JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.229.112

209.38.229.112 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 46%: ?

46%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.229.112

Whois 209.38.229.112

IP Abuse Reports for 209.38.229.112:

This IP address has been reported a total of 11 times from 9 distinct sources. 209.38.229.112 was first reported on January 15th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Tanados	2026-06-13 23:39:23 (11 hours ago)	Blocked by UFW [3949/tcp] Source port: 52339 TTL: 239 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [3949/tcp] Source port: 52339 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-06-13 15:02:13 (19 hours ago)	2026-06-13T05:37 kernel: OUT= SRC=209.38.229.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=47112 PR ... show more 2026-06-13T05:37 kernel: OUT= SRC=209.38.229.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=47112 PROTO=TCP SPT=43028 DPT=14671 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T07:38 kernel: OUT= SRC=209.38.229.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=16643 PROTO=TCP SPT=48254 DPT=12010 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T09:54 kernel: OUT= SRC=209.38.229.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=27936 PROTO=TCP SPT=56972 DPT=13935 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇭🇰 pengpeng	2026-06-13 14:54:05 (20 hours ago)	monitor: on ser162528253480 \| port: 3747 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 3747 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 evvsk	2026-06-13 13:30:22 (21 hours ago)	13935/tcp	Port Scan
🇨🇦 Tanados	2026-06-13 11:22:47 (23 hours ago)	Blocked by UFW [12010/tcp] Source port: 48254 TTL: 239 Packet length: 40 TOS: 0x00 This report was ... show more Blocked by UFW [12010/tcp] Source port: 48254 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-13 09:55:32 (1 day ago)	2026-06-13T10:55:31.524533+01:00 vps kernel: [43084689.322415] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-13T10:55:31.524533+01:00 vps kernel: [43084689.322415] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=209.38.229.112 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=47998 PROTO=TCP SPT=43028 DPT=14671 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 Axel	2026-06-13 09:54:46 (1 day ago)	Blocked by UFW on LAXHH [14671/tcp] \| SPT: 43028 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [14671/tcp] \| SPT: 43028 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-06-13 09:50:00 (1 day ago)	monitor: on ser162528253480 \| port: 14671 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 14671 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 DumaNet	2026-05-30 05:10:00 (2 weeks ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 May 29. 17:17:15 Source IP: 209.38 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 May 29. 17:17:15 Source IP: 209.38.229.112 Portion of the log(s): 209.38.229.112 - [29/May/2026:17:17:13 +0200] "GET /?page_id=-9809418+UNION+ALL+SELECT+CONCAT%280x7e556b6b697477%2C0x31%2C0x7775736465557e%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL+--+-&_=qw6tmgr8 HTTP/1.1" 404 13825 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 209.38.229.112 - [29/May/2026:17:17:13 +0200] "GET /?page_id=-9809418+UNION+ALL+SELECT+CONCAT%280x7e556b6b697477%2C0x31%2C0x7775736465557e%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL+--+-&_=9kaea01c HTTP/1.1" 404 13825 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 209.38.229.112 - [29/May/2026:17:17:13 +0200] "GET /?page_id=-9809418+UNION+ALL+SELECT+CONCAT%280x7e556b6b697477%2C0x31%2C0x7775736465557e%29%2CNULL%2 show less	Web App Attack SQL Injection
🇺🇸 MPL	2026-01-15 07:14:33 (4 months ago)	tcp/55555 (2 or more attempts)	Port Scan
🇳🇱 EGP Abuse Dept	2026-01-15 06:33:45 (4 months ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.48.24

🇨🇳 180.106.115.194

🇺🇸 44.3.9.253

🇬🇧 34.39.126.200

🇳🇱 20.160.86.7

🇩🇪 5.231.242.153

🇺🇸 2607:f8b0:4001:c0f::120

🇮🇳 223.233.72.24

🇺🇦 217.196.174.3

🇩🇪 195.7.5.37

🇧🇷 177.6.162.182

🇦🇷 170.247.76.41

🇱🇹 45.227.254.170

🇸🇬 43.160.200.19

🇺🇸 20.169.105.105

🇷🇺 195.239.47.189

🇭🇰 150.5.141.198

🇺🇸 137.184.110.233

🇳🇱 85.11.167.30

🇷🇺 213.234.8.114