138.201.255.104

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
17 reports
14 reporters · latest 9 hours ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
crawl-138-201-255-104.bot.netapi.com
Domain Name
hetzner.com
Country
🇩🇪 Germany
City
Falkenstein, Saxony
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 5 🇺🇸 United States of America 4 🇩🇪 Germany 2
Most common categories Hacking 9 Web App Attack 8 Port Scan 5 Bad Web Bot 5 SQL Injection 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇰 ScamAware
Bad Web Bot
🇺🇸 gerensat
2026-11-14 05:34:49 | / | [] | NetAPI/1.1 (+https://netapi.com/bot.html)
Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous
Probing
Hacking
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot Web App Attack
🇩🇪 klaus_ph
138.201.255.104 - - [13/Nov/2026:20:18:01 +0100] "GET / HTTP/1.1" 301 521 "-" "NetAPI/1.1 (+https://netapi.com/bot.html)" ...
Bad Web Bot
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 nekoify
Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 HamSammich
Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-11-12T21:18Z).
Port Scan Web App Attack
🇳🇱 BellFix
Fail2ban reported 138.201.255.104 for npm-docker
Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
Web App Attack, Hacking
Hacking Web App Attack
Anonymous
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=2
Hacking
🇸🇪 SkyDancer
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇬 193.24.211.206
🇺🇸 172.105.147.96
🇺🇸 64.227.23.88
🇮🇳 20.219.139.13
🇹🇭 202.29.51.12
🇰🇷 121.133.167.123
🇳🇱 93.123.109.105
🇺🇸 66.132.195.17
🇰🇷 49.174.174.10
🇧🇪 35.206.151.143
🇺🇸 18.116.101.220
🇮🇳 14.97.77.182
🇫🇷 194.163.166.11
🇧🇷 177.152.106.50
🇺🇸 45.33.14.5
🇧🇪 35.195.85.59
🇯🇵 223.134.89.104
🇺🇸 216.25.90.51
🇺🇸 205.210.31.46
🇳🇵 103.1.93.33
feedback