JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 76.13.78.252

76.13.78.252 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 11%: ?

11%

ISP	Hostinger Operations UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Hostname(s)	srv1372096.hstgr.cloud
Domain Name	hostinger.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 76.13.78.252

Whois 76.13.78.252

IP Abuse Reports for 76.13.78.252:

This IP address has been reported a total of 58 times from 33 distinct sources. 76.13.78.252 was first reported on April 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-19 15:07:46 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 11:07:38.717611 2026] [security2:error] [pid 20930:tid 20930] [client 76.13.78.252:47516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.zerotaxlab.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.zerotaxlab.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agx8uqS3znePSvfTlIstrwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 11:29:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 07:29:29.651438 2026] [security2:error] [pid 31178:tid 31178] [client 76.13.78.252:41906] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.controvac.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.controvac.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agxJmeyaCo2tQm77StTidgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-19 10:38:55 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-18 22:55:20 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 18:55:12.689537 2026] [security2:error] [pid 27352:tid 27352] [client 76.13.78.252:45760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.darkalleyproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.darkalleyproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aguY0I3gaa0oq7NAqrOTTAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 reznekcs	2026-05-18 09:30:36 (1 month ago)	F2B wordpress ban. Logs: 76.13.78.252 - - [18/May/2026:11:30:29 +0200] "POST /xmlrpc.php HTTP/2.0" 2 ... show more F2B wordpress ban. Logs: 76.13.78.252 - - [18/May/2026:11:30:29 +0200] "POST /xmlrpc.php HTTP/2.0" 200 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" 76.13.78.252 - - [18/May/2026:11:30:34 +0200] "POST /wp-login.php HTTP/2.0" 200 3477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 02:14:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 76.13.78.252 (srv1372096.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 22:14:31.028238 2026] [security2:error] [pid 9818:tid 9858] [client 76.13.78.252:53030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.miraclebrow.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.miraclebrow.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agkkhyTp_tiwQq0NIouoRwAAAcA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-06 04:08:01 (2 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx01,mx02,m ... show more Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx01,mx02,mx03,wa01,wa02] show less	Bad Web Bot Web App Attack
🇦🇺 QT	2026-04-30 06:12:00 (2 months ago)	Unauthorised WordPress admin login attempted at 2026-04-30 16:11:52 +1000	Web App Attack
🇷🇴 INTEQ	2026-04-30 01:56:42 (2 months ago)	Web attack from 76.13.78.252	Web App Attack
🇫🇮 Shaik Sai Meera	2026-04-30 00:05:02 (2 months ago)	IM360 WAF: Request indicates a Headless browser	Brute-Force Web App Attack
Anonymous	2026-04-29 21:00:12 (2 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-04-29 08:07:10 (2 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)	Hacking
🇺🇸 NicoID	2026-04-29 00:05:59 (2 months ago)	76.13.78.252 - - [28/Apr/2026:05:37:00 -0600] "POST /wp-login.php HTTP/2.0" 403 10854 "-" "Mozilla/5 ... show more 76.13.78.252 - - [28/Apr/2026:05:37:00 -0600] "POST /wp-login.php HTTP/2.0" 403 10854 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" ... show less	Brute-Force
🇫🇮 Shaik Sai Meera	2026-04-29 00:05:00 (2 months ago)	IM360 WAF: Request indicates a Headless browser	Brute-Force Web App Attack
🇲🇹 Malta	2026-04-28 20:53:30 (2 months ago)	76.13.78.252 - - [28/Apr/2026:22:53:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 76.13.78.252 - - [28/Apr/2026:22:53:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.65

🇫🇮 147.185.133.13

🇳🇱 141.11.62.236

🇺🇸 103.203.57.2

🇳🇱 45.153.34.137

🇺🇸 158.94.187.69

🇩🇪 130.12.180.77

🇺🇸 50.116.72.209

🇹🇼 198.235.24.102

🇩🇪 69.5.169.78

🇸🇬 47.236.188.232

🇺🇸 24.199.125.177

🇺🇸 209.38.76.50

🇺🇸 195.184.76.38

🇺🇦 195.64.137.83

🇧🇷 187.72.128.177

🇮🇳 154.61.75.100

🇺🇸 54.183.142.177

🇺🇸 54.177.14.174

🇺🇸 52.167.144.143