JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.23.229

209.38.23.229 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.23.229

Whois 209.38.23.229

IP Abuse Reports for 209.38.23.229:

This IP address has been reported a total of 11 times from 8 distinct sources. 209.38.23.229 was first reported on November 16th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2025-11-17 06:13:35 (8 months ago)	5 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇦🇺 Asimar	2025-11-16 20:35:12 (8 months ago)	(PERMBLOCK) 209.38.23.229 (AU/Australia/-) has had more than 2 temp blocks	Hacking
🇩🇪 Hydra-Shield.fr	2025-11-16 15:49:33 (8 months ago)	Directory Traversal on: /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 12:23:07 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 07:23:00.399135 2025] [security2:error] [pid 13088:tid 13088] [client 209.38.23.229:35154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "highaltitudebaking.com"] [uri "/.git/config"] [unique_id "aRnCJDs6d4mMzW5TmxelPAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 juutis	2025-11-16 12:16:48 (8 months ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 09:57:44 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 04:57:37.851509 2025] [security2:error] [pid 7944:tid 7944] [client 209.38.23.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hondabvi.com"] [uri "/.git/config"] [unique_id "aRmgEQBfwkovQhGIpGDF5wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-16 09:18:07 (8 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 08:53:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.23.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 03:53:32.297755 2025] [security2:error] [pid 10928:tid 10928] [client 209.38.23.229:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/.git/config"] [unique_id "aRmRDMEInd52t28rP7lSKAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-11-16 07:05:51 (8 months ago)	Too many Status 40X (14)	Brute-Force Web App Attack
Anonymous	2025-11-16 05:30:01 (8 months ago)	File repository snooping: 209.38.23.229 - - [16/Nov/2025:05:21:17 +0000] "GET /.git/config HTTP/1.1 ... show more File repository snooping: 209.38.23.229 - - [16/Nov/2025:05:21:17 +0000] "GET /.git/config HTTP/1.1" 404 248 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
🇦🇺 Asimar	2025-11-16 04:00:43 (8 months ago)	(mod_security) mod_security triggered on hostname [redacted] 209.38.23.229 (AU/Australia/-): (CF_EN ... show more (mod_security) mod_security triggered on hostname [redacted] 209.38.23.229 (AU/Australia/-): (CF_ENABLE) show less	SQL Injection

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 153.0.81.211

🇨🇳 121.33.202.218

🇺🇸 216.180.246.51

🇺🇦 185.113.79.249

🇺🇸 143.244.166.135

🇱🇹 141.98.11.11

🇮🇳 103.173.18.131

🇺🇸 91.230.168.177

🇺🇸 46.202.248.106

🇧🇷 205.210.31.171

🇲🇲 103.59.163.135

🇱🇹 77.90.185.10

🇺🇸 45.194.67.29

🇮🇳 223.181.123.183

🇨🇳 223.108.199.4

🇩🇪 167.94.146.40

🇺🇸 138.197.204.198

🇵🇱 138.124.20.112

🇺🇸 104.248.230.130

🇩🇪 69.5.169.111