JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.215.164

178.20.215.164 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 21%: ?

21%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.215.164

Whois 178.20.215.164

IP Abuse Reports for 178.20.215.164:

This IP address has been reported a total of 11 times from 9 distinct sources. 178.20.215.164 was first reported on September 17th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-08-28 15:06:17 (4 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Ilop	2026-08-27 05:00:31 (6 days ago)	[hp-100] 15 unsolicited packets to honeypot ports 8080 (OCI DShield sensor)	Port Scan
🇩🇪 FD-IX	2026-08-20 09:57:52 (1 week ago)	Brute-force login attack detected by WordPress firewall.	Brute-Force Web App Attack
🇫🇷 ✨	2026-05-08 01:44:16 (3 months ago)	Domain : adventurephotographs.com Rule : DangerQueryString 2026-05-08 01:43:36 *hidden-privacy4 ... show more Domain : adventurephotographs.com Rule : DangerQueryString 2026-05-08 01:43:36 hidden-privacy*48 GET /china/index.aspx c=0' 80 - 178.20.215.164 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 - adventurephotographs.com 302 0 0 567 235 62 - - show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 06:48:23 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 02:48:16.743192 2026] [security2:error] [pid 16954:tid 17013] [client 178.20.215.164:48513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|digital4z.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "digital4z.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acYoMB9JBWH0w9AcPhf07gAAAcE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-01-11 21:53:33 (7 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-08 13:06:56 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 08:06:51.675062 2025] [security2:error] [pid 15184:tid 15184] [client 178.20.215.164:39961] [client 178.20.215.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lesbidrawn.com"] [uri "/.env"] [unique_id "Z8xA65q5f2V-7iySgzBRTwAAAAQ"], referer: https://tasamm.com/about/ggg259.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-14 10:45:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 178.20.215.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 05:45:02.010167 2025] [security2:error] [pid 1532:tid 1532] [client 178.20.215.164:60711] [client 178.20.215.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bdalzell.batw.net"] [uri "/.env"] [unique_id "Z68erlPQjjfv26s4BPvv0AAAAAU"], referer: https://tasamm.com/about/bbb29.html show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 sms.ru	2024-09-24 15:40:06 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇵🇱 rafix	2023-10-28 10:14:11 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot
🇿🇦 IrisFlower	2022-09-17 10:02:53 (3 years ago)	Unauthorized connection attempt detected from IP address 178.20.215.164 to port 443 [J]	Port Scan Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.86

🇦🇺 144.6.2.96

🇨🇳 120.240.178.140

🇺🇸 104.152.52.100

🇧🇬 79.124.59.186

🇰🇷 222.239.251.12

🇨🇦 184.69.99.18

🇨🇳 182.151.45.136

🇷🇺 93.159.230.85

🇫🇷 91.196.152.32

🇺🇸 45.156.129.62

🇮🇳 13.71.92.229

🇷🇺 5.142.198.27

🇷🇺 217.175.46.2

🇦🇿 185.146.112.169

🇳🇱 185.93.89.23

🇪🇸 172.68.135.116

🇫🇷 141.101.69.35

🇨🇳 117.158.21.113

🇮🇳 115.96.43.83