JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.136.2.208

178.136.2.208

Neutral Activity

45 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

PRIVATE JOINT-STOCK COMPANY FARLEP-INVEST

Usage Type

Fixed Line ISP

ASN

AS21497

Hostname(s)

178-136-1-208.static.vega-ua.net

Domain Name

farlep.net

Country

🇺🇦 Ukraine

City

Sofiyivska Borschagivka, Kyiv Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

178.136.2.208 has been reported 45 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 178.136.2.208:

This IP address has been reported a total of 45 times from 24 distinct sources. 178.136.2.208 was first reported on December 18th 2020, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cloud86 B.V.	2025-10-01 10:30:09 (11 months ago)	Email spam	Email Spam
🇮🇸 ISPLtd	2022-11-30 10:54:33 (3 years ago)	Nov 30 11:48:57 SRC=178.136.2.208 PROTO=TCP SPT=47323 DPT=3389 SYN Nov 30 11:48:58 SRC=178.136.2.208 ... show more Nov 30 11:48:57 SRC=178.136.2.208 PROTO=TCP SPT=47323 DPT=3389 SYN Nov 30 11:48:58 SRC=178.136.2.208 PROTO=TCP SPT=47323 DPT=3389 SYN Nov 30 11:49:00 SRC=178.136.2.208 PROTO=TCP SPT=47323 DPT=3389 ... show less	Port Scan
🇫🇷 QUADEMU Abuse Dpt	2022-09-20 20:01:21 (3 years ago)	Noxious/Nuisible/вредоносный Host.	DDoS Attack
🇪🇸 IPV4Guard.com (AS215051)	2022-09-15 15:28:48 (3 years ago)	firewall,info SSH_ToMK input: in:ether1-WAN out:(unknown 0), src-mac 98:5d:82:9e:9c:b5, proto TCP (S ... show more firewall,info SSH_ToMK input: in:ether1-WAN out:(unknown 0), src-mac 98:5d:82:9e:9c:b5, proto TCP (SYN), 178.136.2.208:41130->45.145.226.113:22, len 60 show less	Brute-Force SSH
🇺🇸 Blue Pumpkin	2022-07-16 18:54:52 (4 years ago)	178.136.2.208 - - [16/Jul/2022:22:54:51 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible ... show more 178.136.2.208 - - [16/Jul/2022:22:54:51 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-07-16 12:46:26 (4 years ago)	178.136.2.208 - - [16/Jul/2022:16:46:20 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible ... show more 178.136.2.208 - - [16/Jul/2022:16:46:20 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-07-15 01:33:25 (4 years ago)	178.136.2.208 - - [15/Jul/2022:05:33:22 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible ... show more 178.136.2.208 - - [15/Jul/2022:05:33:22 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-07-14 21:45:00 (4 years ago)	178.136.2.208 - - [15/Jul/2022:01:44:59 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible ... show more 178.136.2.208 - - [15/Jul/2022:01:44:59 +0000] "GET / HTTP/1.1" 302 523 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇮🇸 ISPLtd	2022-06-06 13:55:41 (4 years ago)	Jun 6 14:55:03 SRC=178.136.2.208 PROTO=TCP SPT=53134 DPT=6969 SYN Jun 6 14:55:04 SRC=178.136.2.208 ... show more Jun 6 14:55:03 SRC=178.136.2.208 PROTO=TCP SPT=53134 DPT=6969 SYN Jun 6 14:55:04 SRC=178.136.2.208 PROTO=TCP SPT=53134 DPT=6969 SYN Jun 6 14:55:06 SRC=178.136.2.208 PROTO=TCP SPT=53134 DPT=6969 ... show less	Port Scan
🇧🇪 Rory&	2022-06-02 23:00:00 (4 years ago)	Active DDoS Attack (botnet)	DDoS Attack
🇧🇪 Rory&	2022-06-02 23:00:00 (4 years ago)	Active DDoS Attack (botnet)	DDoS Attack
🇺🇸 VSM Networks	2022-05-24 00:47:29 (4 years ago)	Credential Stuffing	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-09 06:14:13 (4 years ago)	[Mon May 09 10:13:54.027478 2022] [:error] [pid 2009364] [client 178.136.2.208:0] [client 178.136.2. ... show more [Mon May 09 10:13:54.027478 2022] [:error] [pid 2009364] [client 178.136.2.208:0] [client 178.136.2.208] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnjpYQ-DDCH7irFwbcRBKwAAAG0"] [Mon May 09 10:13:54.988122 2022] [:error] [pid 2009132] [client 178.136.2.208:0] [client 178.136.2.208] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-04 16:31:09 (4 years ago)	178.136.2.208 - - [04/May/2022:20:30:54 +0000] "GET / HTTP/1.1" 302 588 "-" "Mozilla/5.0 (compatible ... show more 178.136.2.208 - - [04/May/2022:20:30:54 +0000] "GET / HTTP/1.1" 302 588 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-04 11:12:36 (4 years ago)	[Wed May 04 15:12:34.535666 2022] [:error] [pid 2987460] [client 178.136.2.208:0] [client 178.136.2. ... show more [Wed May 04 15:12:34.535666 2022] [:error] [pid 2987460] [client 178.136.2.208:0] [client 178.136.2.208] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnKX4hN9EzGNKJMNMlcgWwAAABk"] [Wed May 04 15:12:34.822742 2022] [:error] [pid 2987515] [client 178.136.2.208:0] [client 178.136.2.208] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com ... show less	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.65

🇺🇸 209.207.143.199

🇾🇪 209.198.132.35

🇸🇦 188.53.207.27

🇧🇷 177.54.93.9

🇺🇸 167.160.162.143

🇺🇸 162.216.149.156

🇵🇭 122.54.197.165

🇨🇳 121.61.48.40

🇳🇱 91.92.42.32

🇫🇷 85.217.140.48

🇬🇧 77.68.118.194

🇺🇸 45.117.154.0

🇳🇱 31.187.197.176

🇷🇴 2.57.122.53

🇺🇸 2607:f8b0:400e:c02::12a

🇩🇪 195.230.103.245

🇫🇮 147.185.133.136

🇺🇸 135.237.83.133

🇫🇷 85.217.140.35