This IP address has been reported a total of
8
times from
6 distinct
sources.
78.137.147.128 was first reported on
September 24th 2026 , and the most recent report was
3 days ago United States of America
with 5
reports;
Germany
with 2
reports;
Mexico
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Brute-Force
4
times;
Bad Web Bot
3
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-26 12:09:55
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.dig ...
show more
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.digiweb.ie): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:09:47.233403 2026] [security2:error] [pid 2066:tid 2066] [client 78.137.147.128:35290] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hertzan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hertzan.com"] [uri "/wp-json/wp/v2/users"] [unique_id "are2Cy74XxGTsCdgz4_kUAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:04:22
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.dig ...
show more
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.digiweb.ie): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:04:17.128290 2026] [security2:error] [pid 16333:tid 16333] [client 78.137.147.128:42932] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||museum.henning.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "museum.henning.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aremsSPLVIVilinagPfpnQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-26 04:08:23
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 16:34:19
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.dig ...
show more
(mod_security) mod_security (id:225170) triggered by 78.137.147.128 (ip-78-137-147-128.clw.metro.digiweb.ie): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 12:34:12.180625 2026] [security2:error] [pid 29147:tid 29147] [client 78.137.147.128:40304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iplayriichi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iplayriichi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "araihGRMsjgxL4xy1r6L9gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-24 17:25:56
(5 days ago)
WordPress login attempt
Brute-Force
🇩🇪
big-cloud.nl
2026-09-24 13:53:08
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-09-24 13:17:34
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
lostswordfish.com
2026-09-24 08:04:03
(5 days ago)
Wordfence waf block on robdarnell
Web App Attack
Showing 1 to
8
of 8 reports
