This IP address has been reported a total of
14
times from
9 distinct
sources.
178.217.159.78 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 3
reports;
United States of America
with 3
reports;
Germany
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
5
times;
DDoS Attack
4
times;
Bad Web Bot
3
times;
Exploited Host
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:225170) triggered by 178.217.159.78 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:225170) triggered by 178.217.159.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:15:11.841061 2026] [security2:error] [pid 20182:tid 20182] [client 178.217.159.78:45594] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boaredraven.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atApHyb8YO3vR0vwWIHj4gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
| [Dangerous/Russia] Aggressive IP 178.217.159.78 (~30 hits). Type: DoS Defender- Web server 400 err ...
show more| [Dangerous/Russia] Aggressive IP 178.217.159.78 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 178.217.159.78
2026-09-29T23:55:26+02 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 178.217.159.78
2026-09-29T23:55:26+02:00 vpn Access-Reject 'xloup10' station: 178.217.159.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 178.217.159.78
2026-09-28T14:32:58+02 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 178.217.159.78
2026-09-28T14:32:58+02:00 vpn Access-Reject 'hofp02' station: 178.217.159.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
UDP flood (DDoS) vs AS215599: 633 pkts / 0.9 MB to UDP 8443 across 150 dst IP(s), 2026-08-19 21:46 t ...
show moreUDP flood (DDoS) vs AS215599: 633 pkts / 0.9 MB to UDP 8443 across 150 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 633 pkts / 0.9 MB to UDP 8443 across 150 dst IP(s), 2026-08-19 21:46 t ...
show moreUDP flood (DDoS) vs AS215599: 633 pkts / 0.9 MB to UDP 8443 across 150 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS2 ...
show moreDDoS flood attack against 31.56.58.23 (2026-08-15 17:54:21 -> 2026-08-15 18:09:21 UTC) targeting AS215599. This IP (AS51133) sent ~2252 packets (2.99 MB) during the attack window. Likely a compromised device (botnet).
show less
