JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

178.128.207.138

Recent Activity

Abuse confidence score ?

100% Critical

9,448 reports

1,172 reporters · latest 19 minutes ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	eab9c05722.scan.leakix.org
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 178.128.207.138

Export CSV

This IP address has been reported a total of 9,448 times from 1,172 distinct sources. 178.128.207.138 was first reported on October 18th 2023, and the most recent report was 19 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 194 reports; Germany with 183 reports; Poland with 182 reports. The most common categories in these recent reports were: Web App Attack 684 times; Bad Web Bot 407 times; Brute-Force 228 times; Port Scan 187 times; Hacking 176 times; Other 105 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Agaman	2026-10-26 21:18:30 (19 minutes ago)	Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-26 21:18 UTC. Samples: ... show more Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-26 21:18 UTC. Samples: GET /server-status 444; GET /.DS_Store 444; GET /.env 444. UA: Mozilla/5.0 (l9scan/2.0.535313e2131313e2131313e2538313; +https://leakix.net). Detected by fail2ban. show less	Web App Attack
🇦🇺 Scrapline	2026-10-26 20:20:33 (1 hour ago)	[Fail2Ban] nginx-scraper: banned after 5 failures	Web App Attack
Anonymous	2026-10-26 20:14:04 (1 hour ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-26 19:00:07 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.goblinpot.online \| URI: /v2/_catalog \| UA: Mozilla/5.0 (l9scan/2.0.2323e21323e21323e2430313; +https://leakix.net) \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"178.128.207.138","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50bb3b8e8ec07ca-FRA","Connection":"Keep-Alive","Accept":"application\/json","Accept-Encoding":"gzip, br","X-Forwarded-For":"178.128.207.138"} show less	Bad Web Bot Web App Attack
🇩🇪 altenglaner	2026-10-26 18:21:08 (3 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ... show more Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban. show less	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-10-26 16:53:06 (4 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 Zandro	2026-10-26 16:41:00 (4 hours ago)	connection flood	DDoS Attack Bad Web Bot Exploited Host
🇪🇸 librebit	2026-10-26 15:39:39 (5 hours ago)	Brute force	Brute-Force
🇩🇪 FeG Deutschland	2026-10-26 14:37:36 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇦🇹 René Hickersberger	2026-10-26 14:29:03 (7 hours ago)	malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (l9scan/2.0.2393 ... show more malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (l9scan/2.0.2393e2030323e2734313e2530323; +https://leakix.net)" show less	Bad Web Bot
🇬🇧 KTSTechnology	2026-10-26 14:10:56 (7 hours ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
🇫🇷 masterguru	2026-10-26 06:40:34 (14 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "l9scan" at REQUEST_HEADERS:User-Agent. (1100000-193 ... show more BAD BOT - Detected and Blocked.. Matched phrase "l9scan" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 masterguru	2026-10-26 06:20:00 (15 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "l9scan" at REQUEST_HEADERS:User-Agent. (1100000-201 ... show more BAD BOT - Detected and Blocked.. Matched phrase "l9scan" at REQUEST_HEADERS:User-Agent. (1100000-201) show less	Bad Web Bot
🇺🇸 infra-monitor	2026-10-26 02:00:05 (19 hours ago)	Automated ban via infra-monitor: crowdsecurity/jira_cve-2021-26086, mgmt-path-probe, suspicious-prob ... show more Automated ban via infra-monitor: crowdsecurity/jira_cve-2021-26086, mgmt-path-probe, suspicious-probe show less	Port Scan Hacking Web App Attack
Anonymous	2026-10-26 01:59:33 (19 hours ago)	178.128.207.138 - - [26/Oct/2026:01:59:32 +0000] "\x16\x03\x01\x05\xe1\x01" 400 432 "-" "-" ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 9448 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.32.41.145

🇺🇸 172.234.199.75

🇻🇳 118.70.100.26

🇰🇪 105.163.156.255

🇧🇩 103.138.226.239

🇹🇷 78.190.153.185

🇳🇱 23.109.155.204

🇺🇸 16.216.88.31

🇺🇸 162.240.148.15

🇨🇳 124.67.120.106

🇺🇸 66.132.159.45

🇬🇧 35.203.211.163

🇺🇸 192.178.16.65

🇧🇷 186.249.177.33

🇨🇳 182.43.76.81

🇺🇸 104.232.79.58

🇧🇩 103.6.160.50

🇿🇦 102.254.89.6

🇳🇱 77.67.26.113

🇺🇸 20.127.185.37