This IP address has been reported a total of
9
times from
8 distinct
sources.
202.58.78.239 was first reported on
September 4th 2025 , and the most recent report was
3 hours ago Germany
with 1
report.
The most common categories in these recent reports were:
Port Scan
1
time;
Brute-Force
1
time;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-09-22 16:26:32
(3 hours ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
🇳🇱
ConsulHosting
2026-06-28 13:54:21
(2 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 11:27:27
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 202.58.78.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 202.58.78.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:27:16.055821 2026] [security2:error] [pid 15440:tid 15440] [client 202.58.78.239:51555] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.58.78.239 (+1 hits since last alert)|serranoscoffee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "serranoscoffee.com"] [uri "/xmlrpc.php"] [unique_id "aj-zlL9pXm1k1OzMYiDIRwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-26 16:35:33
(2 months ago)
(wordpress) Failed wordpress login from 202.58.78.239 (ID/Indonesia/-)
Brute-Force
2026-06-05 16:37:11
(3 months ago)
Attac
Brute-Force
🇨🇦
1gz
2026-05-13 05:57:37
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/3 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/3 (GET method)
Endpoint: /sw.js
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
masterguru
2026-03-05 01:58:59
(6 months ago)
(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 202.58.78.239 (ID/Indonesia/-): 1 i ...
show more
(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 202.58.78.239 (ID/Indonesia/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2025-12-28 21:03:00
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 202.58.78.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 202.58.78.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 16:02:43.204567 2025] [security2:error] [pid 7617:tid 7617] [client 202.58.78.239:49248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.calstarsfarm.com.herston.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.calstarsfarm.com.herston.net"] [uri "/"] [unique_id "aVGa80DKjQE3ZQHbE1EYZwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2025-09-04 21:49:56
(1 year ago)
[Fri Sep 05 04:49:55.232552 2025] [security2:error] [pid 822740:tid 139836357863104] [client 202.58. ...
show more
[Fri Sep 05 04:49:55.232552 2025] [security2:error] [pid 822740:tid 139836357863104] [client 202.58.78.239:54018] ModSecurity: Access denied with code 403 (phase 1). Match of "pm www.office.com powerpoint.officeapps.live.com /offline-service-worker-19-02-2025.js /offline-service-worker-27-01-2024-v5-0-1.js /offline-service-worker-01-08-2023-v4-5-1.js /OneSignalSDKWorker.js /worker-analytic-helper-27-11-2022.js/ /worker-analyti ..." against "REQUEST_HEADERS:Referer" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "472"] [id "440067"] [msg "BAD Referer"] [data "Matched Data: staklim-jatim.bmkg.go.id found within REQUEST_HEADERS:Referer: https://bit.ly/3JAADV8 request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aLoJg-wb
...
show less
Hacking
Web App Attack
Showing 1 to
9
of 9 reports
