JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 78.141.223.0

78.141.223.0 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 30%: ?

30%

ISP	JW Lucasweg 35
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	78.141.223.0.vultrusercontent.com
Domain Name	vultr.com
Country	🇳🇱 Netherlands
City	Haarlem, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 78.141.223.0

Whois 78.141.223.0

IP Abuse Reports for 78.141.223.0:

This IP address has been reported a total of 14 times from 4 distinct sources. 78.141.223.0 was first reported on July 30th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-01 16:03:51 (10 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:03:44.860976 2026] [security2:error] [pid 3110626:tid 3110653] [client 78.141.223.0:59573] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gestorialuengo.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gestorialuengo.com"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am4Y4F91L0zLqe87B5rtDQAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 13:27:19 (12 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:27:11.480262 2026] [security2:error] [pid 3864221:tid 3864221] [client 78.141.223.0:53497] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|casagrotto.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "casagrotto.com"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am30Ly3pmG2Hev8WLw3eBAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 12:56:47 (13 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:56:43.067351 2026] [security2:error] [pid 549267:tid 549267] [client 78.141.223.0:57805] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bogans.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bogans.net"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am3tC8VpGw4OipUtwonflwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 11:24:42 (14 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 07:24:36.250625 2026] [security2:error] [pid 4098459:tid 4098459] [client 78.141.223.0:55724] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|365m4.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "365m4.com"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am3XdMknLov3BBA1s7dNNAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-01 10:29:32 (15 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 10:01:03 (16 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 06:00:53.319850 2026] [security2:error] [pid 3885:tid 3921] [client 78.141.223.0:61929] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|asrtrax.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asrtrax.com"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am3D1cuwrKyD33EyxmsebAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 03:10:30 (23 hours ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 23:10:21.258621 2026] [security2:error] [pid 16744:tid 16744] [client 78.141.223.0:50758] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|10besthotels.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "10besthotels.com"] [uri "/storage/logs/laravel-2026-07-30.log"] [unique_id "am1jnf5732OzHjBWUxn2PgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 14:12:33 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 10:12:25.819698 2026] [security2:error] [pid 2857076:tid 2857076] [client 78.141.223.0:62775] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thebradleyclinic.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thebradleyclinic.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtbyV61JrH-IWI4JmfqFgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 10:25:39 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 06:25:34.409320 2026] [security2:error] [pid 3068130:tid 3068130] [client 78.141.223.0:61873] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stickittomebuttons.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stickittomebuttons.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsmnvzqiBww_O-gvKyfWgAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇹 Subnet Shadow Specter	2026-07-30 08:59:40 (2 days ago)	[Security Alert] Automated scanning for resource vulnerabilities via malicious request patterns. IP ... show more [Security Alert] Automated scanning for resource vulnerabilities via malicious request patterns. IP automatically blocked and banned. [Method]: => GET. [Request]: /admin. IP blocked. [User-Agent]: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0. [OS]: Linux. [IP Address]: 78.141.223.0. [IoA Datetime]: 2026-07-30 00:48:16 UTC +1. show less	Bad Web Bot Hacking Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 06:39:49 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 02:39:44.917787 2026] [security2:error] [pid 1785343:tid 1785343] [client 78.141.223.0:49620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|xtrl.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "xtrl.com"] [uri "/storage/logs/laravel-2026-07-28.log"] [unique_id "amrxsCIeLHyzI_WSXteTbgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 05:03:56 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com ... show more (mod_security) mod_security (id:210730) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 01:03:43.883272 2026] [security2:error] [pid 3234047:tid 3234047] [client 78.141.223.0:51806] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|weismaninfrared.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "weismaninfrared.com"] [uri "/storage/logs/laravel-2026-07-28.log"] [unique_id "amrbL_PzZDBFMdUKmHeTZAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-30 03:58:35 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 78.141.223.0 (78.141.223.0.vultruser ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 78.141.223.0 (78.141.223.0.vultrusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇬🇧 consul.to	2026-07-30 02:52:24 (2 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇪 217.142.27.50

🇹🇼 198.235.24.111

🇺🇸 192.155.90.220

🇦🇷 181.228.67.146

🇳🇱 176.65.132.39

🇺🇸 162.216.149.241

🇯🇵 111.235.76.92

🇩🇪 104.207.52.23

🇮🇳 103.91.120.219

🇿🇦 102.129.57.123

🇩🇪 46.101.180.112

🇧🇪 34.156.126.195

🇨🇳 8.148.185.187

🇺🇸 209.50.171.7

🇳🇱 185.242.226.9

🇺🇸 147.185.132.69

🇺🇸 142.252.153.74

🇨🇳 123.160.233.145

🇹🇭 122.154.235.21

🇺🇸 109.105.210.54