JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.215.238

178.20.215.238 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 1%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.215.238

Whois 178.20.215.238

IP Abuse Reports for 178.20.215.238:

This IP address has been reported a total of 12 times from 7 distinct sources. 178.20.215.238 was first reported on November 13th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Hasan Merkit	2026-07-24 16:43:00 (1 day ago)		DDoS Attack
🇺🇸 TPI-Abuse	2026-03-24 13:05:06 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 09:04:59.933869 2026] [security2:error] [pid 10243:tid 10243] [client 178.20.215.238:35735] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|forefrontmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forefrontmusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acKL-5oJ22ikn7xNIEtzEwAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-24 12:38:51 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 08:38:45.989685 2026] [security2:error] [pid 21897:tid 21897] [client 178.20.215.238:63001] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|graham.starkey.name\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "graham.starkey.name"] [uri "/wp-json/wp/v2/users"] [unique_id "acKF1eObvgCcYEf664RYpQAAACM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-03-21 08:11:50 (4 months ago)	178.20.215.238 - - [21/Mar/2026: ...	Brute-Force
🇩🇪 stinpriza	2026-03-19 22:50:31 (4 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 20:02:18 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 16:02:12.727539 2026] [security2:error] [pid 28285:tid 28298] [client 178.20.215.238:31883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixelpushersdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abW-xI0e5rWuKyoGl-eXOQAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-25 08:05:16 (5 months ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-04 03:45:52 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 178.20.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 22:45:49.058393 2026] [security2:error] [pid 21705:tid 21705] [client 178.20.215.238:9081] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|directcch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "directcch.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVnibcodnBnBSOVP9NFr-QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-03 01:05:11 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇿 lp	2025-11-27 14:51:26 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-27T15:22:53+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-27T15:22:53+01:00 vpn Access-Reject 'cisco' station: 178.20.215.238 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-14 17:50:21 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-14T17:55:11+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-14T17:55:11+01:00 vpn Access-Reject 'gael.turner' station: 178.20.215.238 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-13 19:21:50 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-13T19:16:18+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.215.238 2025-11-13T19:16:18+01:00 vpn Access-Reject 'caleb.rodriguez' station: 178.20.215.238 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇵 202.51.89.184

🇸🇬 159.65.5.51

🇮🇳 117.222.0.200

🇹🇭 103.4.217.13

🇺🇸 66.132.224.18

🇺🇸 64.62.156.93

🇺🇸 20.118.216.125

🇷🇺 2.63.201.19

🇺🇸 205.210.31.105

🇮🇩 202.152.201.166

🇺🇸 172.238.171.10

🇧🇼 168.167.72.132

🇩🇪 134.209.250.73

🇮🇩 103.177.15.14

🇧🇬 78.128.114.50

🇺🇸 65.49.1.210

🇺🇸 64.62.156.181

🇺🇸 34.48.173.5

🇧🇷 177.66.1.244

🇺🇦 176.103.7.94