JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.212.96.195

178.212.96.195 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 56%: ?

56%

ISP	Joint Ukrainian American Enterprise Telecommunications Resource Center ltd
Usage Type	Fixed Line ISP
ASN	AS48957
Hostname(s)	ip-178-212-96-195.network.lviv.ua
Domain Name	network.lviv.ua
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.212.96.195

Whois 178.212.96.195

IP Abuse Reports for 178.212.96.195:

This IP address has been reported a total of 13 times from 9 distinct sources. 178.212.96.195 was first reported on June 10th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 22:44:03 (16 hours ago)	(mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv. ... show more (mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:43:55.357994 2026] [security2:error] [pid 13077:tid 13085] [client 178.212.96.195:43751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosureinternetservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8uqzljnKuiUL3DxBbM6QAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-06-14 21:50:16 (17 hours ago)	{"ClientAddr":"178.212.96.195:56992","ClientHost":"178.212.96.195","ClientPort":"56992","ClientUsern ... show more {"ClientAddr":"178.212.96.195:56992","ClientHost":"178.212.96.195","ClientPort":"56992","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":140008643,"OriginContentSize":418,"OriginDuration":136427390,"OriginStatus":403,"Overhead":3581253,"RequestAddr":"www.cleveradmin.de","RequestContentSize":680,"RequestCount":187651,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-14T23:46:56.222854244+02:00","StartUTC":"2026-06-14T21:46:56.222854244Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-14T23:46:56+02:00"} {"ClientAddr":"178.212.96.195:40332","ClientHost":"178.212.96.195 ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 15:01:49 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv. ... show more (mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:01:42.507200 2026] [security2:error] [pid 30486:tid 30486] [client 178.212.96.195:21083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thebrotherhoodlounge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebrotherhoodlounge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai7CVj1HumdVmvkY0FDtnQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 14:32:58 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv. ... show more (mod_security) mod_security (id:225170) triggered by 178.212.96.195 (ip-178-212-96-195.network.lviv.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:32:52.471246 2026] [security2:error] [pid 21424:tid 21424] [client 178.212.96.195:27566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|susanoneill.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "susanoneill.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ai67lJgXSF89FBo8XMFiagAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 AbuseBaer	2026-06-14 01:21:54 (1 day ago)	access attempt detected by IDS script (C)	Web App Attack
🇩🇪 akasolutions.de	2026-06-13 02:43:43 (2 days ago)	(wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/ip-178-212-96-195.network.lviv.ua ... show more (wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/ip-178-212-96-195.network.lviv.ua) show less	Brute-Force
🇳🇿 Tripwire	2026-06-13 02:35:15 (2 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
Anonymous	2026-06-12 02:37:46 (3 days ago)	(PERMBLOCK) 178.212.96.195 (UA/Ukraine/Lviv/Lviv/ip-178-212-96-195.network.lviv.ua/[redacted]) has h ... show more (PERMBLOCK) 178.212.96.195 (UA/Ukraine/Lviv/Lviv/ip-178-212-96-195.network.lviv.ua/[redacted]) has had more than 4 temp blocks show less	Hacking
Anonymous	2026-06-12 02:14:58 (3 days ago)	(wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/Lviv/Lviv/ip-178-212-96-195.netwo ... show more (wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/Lviv/Lviv/ip-178-212-96-195.network.lviv.ua/[redacted]) show less	Brute-Force
🇩🇪 big-cloud.nl	2026-06-12 00:27:20 (3 days ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-06-11 15:53:25 (3 days ago)	(wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/ip-178-212-96-195.network.lviv.ua ... show more (wordpress) Failed wordpress login from 178.212.96.195 (UA/Ukraine/ip-178-212-96-195.network.lviv.ua) show less	Brute-Force
🇫🇮 inlink.ltd	2026-06-10 21:25:35 (4 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇳🇿 Tripwire	2026-06-10 18:53:21 (4 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 179.43.146.227

🇨🇳 115.191.40.50

🇺🇸 100.49.117.77

🇷🇺 91.224.81.175

🇳🇱 45.142.193.122

🇺🇸 2600:1700:e300:4590:9001:8c6f:e1aa:401

🇧🇷 186.236.102.97

🇭🇰 182.239.83.168

🇮🇳 103.251.31.166

🇺🇸 100.29.192.6

🇩🇪 87.106.255.14

🇺🇸 34.29.89.204

🇰🇷 14.7.91.166

🇺🇸 2604:a880:400:d1:0:4:9631:b001

🇺🇸 135.237.124.61

🇺🇸 91.230.168.237

🇺🇸 5.161.101.51

🇺🇸 4.154.190.17

🇮🇶 212.126.103.50

🇰🇷 211.228.218.47