AbuseIPDB » 178.128.192.50

178.128.192.50 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 20%: ?

20%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 178.128.192.50

Whois 178.128.192.50

IP Abuse Reports for 178.128.192.50:

This IP address has been reported a total of 77 times from 54 distinct sources. 178.128.192.50 was first reported on June 12th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
TPI-Abuse	2025-06-12 22:39:24 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 178.128.192.50 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 178.128.192.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 18:39:20.910911 2025] [security2:error] [pid 2842010:tid 2842010] [client 178.128.192.50:44954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.183"] [uri "/.env"] [unique_id "aEtXGNebKhdXjEasBwJSiwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
gurnip	2025-06-12 22:37:16 (2 months ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
Admins@FBN	2025-06-12 22:29:54 (2 months ago)	FW-PortScan: Traffic Blocked srcport=32954 dstport=80	Port Scan
Honeypot-EU-Fru	2025-06-12 22:25:26 (2 months ago)	178.128.192.50 - - [redacted] [13/Jun/2025:00:25:25 +0200] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla ... show more178.128.192.50 - - [redacted] [13/Jun/2025:00:25:25 +0200] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 0.000 - - 178.128.192.50 - - [redacted] [13/Jun/20 ... show less	Bad Web Bot Web App Attack
mielkan.com	2025-06-12 22:22:28 (2 months ago)	| blocked | mielkan-sgp [80/tcp] | source port: 46243 | ttl: 245 | packet length: 44 | tos: 0x00 |	Port Scan Web App Attack
Mölkky	2025-06-12 22:17:09 (2 months ago)	Backdoor detection vulnerability probe from [178.128.192.50]	Port Scan
Starburst SysOp Team	2025-06-12 22:15:13 (2 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-3)	Hacking Bad Web Bot
RCS	2025-06-12 22:14:24 (2 months ago)	fail2ban apache-modsecurity ...	Bad Web Bot Web App Attack
SilverZippo	2025-06-12 22:12:27 (2 months ago)	Web App Attack	Web App Attack
zynex	2025-06-12 22:08:18 (2 months ago)	URL Probing: /.env	Web App Attack
TPI-Abuse	2025-06-12 22:08:04 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 178.128.192.50 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 178.128.192.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 18:07:58.888297 2025] [security2:error] [pid 3244392:tid 3244392] [client 178.128.192.50:37922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.19"] [uri "/.env"] [unique_id "aEtPvopeG6kJ9XC73-9XNgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-12 22:06:02 (2 months ago)	Trying to access config files	Web App Attack
Mr-Money	2025-06-12 22:04:53 (2 months ago)	178.128.192.50 - - [13/Jun/2025:00:04:52 +0200] "GET /.env HTTP/1.1" 404 357 "-" "Mozilla/5.0; Keydr ... show more178.128.192.50 - - [13/Jun/2025:00:04:52 +0200] "GET /.env HTTP/1.1" 404 357 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-06-12 22:04:41 (2 months ago)	IP & Port Scan.	Port Scan Brute-Force SSH
Roper123	2025-06-12 21:54:19 (2 months ago)	Web app attack	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩