JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 78.172.212.252

78.172.212.252 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 76%: ?

76%

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Mobile ISP
ASN	AS9121
Hostname(s)	78.172.212.252.dynamic.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 78.172.212.252

Whois 78.172.212.252

IP Abuse Reports for 78.172.212.252:

This IP address has been reported a total of 13 times from 13 distinct sources. 78.172.212.252 was first reported on February 4th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 blik2108	2026-07-11 00:53:23 (1 hour ago)	www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /.env HTTP/1.1" 404 ... show more www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /.env HTTP/1.1" 404 3612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /.env.dev HTTP/1.1" 404 3612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /.env.prod HTTP/1.1" 404 3612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /.env.staging HTTP/1.1" 404 3612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /laravel/.env HTTP/1.1" 404 3612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" www.nomadsailing.co.uk:443 78.172.212.252 - - [11/Jul/2026:01:52:05 +0100] "GET /app/.env HTTP/1.1" 404 3612 "-" "Mozilla/5.0 ... show less	Web App Attack
🇧🇪 cmbplf	2026-07-10 23:32:49 (2 hours ago)	154 requests with url.path *.env	Brute-Force Bad Web Bot
🇭🇺 bcsaba	2026-07-10 22:30:55 (4 hours ago)	Probing for .env file: 78.172.212.252 - - [11/Jul/2026:00:30:52 +0200] "GET /.env HTTP/1.1" 403 548 ... show more Probing for .env file: 78.172.212.252 - - [11/Jul/2026:00:30:52 +0200] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" show less	Web App Attack
Anonymous	2026-07-10 19:56:03 (6 hours ago)	Bot / scanning and/or hacking attempts: GET /media/com_sppagebuilder/assets/iconfont/icowfm6r7/fonts ... show more Bot / scanning and/or hacking attempts: GET /media/com_sppagebuilder/assets/iconfont/icowfm6r7/fonts/sh, GET /media/com_sppagebuilder/assets/iconfont/icor6323b/fonts/sh, GET /media/com_sppagebuilder/assets/iconfont/iconagyqx/fonts/sh, GET /shuzue.phtml?c=echo+OK HTTP/1.1, GET /images/shuzue.php?c=echo+OK HTTP/1.1, POST /index.php?option=com_sppagebuilder&task=asset.uploadCusto, GET /media/com_sppagebuilder/assets/iconfont/iconagyqx/shuzue.p, GET /media/com_sppagebuilder/assets/iconfont/ico09dvde/fonts/sh, GET /shuzue.php?c=echo+OK HTTP/1.1, POST /wp-login.php?action=register HTTP/1.1, GET /media/com_sppagebuilder/assets/iconfont/icowfm6r7/shuzue.p, GET /media/com_sppagebuilder/assets/iconfont/icor6323b/shuzue.p, GET /media/com_sppagebuilder/assets/iconfont/ico09dvde/shuzue.p, POST /wp-login.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 19:29:09 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 78.172.212.252 (78.172.212.252.dynamic.ttnet.co ... show more (mod_security) mod_security (id:210492) triggered by 78.172.212.252 (78.172.212.252.dynamic.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:29:05.319177 2026] [security2:error] [pid 23269:tid 23269] [client 78.172.212.252:58254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etudesoftware.com"] [uri "/admin/.env"] [unique_id "alFIAeeJIJXRHWcH9a1-nAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-10 17:50:41 (8 hours ago)	http-sensitive-files - IP: 78.172.212.252 - time="2026-07-10T19:50:41+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 78.172.212.252 - time="2026-07-10T19:50:41+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 78.172.212.252 (TR/9121) : 4h ban on Ip 78.172.212.252" module=db show less	Web App Attack
🇫🇷 conseilgouz	2026-07-10 16:49:22 (9 hours ago)	loe-6 : Trying access system files=>/phpinfo.php(phpinfo.php)	Hacking
🇫🇷 dynamix	2026-07-10 10:46:26 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 VHosting	2026-07-10 04:30:04 (22 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-10 04:24:13 (22 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-07-10 02:30:01 (1 day ago)	\| [Dangerous/Turkey] Aggressive IP 78.172.212.252 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Turkey] Aggressive IP 78.172.212.252 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-07-10 01:47:25 (1 day ago)	2026/07/10 03:47:25 [error] 1450840#1450840: 32634 open() "/usr/share/nginx/html/wp-login.php" fail ... show more 2026/07/10 03:47:25 [error] 1450840#1450840: 32634 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 78.172.212.252, server: collabora.cislveneto.it, request: "GET /wp-login.php HTTP/1.1", host: "collabora.cislveneto.it" 2026/07/10 03:47:25 [error] 1450840#1450840: *32634 "/usr/share/nginx/html/phpmyadmin/index.html" is not found (2: No such file or directory), client: 78.172.212.252, server: collabora.cislveneto.it, request: "GET /phpmyadmin/ HTTP/1.1", host: "collabora.cislveneto.it" ... show less	DDoS Attack Email Spam Port Scan Spoofing Brute-Force SSH
🇺🇸 kosada.com	2026-02-04 16:32:58 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 61.80.158.202

🇺🇸 20.80.80.29

🇺🇸 184.105.139.88

🇨🇳 182.242.169.22

🇺🇸 162.216.149.14

🇮🇳 150.129.46.70

🇫🇮 147.185.133.16

🇵🇪 132.251.135.107

🇺🇦 91.207.244.97

🇺🇿 89.126.211.166

🇸🇬 82.97.196.200

🇱🇺 64.89.161.82

🇺🇸 45.131.195.241

🇩🇪 45.8.68.76

🇧🇪 34.77.62.182

🇺🇸 20.168.122.19

🇨🇳 14.112.2.152

🇯🇵 8.216.7.213

🇬🇧 2.57.17.192

🇨🇦 2607:f8b0:4023:1807::123