JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 78.189.24.202

78.189.24.202 was found in our database!

This IP was reported 195 times. Confidence of Abuse is 100%: ?

100%

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Fixed Line ISP
ASN	AS9121
Hostname(s)	78.189.24.202.static.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Izmir, Izmir Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 78.189.24.202

Whois 78.189.24.202

IP Abuse Reports for 78.189.24.202:

This IP address has been reported a total of 195 times from 111 distinct sources. 78.189.24.202 was first reported on June 25th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-17 16:43:25 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-07-17 16:04:47 (2 days ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env~ \| 5 distinct paths \| UA: Mozilla/5.0 (Win ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env~ \| 5 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; show less	Hacking
🇵🇱 lns.bz	2026-07-17 15:13:26 (2 days ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 zwebvigil	2026-07-17 12:13:30 (2 days ago)	78.189.24.202 [17/Jul/2026:05:13:25 -0700] "GET /docker-compose.dev.yml HTTP/1.1" 404 22 "-" port=5 ... show more 78.189.24.202 [17/Jul/2026:05:13:25 -0700] "GET /docker-compose.dev.yml HTTP/1.1" 404 22 "-" port=51451 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 3606 78.189.24.202 [17/Jul/2026:05:13:27 -0700] "GET /docker-compose.prod.yml HTTP/1.1" 404 22 "-" port=51499 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 3363 78.189.24.202 [17/Jul/2026:05:13:27 -0700] "GET /config.js HTTP/1.1" 404 22 "-" port=51499 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 2905 78.189.24.202 [17/Jul/2026:05:13:27 -0700] "GET /config.json HTTP/1.1" show less	Web App Attack
🇩🇪 DocNetzwerk	2026-07-17 10:04:14 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 78.189.24.202 (TR/Türkiye/78.189.24.202 ... show more (mod_security) mod_security triggered on hostname [redacted] 78.189.24.202 (TR/Türkiye/78.189.24.202.static.ttnet.com.tr) show less	SQL Injection
🇫🇷 breubit	2026-07-17 09:02:17 (2 days ago)	78.189.24.202 - - [17/Jul/2026:11:02:16 +0200] "GET /.env~ HTTP/1.1" 403 4467 "-" "Mozilla/5.0 (Wind ... show more 78.189.24.202 - - [17/Jul/2026:11:02:16 +0200] "GET /.env~ HTTP/1.1" 403 4467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-17 06:37:45 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇮🇩 Burayot	2026-07-17 04:31:30 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 78.189.24.202 (TR/Türkiye/78.189.24. ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 78.189.24.202 (TR/Türkiye/78.189.24.202.static.ttnet.com.tr): 2 in the last 3600 secs show less	Web App Attack
🇫🇷 masterguru	2026-07-17 02:29:45 (2 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
Anonymous	2026-07-16 23:31:40 (2 days ago)	(caddyscan) Scanner path probe from 78.189.24.202 (TR/Turkey/78.189.24.202.static.ttnet.com.tr): 5 i ... show more (caddyscan) Scanner path probe from 78.189.24.202 (TR/Turkey/78.189.24.202.static.ttnet.com.tr): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:23:31:20 +0000] "GET /var/.env HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:23:31:35 +0000] "GET /wp-config.php.bak HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:23:31:35 +0000] "GET /wp-config.php.old HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:23:31:35 +0000] "GET /wp-config.php.save HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:23:31:36 +0000] "GET /wp-config.php.txt HTTP/1.1" show less	Port Scan
Anonymous	2026-07-16 22:04:58 (2 days ago)	(caddyscan) Scanner path probe from 78.189.24.202 (TR/Turkey/78.189.24.202.static.ttnet.com.tr): 5 i ... show more (caddyscan) Scanner path probe from 78.189.24.202 (TR/Turkey/78.189.24.202.static.ttnet.com.tr): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:22:04:51 +0000] "GET /.env.development.local HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:22:04:51 +0000] "GET /.env.test.local HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:22:04:54 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:22:04:54 +0000] "GET /src/.env HTTP/1.1" [REDACTED] 200 2627 78.189.24.202 - - [16/Jul/2026:22:04:54 +0000] "GET /config/.env HTTP/1.1" show less	Port Scan
🇩🇪 big-cloud.nl	2026-07-16 21:23:59 (2 days ago)	Try to access /config/.env	Web App Attack
🇩🇪 FeG Deutschland	2026-07-16 21:01:43 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇾 Rizzy	2026-07-16 16:42:47 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 IVski	2026-07-16 16:08:45 (3 days ago)	IVski WAF \| Sensitive file probe detected - looking for .env	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 195 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.44.116.87

🇩🇪 165.232.117.238

🇲🇹 46.11.245.8

🇧🇪 198.235.24.249

🇺🇸 165.1.64.191

🇨🇳 113.98.204.9

🇺🇸 54.167.96.173

🇺🇸 172.202.30.177

🇮🇳 171.61.17.130

🇺🇸 162.252.52.39

🇺🇸 162.217.100.36

🇺🇸 147.185.132.27

🇺🇸 146.190.209.45

🇷🇴 92.118.39.14

🇱🇹 45.227.254.170

🇳🇱 45.148.10.30

🇬🇭 41.242.115.84

🇨🇳 39.97.238.183

🇨🇳 1.83.125.66

🇬🇧 2a06:4880:c000::