50.21.191.139
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- IONOS Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8560
- Domain Name
- ionos.com
- Country
- 🇺🇸 United States of America
- City
- Lenexa, Kansas
Abuse Reports
Total reports
36 from
27 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Erpelstolz |
external host: 50.21.191.139 - - [11/Nov/2026:04:01:39 +0100] "GET /admin/.env HTTP/1.1" 301 343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" CF-Ray:- CF-IP:-
|
Web App Attack | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack | |
| 🇩🇰 powerhostingdk |
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
|
Brute-Force | |
| 🇹🇷 Jova |
Part of a distributed password attack on a mail account (SMTP logins from many IPs).
|
Brute-Force | |
| 🇧🇷 KingHost |
|
Brute-Force | |
| Anonymous |
[Drupal AbuseIPDB module] Request path is blacklisted. /.env.bak
|
Web App Attack | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack | |
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted] 50.21.191.139 (US/United States/-)
|
SQL Injection | |
| Anonymous |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack | |
| 🇺🇸 kosada.com |
Repeated requests for suspicious nonexistent URLs, for example: /.env.dist (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36")
|
Web App Attack | |
| 🇩🇪 iNetWorker |
trolling for resource vulnerabilities
|
Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇩🇪 Hary74656 |
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 50.21.191.139] [realclient 50.21.191.139] [04/Nov/2026:15:15:52 +0100] [vhost aschi.at] 403 "GET /.env.bak HTTP/1.1"
|
Web App Attack | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown