78.128.113.78

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
22% Elevated
10,198 reports
165 reporters · latest 1 month ago
ISP
Lir.bg EOOD
Usage Type
Commercial
ASN
AS209160
Hostname(s)
ip-113-78.4vendeta.com
Domain Name
lir.bg
Country
🇧🇬 Bulgaria
City
Sofia, Sofia-Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
10,198 from 165 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇺🇸 United States of America 1
Most common categories Web App Attack 4 Bad Web Bot 3 Brute-Force 2 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇺🇸 servicesboats
78.128.113.78 - - [20/Sep/2026:11:42:32 -0700] "POST /customer/address_file/upload HTTP/1.1" 403 4625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0" ...
Web App Attack
🇩🇪 Savvii
20 attempts against mh-misbehave-ban on train
Brute-Force Bad Web Bot Web App Attack
🇩🇪 jbcrn
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/124.0
Bad Web Bot Web App Attack
🇩🇪 Reinhard
Unknown activity, but too many attacks with too many users.
Hacking
🇧🇪 cmbplf
177 requests with url.path *config.xml
Brute-Force Bad Web Bot
🇩🇪 LRob
Enumerating paths that do not exist (scanning) | method: GET | path: /modules/appagebuilder/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 2026-09-12 13:15 UTC
Port Scan Web App Attack
🇩🇪 Phenix Info
SmallGuard.fr/Prestashop Massive 403
Web App Attack
Anonymous
[12/Sep/2026:16:06:48 +0300] 178921840885.634019 78.128.113.78 40382 148.251.76.218 443 [12/Sep/2026:16:08:25 +0300] 178921850567.369042 78.128.113.78 38374 148.251.76.218 443
Web App Attack
Anonymous
WEB attack
Brute-Force
🇯🇵 Watch40x
Automated report from Watch40x security system. Web application probing detected.
Web App Attack
🇩🇪 HandyTreff.de
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -143.065 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: curl/8.5.0
Web App Attack Bad Web Bot
🇺🇸 ipblock.com
IPBlock protected site ID [3390-wh]. Bad agent, site scraper bot [s].
Bad Web Bot
🇬🇧 CrystalMaker
Vulnerability scan - POST /graphql
Hacking
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇱🇧 185.164.107.212
🇮🇳 59.179.31.238
🇮🇳 45.251.69.11
🇧🇪 35.210.140.20
🇷🇴 92.118.39.71
🇫🇷 91.231.89.105
🇬🇧 86.24.114.115
🇳🇱 200.138.46.120
🇮🇳 171.61.168.184
🇺🇸 98.175.42.110
🇬🇧 83.104.86.199
🇸🇬 45.78.194.242
🇫🇮 147.185.133.228
🇧🇩 103.159.2.113
🇮🇳 103.148.20.20
🇩🇪 88.99.146.149
feedback