This IP address has been reported a total of
10
times from
8 distinct
sources.
178.104.5.111 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[FriJul2416:44:35.0788562026][security2:error][pid3775151:tid3775359][client178.104.5.111:0]ModSecur ...
show more[FriJul2416:44:35.0788562026][security2:error][pid3775151:tid3775359][client178.104.5.111:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hostingedominio.com\"][uri\"/\"][unique_id\"amN6U-N-xfJ36xL1j-KpsQAAAQg\"]
show less
[ThuJul2316:02:37.4635492026][security2:error][pid3205855:tid3206046][client178.104.5.111:0]ModSecur ...
show more[ThuJul2316:02:37.4635492026][security2:error][pid3205855:tid3206046][client178.104.5.111:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-domini.ch\"][uri\"/\"][unique_id\"amIe_S4V5zubqytNPMHc7QAAAAY\"]
show less
Hacking
Web App Attack
Anonymous
178.104.5.111 - sliver85.eu - [23/Jul/2026:06:52:52 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Window ...
show more178.104.5.111 - sliver85.eu - [23/Jul/2026:06:52:52 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
178.104.5.111 - sliver85.eu - [23/Jul/2026:06:52:55 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
178.104.5.111 - sliver85.eu - [23/Jul/2026:06:52:59 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
...
show less
[TueJul2122:46:24.6062082026][security2:error][pid3561823:tid3562086][client178.104.5.111:0]ModSecur ...
show more[TueJul2122:46:24.6062082026][security2:error][pid3561823:tid3562086][client178.104.5.111:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondo-it.ch\"][uri\"/\"][unique_id\"al_aoC01d_QOYG8t0OGFFwAAARg\"]
show less
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show moreMultiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 178.104.5.111 (DE/Germany/static.111 ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 178.104.5.111 (DE/Germany/static.111.5.104.178.clients.your-server.de): 1 in the last 3600 secs
show less