JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.136.47.16

178.136.47.16 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 20%: ?

20%

ISP	PRIVATE JOINT-STOCK COMPANY FARLEP-INVEST
Usage Type	Mobile ISP
ASN	AS21497
Domain Name	farlep.net
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.136.47.16

Whois 178.136.47.16

IP Abuse Reports for 178.136.47.16:

This IP address has been reported a total of 14 times from 9 distinct sources. 178.136.47.16 was first reported on January 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-09 17:36:56 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 178.136.47.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 178.136.47.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:36:46.550240 2026] [security2:error] [pid 18297:tid 18297] [client 178.136.47.16:6363] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|herrell.net.utilis.net\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "herrell.net.utilis.net"] [uri "/tmp/storage.db"] [unique_id "askmLuPCz4xYBjgB-a8tQwAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-06 01:46:49 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 178.136.47.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 178.136.47.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 21:46:43.616407 2026] [security2:error] [pid 7854:tid 7873] [client 178.136.47.16:5637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cargostuff.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cargostuff.com"] [uri "/"] [unique_id "asRTA_TibIBv8Ns5Dhls5AAAANA"], referer: https://backlinkbot.shop/dir/seo-link-building-services-34207 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-20 12:13:40 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-09-10 19:01:59 (1 month ago)	DDoS flood attack against 82.152.54.114 (2026-09-10 18:56:59 -> 2026-09-10 19:11:59 UTC) targeting A ... show more DDoS flood attack against 82.152.54.114 (2026-09-10 18:56:59 -> 2026-09-10 19:11:59 UTC) targeting AS215599. This IP (AS21497) sent ~467 packets (0.03 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
Anonymous	2026-08-30 01:53:19 (1 month ago)	denied traffic to a honeypot network. destination port 13562.	Port Scan Hacking
🇺🇸 鬼影233	2026-08-23 02:04:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-08-18 09:07:42 (1 month ago)	Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-09 10:10:11 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-28 13:10:49 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-05 01:40:40 (3 months ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇺🇸 kosada.com	2026-06-29 09:02:25 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-14 10:28:59 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇦 polycoda	2026-02-11 12:54:13 (8 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-01-28 04:32:24 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.174.80.9

🇺🇬 212.88.98.58

🇩🇪 195.182.16.23

🇱🇹 185.169.4.121

🇬🇧 172.64.192.205

🇬🇭 154.161.176.163

🇨🇳 125.110.99.254

🇧🇩 103.234.203.137

🇵🇰 103.131.213.183

🇻🇪 38.248.130.166

🇺🇸 34.123.227.31

🇺🇿 195.158.26.59

🇭🇰 192.151.255.194

🇧🇷 149.102.251.202

🇧🇬 79.124.58.118

🇱🇹 62.60.130.253

🇸🇬 47.245.96.96

🇷🇴 2.57.121.25

🇩🇪 2a02:26f0:780::5f65:36ca

🇰🇪 197.248.207.142