38.60.216.78

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
27 reports
21 reporters · latest 6 hours ago
ISP
LIGHT NODE LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS154177
Domain Name
lightnode.com
Country
🇫🇷 France
City
Marseille, Provence-Alpes-Cote d'Azur
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 3
Most common categories Web App Attack 21 Brute-Force 10 Bad Web Bot 6 Hacking 6 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Jova
Requests for webshells on a web server: 2 requests.
Hacking Web App Attack
🇱🇻 GooddayGroup
Automated probing for sensitive configuration files and environment leaks.
Hacking Brute-Force
🇬🇧 Swiptly
Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...
Web App Attack
🇺🇸 SX Communications
Port Scan Hacking Web App Attack
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 38.60.216.78: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇩🇪 Petros Stefanakis
(mod_security) mod_security triggered on hostname [redacted] 38.60.216.78 (FR/France/-)
SQL Injection
🇱🇹 Evag Touf
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 38.60.216.78 (FR/France/-)
Port Scan
🇧🇾 lns.bz
Too many 404 requests [BY]
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh
csagent: score 15.2: php 404 x3, 404 noise floor x3, webshell name x1; 1 domain(s) in 2s
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark
(mod_security) mod_security (id:35002) triggered by 38.60.216.78 (FR/France/-): N in the last X secs
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇨🇦 Not Fake
$f2bV_matches
Web App Attack
🇩🇪 ramazan
Fail2Ban: nginx-4xx | Failures: 13 | Log: /.well-known/acme-challenge/inputs.php /.well-known/acme-challenge/xmrlpc.php?p= /.well-known/content.php /.well-known/gelay.php /.well-known/index.php
Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 162.158.243.39
🇺🇸 207.244.235.106
🇺🇸 205.210.31.110
🇲🇦 196.65.124.80
🇦🇷 190.31.108.108
🇩🇪 188.193.34.84
🇳🇱 185.136.15.2
🇩🇪 151.243.11.37
🇨🇳 120.48.14.72
🇰🇷 59.13.72.226
🇺🇸 52.117.100.181
🇬🇧 35.203.210.139
🇻🇳 27.71.189.190
🇫🇷 5.39.1.253
🇺🇸 4.148.240.223
🇺🇿 213.230.87.17
🇳🇱 172.235.181.217
🇻🇳 171.244.143.209
🇭🇰 123.58.219.129
🇨🇳 117.23.102.252
feedback