JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.78.104.37

5.78.104.37 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 88%: ?

88%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212317
Hostname(s)	static.37.104.78.5.clients.your-server.de
Domain Name	hetzner.com
Country	🇺🇸 United States of America
City	Hillsboro, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.78.104.37

Whois 5.78.104.37

IP Abuse Reports for 5.78.104.37:

This IP address has been reported a total of 46 times from 36 distinct sources. 5.78.104.37 was first reported on May 5th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-02 04:07:19 (2 days ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 tecnicorioja	2026-07-01 22:01:14 (2 days ago)	wp-login attack [01/Jul/2026:09:03:22	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 12:22:31 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-se ... show more (mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:22:27.865927 2026] [security2:error] [pid 12624:tid 12633] [client 5.78.104.37:50652] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|councilofforeignministers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "councilofforeignministers.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akUGg9-IeVVjQLDpdddUTAAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-01 12:05:47 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 10:37:48 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-se ... show more (mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 06:37:42.757251 2026] [security2:error] [pid 7969:tid 7969] [client 5.78.104.37:43472] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fetchamreadingroom.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fetchamreadingroom.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akTt9lguvsUZMNRcZtgnEwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-01 10:24:07 (3 days ago)	(wordpress) Failed wordpress login from 5.78.104.37 (US/United States/Oregon/Hillsboro/static.37.104 ... show more (wordpress) Failed wordpress login from 5.78.104.37 (US/United States/Oregon/Hillsboro/static.37.104.78.5.clients.your-server.de/[redacted]): (CF_ENABLE) show less	Brute-Force
🇫🇷 masterguru	2026-07-01 09:01:15 (3 days ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 5.78.104.37 (US/United States/static.37.104.7 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 5.78.104.37 (US/United States/static.37.104.78.5.clients.your-server.de): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-07-01 06:38:51 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-01 06:19:33 (3 days ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-01 05:54:59 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 lostswordfish.com	2026-07-01 05:50:06 (3 days ago)	Wordfence waf block on advocates4change	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-01 05:37:36 (3 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:35:32 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-se ... show more (mod_security) mod_security (id:225170) triggered by 5.78.104.37 (static.37.104.78.5.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:35:26.660722 2026] [security2:error] [pid 17292:tid 17292] [client 5.78.104.37:50976] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lightbender.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightbender.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akSnHiAwdBkk31iFLzE5sQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-01 05:35:22 (3 days ago)	(wplogin) Failed WordPress login from 5.78.104.37 (US/United States/static.37.104.78.5.clients.your- ... show more (wplogin) Failed WordPress login from 5.78.104.37 (US/United States/static.37.104.78.5.clients.your-server.de): 5 in the last 3600 secs (0-122) show less	Hacking
🇫🇷 ELYAZ	2026-07-01 05:29:44 (3 days ago)	(y4) Failed scan -byebye- from 5.78.104.37 (US/United States/static.37.104.78.5.clients.your-server. ... show more (y4) Failed scan -byebye- from 5.78.104.37 (US/United States/static.37.104.78.5.clients.your-server.de): (CF_ENABLE) show less	Hacking

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.5.31.61

🇨🇳 122.190.1.103

🇻🇳 103.154.62.14

🇳🇱 91.92.40.28

🇳🇱 34.178.21.247

🇺🇸 152.32.182.41

🇸🇬 138.2.106.45

🇩🇪 94.16.17.139

🇫🇷 85.217.140.12

🇺🇸 84.252.113.54

🇭🇰 34.92.241.65

🇺🇸 20.55.3.30

🇧🇷 205.210.31.213

🇱🇻 185.113.139.51

🇧🇷 131.0.66.26

🇯🇵 114.16.205.118

🇸🇬 103.7.11.134

🇨🇳 101.126.17.72

🇸🇬 101.47.8.188

🇺🇸 66.132.186.246