JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.245.36.108

Recent Activity

Abuse Confidence Score

100% Critical

7,781 reports

1,129 reporters · latest 1 hour ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): a93200c42e.scan.leakix.org
Domain Name: digitalocean.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

7,781 from 1,129 distinct reporters

First reported

June 20th 2023

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇵🇱 Poland 193 🇩🇪 Germany 185 🇺🇸 United States of America 185

Most common categories Web App Attack 726 Bad Web Bot 417 Brute-Force 260 Port Scan 187 Hacking 181

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 gandaflux	2026-11-01 18:23:10 (1 hour ago)	157.245.36.108 [redacted-domain] - [01/Nov/2026:19:23:03 +0100] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 157.245.36.108 [redacted-domain] - [01/Nov/2026:19:23:04 +0100] "GET /.env HTT ... show more 157.245.36.108 [redacted-domain] - [01/Nov/2026:19:23:03 +0100] "GET /.DS_Store HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 157.245.36.108 [redacted-domain] - [01/Nov/2026:19:23:04 +0100] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" 157.245.36.108 [redacted-domain] - [01/Nov/2026:19:23:08 +0100] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (l9scan/2.0.037313e2738313e23383e21353; +[redacted-url]" show less	Web App Attack
🇦🇺 nzhost.co.nz	2026-11-01 17:59:08 (2 hours ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 Mangelot Hosting	2026-11-01 17:29:37 (2 hours ago)	(bad_user_agent) srv101 Attack tool user-agent 157.245.36.108 (GB/United Kingdom/a93200c42e.scan.leakix.org): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇯🇵 ZEROVOX	2026-11-01 15:12:22 (5 hours ago)	CrowdSec: crowdsecurity/jira_cve-2021-26086 detected	Web App Attack
🇮🇹 VHosting	2026-11-01 12:45:03 (7 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 4server	2026-11-01 12:06:02 (8 hours ago)	[SunNov0113:05:55.3801632026][security2:error][pid2468463:tid2468588][client157.245.36.108:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ... show more [SunNov0113:05:55.3801632026][security2:error][pid2468463:tid2468588][client157.245.36.108:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"creazione-siti-web-ticino.ch\"][uri\"/.DS_Store\"][unique_id\"aucrI0UtIPMmRYQ2zkTh6wAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-11-01 10:56:21 (9 hours ago)	2026-11-01 @ 11:55:56 (CET) ~ Blocked for trying to access: /about	Web App Attack
🇩🇪 Dominik Lysiak	2026-11-01 10:14:53 (10 hours ago)	157.245.36.108 - - [01/Nov/2026:11:14:53 +0100] "GET /.env HTTP/1.1" 400 248 "-" "Mozilla/5.0 (l9scan/2.0.5343e2834323e21363e2230323; +https://leakix.net)" ...	Web App Attack
🇵🇱 Budyn	2026-11-01 08:36:26 (11 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: db.teddypot.store \| Path: /.env \| User-Agent: Mozilla/5.0 (l9scan/2.0.9353e2135313e27363e223 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: db.teddypot.store \| Path: /.env \| User-Agent: Mozilla/5.0 (l9scan/2.0.9353e2135313e27363e2237313; +https://leakix.net) \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇿🇦 Megasurf	2026-11-01 05:16:14 (14 hours ago)	web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).	Web App Attack
🇺🇸 conrad10781	2026-11-01 04:02:28 (16 hours ago)	nginx-dot-env	Web App Attack
🇪🇸 librebit	2026-11-01 03:22:09 (16 hours ago)	Brute force	Brute-Force
🇩🇪 weiss	2026-11-01 02:29:26 (17 hours ago)	CrowdSec blocked IP (crowdsecurity/jira_cve-2021-26086) on edge-syd	Hacking Web App Attack
🇺🇸 grassyloki	2026-11-01 01:44:00 (18 hours ago)	Leakix l9scan scanning public web host for GraphQL endpoints and config.json. Target: HTTPS 443 on kimberlymackdesign.com, POST /api/gql and /graphql/api, GET /config.json Seen: 2026-10-31 21:44 EDT - 21:44:39 POST /api/gql HTTP/1.1 404 GraphQL endpo ... show more Leakix l9scan scanning public web host for GraphQL endpoints and config.json. Target: HTTPS 443 on kimberlymackdesign.com, POST /api/gql and /graphql/api, GET /config.json Seen: 2026-10-31 21:44 EDT - 21:44:39 POST /api/gql HTTP/1.1 404 GraphQL endpoint probing - 21:44:37 POST /graphql/api HTTP/1.1 404 GraphQL endpoint probing - 21:44:39 GET /config.json HTTP/1.1 404 config-file enumeration - User-agent l9scan/2.0.23e25333e21323e2430313, +https://leakix.net show less	Web App Attack
🇳🇱 Alt255	2026-10-31 21:19:08 (22 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 157.245.36.108 - - [31/Oct/2026:22:19:01 +0100] "GET /.env HTTP/1.1" 301 554 "-" "Mozilla/5.0 (l9scan/2.0.435313e2031323e2434313e2633313; +https: ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 157.245.36.108 - - [31/Oct/2026:22:19:01 +0100] "GET /.env HTTP/1.1" 301 554 "-" "Mozilla/5.0 (l9scan/2.0.435313e2031323e2434313e2633313; +https://leakix.net)" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 7781 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.166

🇺🇸 172.182.199.29

🇳🇱 77.239.124.36

🇨🇭 66.198.225.68

🇭🇰 118.26.37.246

🇸🇬 82.197.69.56

🇺🇸 70.182.12.141

🇫🇷 51.91.156.22

🇸🇬 47.79.201.199

🇳🇱 192.253.248.226

🇺🇸 167.99.98.129

🇺🇸 147.185.132.169

🇺🇸 140.235.1.193

🇺🇸 130.131.220.95

🇵🇰 103.152.100.77

🇺🇸 64.227.27.220

🇰🇷 58.151.234.178

🇰🇷 218.148.17.156

🇮🇩 202.150.138.153

🇬🇪 178.134.110.115