Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 209.38.201.61:
This IP address has been reported a total of
41
times from
36 distinct
sources.
209.38.201.61 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Denmark
with 1
report.
The only category in these recent reports was:
Port Scan
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Probed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Str ...
show moreProbed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Strike C2 server)
show less
2025-09-02 22:01:51 209.38.201.61 File scanning, blocking 209.38.201.61 for 5 minutes
Web App Attack
Anonymous
Fail2Ban Log Report 209.38.201.61 - [02/Sep/2025:23:49:40 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03 ...
show moreFail2Ban Log Report 209.38.201.61 - [02/Sep/2025:23:49:40 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xF3\xF5\xC6b&\xC2L\xC8\xA2\xC0\xE8\xAB\xE2\x9E \xA1W\xD1@\x9E\xCB\xE7\xFFt\x15MS\x1A\xC9A\xAD\x03\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 403 146 "-" "-" "-" "-"
...
show less
Hacking
SQL Injection
Web App Attack
Anonymous
2025-09-02T18:50:44.262391+00:00 caddy caddy[66557]: {"level":"info","ts":1756839044.2617764,"logger ...
show more2025-09-02T18:50:44.262391+00:00 caddy caddy[66557]: {"level":"info","ts":1756839044.2617764,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"209.38.201.61","remote_port":"57552","client_ip":"209.38.201.61","proto":"HTTP/1.1","method":"GET","host":"142.132.232.19","uri":"/upl.php","headers":{"User-Agent":["Mozilla/5.0"],"Accept":["*/*"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000016201,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.232.19/upl.php"],"Content-Type":[]}}
...
show less
9 attack(s) detected since 2025-09-02T16:57:27.179Z, such as these: {"event":"nginx_block","ip":"209 ...
show more9 attack(s) detected since 2025-09-02T16:57:27.179Z, such as these: {"event":"nginx_block","ip":"209.38.201.61","host":"185.207.107.155","request":"GET /password.php HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","reason":"service:unknow","timestamp":"2025-09-02T16:57:27 00:00"} Report Details: https://p4u.xyz/1OFAJ64W9O5/1IP Details: https://p4u.xyz/1OFAJ64W9O5/2
show less
Blocked by UFW (TCP on 80)
Source port: 43037
TTL: 236
Packet length: 44
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 43037
TTL: 236
Packet length: 44
TOS: 0x08
This report (for 209.38.201.61) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
