JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.162.242.196

178.162.242.196 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 0%: ?

ISP	Leaseweb Deutschland GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS28753
Hostname(s)	196.242.162.178.hosted.by.hostdzire.com
Domain Name	leaseweb.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.162.242.196

Whois 178.162.242.196

IP Abuse Reports for 178.162.242.196:

This IP address has been reported a total of 55 times from 36 distinct sources. 178.162.242.196 was first reported on April 12th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-05-01 00:50:26 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-04-30 13:04:10 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-04-14 00:08:18 (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Back ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
Anonymous	2026-04-13 08:05:07 (5 months ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇩🇪 ger-stg-sifi1	2026-04-13 07:08:34 (5 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 onlyops.app	2026-04-13 07:00:06 (5 months ago)	Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-mods ... show more Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-modsecurity jail) \| onlyops.app show less	Exploited Host
🇫🇷 Guardian	2026-04-13 06:44:58 (5 months ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to retrieve configuration file (x14) 178.162.242.196 [13/Apr/2026:06:44:57] "GET / HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /src/.env HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /api/.env HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /serviceAccountKey.json HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /.git/config HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /backend/.env HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /laravel/.env HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /.npmrc HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /.openai/config.json HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /config.json HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /.env.staging HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /docker-compose.yml HTTP/1.1" 178.162.242.196 [13/Apr/2026:06:44:58] "GET /.env HTTP/1.1" 178.162.242.196 [13/A show less	Port Scan Web App Attack
🇩🇪 akasolutions.de	2026-04-13 05:05:22 (5 months ago)	(mod_security) mod_security triggered on hostname [redacted] 178.162.242.196 (DE/Germany/196.242.162 ... show more (mod_security) mod_security triggered on hostname [redacted] 178.162.242.196 (DE/Germany/196.242.162.178.hosted.by.hostdzire.com) show less	SQL Injection
🇩🇪 MusicLibrary	2026-04-13 04:53:50 (5 months ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-04-13 04:42:19 (5 months ago)		Web App Attack
🇧🇪 cmbplf	2026-04-13 02:33:21 (5 months ago)	1.829 requests with url.path .env 697 requests with url.path config.json 227 requests with url. ... show more 1.829 requests with url.path .env 697 requests with url.path config.json 227 requests with url.path credentials.json 221 requests with url.path secrets.json 220 requests with url.path compose.yml 216 requests with url.path .npmrc 190 requests with url.path */.git/config show less	Brute-Force Bad Web Bot
🇦🇺 2000cn.com.au	2026-04-13 02:31:26 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-04-13 01:35:43 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 178.162.242.196 (196.242.162.178.hosted.by.host ... show more (mod_security) mod_security (id:210492) triggered by 178.162.242.196 (196.242.162.178.hosted.by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 21:35:35.858862 2026] [security2:error] [pid 520958:tid 520958] [client 178.162.242.196:19984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bespoke-ss.com"] [uri "/server/.env"] [unique_id "adxIZxeJz-Gwecd84lBHCAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Philister11	2026-04-13 01:07:02 (5 months ago)	CrowdSec: crowdsecurity/http-sensitive-files (DE/AS28753)	Web App Attack Hacking
🇩🇪 Philister11	2026-04-13 00:48:14 (5 months ago)	CrowdSec: crowdsecurity/http-probing (DE/AS28753)	Web App Attack Hacking

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.154.129.214

🇵🇰 202.141.254.254

🇷🇺 193.143.1.51

🇧🇷 189.126.91.107

🇺🇸 184.176.134.71

🇫🇷 91.196.152.191

🇺🇸 64.62.156.192

🇺🇸 51.8.106.11

🇨🇳 39.96.14.142

🇵🇱 193.34.212.54

🇺🇸 193.3.53.5

🇫🇷 91.231.89.190

🇩🇪 69.5.169.111

🇺🇸 66.132.186.225

🇬🇧 35.203.210.252

🇨🇳 8.134.239.76

🇮🇷 217.11.23.245

🇿🇦 185.132.186.49

🇷🇺 178.20.45.128

🇨🇳 123.60.114.76