.php HTTP/1.1, GET /phpinfo.ph ...
show moreBot / scanning and/or hacking attempts: GET /i.php HTTP/1.1, GET /test.php HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /info.php HTTP/1.1
show less