JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.215.189

178.20.215.189 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 17%: ?

17%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.215.189

Whois 178.20.215.189

IP Abuse Reports for 178.20.215.189:

This IP address has been reported a total of 14 times from 9 distinct sources. 178.20.215.189 was first reported on May 28th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 06:37:12 (21 hours ago)	(mod_security) mod_security (id:210350) triggered by 178.20.215.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 178.20.215.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:37:07.884474 2026] [security2:error] [pid 24644:tid 24644] [client 178.20.215.189:18291] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|persnicketyinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/persnickety-retail/"] [unique_id "at71Ez3qObk3GNXFC9n7sQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-09-15 00:10:01 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-13 12:21:54 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-13T13:07:02+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-13T13:07:02+02:00 vpn Access-Reject '24-400-3-01-0247' station: 178.20.215.189 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-13 00:10:01 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-12 00:21:40 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-12T01:17:18+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-12T01:17:18+02:00 vpn Access-Reject 'settings' station: 178.20.215.189 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-11 04:51:00 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-11T06:39:07+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.189 2026-09-11T06:39:07+02:00 vpn Access-Reject 'nilkesh' station: 178.20.215.189 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇪🇸 librebit	2026-07-16 20:58:11 (3 months ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-15 19:01:19 (3 months ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-13 01:49:12 (3 months ago)	Brute force	Brute-Force
🇵🇱 stareradia.pl	2026-06-14 10:06:01 (4 months ago)	[Sun Jun 14 12:05:36.040795 2026] [php:error] [pid 1279835:tid 1279835] [client 178.20.215.189:0] sc ... show more [Sun Jun 14 12:05:36.040795 2026] [php:error] [pid 1279835:tid 1279835] [client 178.20.215.189:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Jun 14 12:05:39.215384 2026] [php:error] [pid 1301912:tid 1301912] [client 178.20.215.189:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Jun 14 12:05:39.572905 2026] [php:error] [pid 1279676:tid 1279676] [client 178.20.215.189:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ucp.php?mode=register&agreed=true&iscanyesno=yeswecan&step=2&coppa=0 [Sun Jun 14 12:06:00.877714 2026] [php:error] [pid 1286055:tid 1286055] [client 178.20.215.189:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ ... show less	Web App Attack
🇺🇸 Dolutech.com	2026-02-02 22:43:11 (8 months ago)	BF Attack	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:34:50 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 rafix	2023-10-28 10:14:17 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot
Anonymous	2023-05-28 11:28:00 (3 years ago)	"Attack signature detected"	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 202.191.122.168

🇳🇱 195.178.110.135

🇧🇷 177.221.185.64

🇺🇸 162.216.149.102

🇺🇸 158.46.160.220

🇬🇧 92.27.101.99

🇧🇬 91.191.209.118

🇮🇷 85.133.217.136

🇬🇪 85.117.58.67

🇳🇱 45.148.10.141

🇨🇳 36.32.3.159

🇬🇧 35.203.211.64

🇨🇭 209.99.190.186

🇺🇸 206.189.197.22

🇫🇮 157.22.16.65

🇺🇸 147.185.132.196

🇺🇸 144.172.91.17

🇻🇳 103.142.26.97

🇺🇦 95.47.59.244

🇳🇱 91.92.242.151