JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.159.211.115

178.159.211.115 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 36%: ?

36%

ISP	NPK Home-Net Ltd.
Usage Type	Fixed Line ISP
ASN	AS24812
Domain Name	homenet.ua
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.159.211.115

Whois 178.159.211.115

IP Abuse Reports for 178.159.211.115:

This IP address has been reported a total of 8 times from 8 distinct sources. 178.159.211.115 was first reported on November 20th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-24 06:11:50 (11 hours ago)	Captured JA4H: ge11n_bde2a0f5ac82 \| Log: 178.159.211.115 - - [24/Sep/2026:13:07:56 +0700] "GET /inde ... show more Captured JA4H: ge11n_bde2a0f5ac82 \| Log: 178.159.211.115 - - [24/Sep/2026:13:07:56 +0700] "GET /index.php/profil/arsip-artikel?catid=476&id=916%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-8-14-maret-2016&start=150 HTTP/1.1" 403 3738 "https://www.bmkg.go.id/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/114.0.5735.124 Mobile/15E148 Safari/604.1" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,referer,sec-fetch-dest,user-agent,sec-fetch-site,cf-ray,sec-fetch-mode,accept,accept-encoding,accept-language,cdn-loop,cf-connecting-ip,cf-ipcountry,cf-visitor... ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-09-23 10:18:26 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 178.159.211.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 178.159.211.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 06:18:09.557640 2026] [security2:error] [pid 28801:tid 28880] [client 178.159.211.115:53782] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.hotairwelder.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotairwelder.com"] [uri "/403.shtml"] [unique_id "arOnYYKHxtgwavYVMLmsxAAAAdY"], referer: https://purgerod.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-11 04:38:24 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Carsten	2026-09-08 15:45:40 (2 weeks ago)	Bad web bot [Mozilla/5.0 (Linux; Android 14; OPPO PCLM4) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show more Bad web bot [Mozilla/5.0 (Linux; Android 14; OPPO PCLM4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.5156.159 Mobile Safari/537.36 MicroMessenger/8.0.48(0x18001B3F) NetType/WIFI Language/zh_CN show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 21:28:20 (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=27&topics%5B4%5D=79&topics%5B5%5D=89&topics%5B6%5D=46 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇬🇧 mbirth	2026-08-29 17:04:52 (3 weeks ago)	Distributed parallel HTTP scraping from random IPs with random user-agents	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
Anonymous	2025-11-20 22:45:17 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 34.93.78.175

🇭🇰 219.79.4.2

🇭🇰 199.45.154.56

🇮🇳 185.100.212.141

🇧🇷 177.188.141.75

🇺🇸 174.67.188.35

🇺🇸 162.216.150.156

🇭🇰 156.225.20.213

🇻🇳 124.158.13.141

🇹🇼 101.13.5.39

🇺🇸 64.202.191.109

🇱🇹 62.60.130.242

🇺🇸 40.124.168.247

🇧🇪 34.62.18.127

🇨🇴 190.61.43.220

🇺🇦 176.120.111.150

🇸🇪 83.216.111.153

🇻🇳 58.186.20.143

🇧🇪 34.77.9.229

🇧🇪 207.175.34.146