JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.230.81

209.38.230.81 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 54%: ?

54%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.230.81

Whois 209.38.230.81

IP Abuse Reports for 209.38.230.81:

This IP address has been reported a total of 25 times from 18 distinct sources. 209.38.230.81 was first reported on April 22nd 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 鹏鹏	2026-10-18 03:42:52 (5 days ago)	monitor: on VM-0-7-ubuntu \| port: 15848 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 15848 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-18 03:15:11 (5 days ago)	Blocked by UFW (TCP on 46242) Source port: 55124 TTL: 48 Packet length: 52 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 46242) Source port: 55124 TTL: 48 Packet length: 52 TOS: 0x14 This report (for 209.38.230.81) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 CyberFox	2026-10-18 03:08:44 (5 days ago)	6833/tcp (1 or more attempts)	Port Scan
🇨🇳 鹏鹏	2026-10-18 00:30:32 (5 days ago)	monitor: on VM-0-7-ubuntu \| port: 27329 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 27329 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 CyberFox	2026-10-17 20:45:54 (5 days ago)	53157/tcp,53017/tcp (2 or more attempts)	Port Scan
Anonymous	2026-10-17 15:08:34 (5 days ago)	Blocked by UFW (TCP on 14297) Source port: 34125 TTL: 46 Packet length: 52 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 14297) Source port: 34125 TTL: 46 Packet length: 52 TOS: 0x14 This report (for 209.38.230.81) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-17 14:43:06 (5 days ago)	54857/tcp,29282/tcp (2 or more attempts)	Port Scan
🇧🇪 boxed-it	2026-10-14 04:24:39 (1 week ago)	GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇺🇸 HamSammich	2026-10-12 13:37:45 (1 week ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-10-12T13:37Z).	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 13:34:39 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:34:32.031518 2026] [security2:error] [pid 8840:tid 8840] [client 209.38.230.81:50104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.233"] [uri "/.git/config"] [unique_id "aszh6DtCrcHfxaPZssOFiAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 niclqs	2026-10-12 13:29:25 (1 week ago)	AntiCrawler: Unauthorized probe/scanner attempt on path /.git/config	Hacking Bad Web Bot Web App Attack
🇸🇪 KIDOS	2026-10-12 13:20:11 (1 week ago)	Apache monitor: ssrf_log_spoofing	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-12 13:19:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:19:10.388047 2026] [security2:error] [pid 4701:tid 4701] [client 209.38.230.81:58440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.93"] [uri "/.git/config"] [unique_id "aszeTj4ulmu1Q891D1LiuQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Kejult	2026-10-12 13:04:18 (1 week ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 3 ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 3 source port(s). Sensor(s): H0neytr4p, Tanner. show less	Port Scan
🇺🇸 TPI-Abuse	2026-10-12 13:03:18 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.38.230.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:03:13.665664 2026] [security2:error] [pid 14355:tid 14355] [client 209.38.230.81:42746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.12"] [uri "/.git/config"] [unique_id "aszakeljSulpgnDPflXtGgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.43

🇳🇱 193.47.62.69

🇨🇳 171.216.78.31

🇿🇦 165.165.109.152

🇺🇸 49.51.245.241

🇳🇱 45.148.121.138

🇵🇰 39.45.53.79

🇷🇴 2.57.121.25

🇳🇱 203.55.131.4

🇰🇭 202.93.153.242

🇩🇪 167.99.130.90

🇫🇮 147.185.133.150

🇸🇬 114.119.156.223

🇺🇸 50.112.210.29

🇰🇷 43.164.133.44

🇨🇳 223.109.252.184

🇷🇴 193.46.255.86

🇨🇳 180.103.119.98

🇩🇪 136.243.103.55

🇰🇷 125.182.93.87