JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.23.144

209.38.23.144 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 72%: ?

72%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.23.144

Whois 209.38.23.144

IP Abuse Reports for 209.38.23.144:

This IP address has been reported a total of 101 times from 82 distinct sources. 209.38.23.144 was first reported on February 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Aetherweb Ark	2026-07-03 11:29:20 (1 hour ago)	(mod_security) mod_security (id:949110) triggered by 209.38.23.144 (AU/Australia/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 209.38.23.144 (AU/Australia/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 11:24:17 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 07:24:10.195250 2026] [security2:error] [pid 29393:tid 29442] [client 209.38.23.144:55490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahrgroup.com"] [uri "/.git/config"] [unique_id "akeb2szr9E8al2SDyopYZwAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-07-03 10:32:37 (2 hours ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇨🇭 TheCoon	2026-07-03 09:45:01 (3 hours ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇩🇪 big-cloud.nl	2026-07-03 09:04:18 (3 hours ago)	Try to access /.git/config	Web App Attack
🇧🇪 cmbplf	2026-07-03 08:51:06 (4 hours ago)	566 requests with url.path /.git/config 482 requests with url.path .git/*	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 08:21:59 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:21:56.580006 2026] [security2:error] [pid 11659:tid 11659] [client 209.38.23.144:52566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canonarizona.com"] [uri "/.git/config"] [unique_id "akdxJG34hKwx7jV6GPG6pQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kommunos	2026-07-03 08:12:00 (4 hours ago)	/.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 08:01:40 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:01:36.494753 2026] [security2:error] [pid 339:tid 339] [client 209.38.23.144:50976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proprocessor.com"] [uri "/.git/config"] [unique_id "akdsYP_Wou3Kb9TVhGce3gAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rdpguard.com	2026-07-03 07:41:00 (5 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-07-03 07:09:44 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:09:39.458822 2026] [security2:error] [pid 16328:tid 16328] [client 209.38.23.144:41672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "summithost.com"] [uri "/.git/config"] [unique_id "akdgMz2qSbS35xlUVRWpfwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-03 06:56:43 (6 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-03 06:30:14 (6 hours ago)	Sensitive file access attempt	Hacking
🇺🇸 TPI-Abuse	2026-07-03 05:36:38 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:36:33.241008 2026] [security2:error] [pid 3039:tid 3042] [client 209.38.23.144:47130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lead-sleds.com"] [uri "/.git/config"] [unique_id "akdKYVtv6ZhcvClUJFidvgAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-07-03 05:15:39 (7 hours ago)		Port Scan

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 166.77.36.7

🇬🇧 154.16.44.77

🇰🇷 106.245.246.26

🇫🇷 91.196.152.201

🇮🇳 45.195.83.7

🇺🇸 45.33.41.118

🇨🇳 223.199.189.164

🇲🇽 201.97.66.255

🇳🇱 89.21.67.153

🇺🇸 13.86.104.104

🇵🇰 203.124.32.243

🇺🇸 195.184.76.143

🇺🇸 136.66.210.14

🇻🇳 116.110.149.111

🇺🇸 66.132.172.115

🇳🇱 45.148.10.141

🇺🇸 3.142.170.60

🇰🇷 210.99.106.136

🇮🇳 122.187.227.139

🇭🇰 122.10.52.11