209.38.95.209
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇦🇺 Australia
- City
- Sydney, New South Wales
Abuse Reports
Total reports
116 from
68 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇰 sbk97 (https://sayor.net) |
SAYOR honeypot: observed attack /.git/config
|
Brute-Force | |
| 🇬🇧 OptimusGO |
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-02-01 00:53:13 UTC
Log evidence:
|
Port Scan Brute-Force | |
| 🇹🇷 cagatayakinci.com |
Web App Attack was Blocked. IP has been banned for 1 day Çarşamba, 14 Ocak 2026 08:31 ÖÖ
|
Web App Attack | |
| 🇧🇪 boxed-it |
GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)
|
Web App Attack | |
| Anonymous |
Aggressive web scan
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/209.38.95.209
2026-01-12 03:35:01 /.git/config
2026-01-12 03:35:01 /.env
|
Web App Attack | |
| 🇸🇪 KIDOS |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇬🇧 WebServ |
Blocked by ufw after 5 attempts in last 300s.
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/3000 (8 or more attempts)
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=47221 dstport=3000
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=60231 dstport=3000
|
Port Scan | |
| 🇵🇱 mkey |
[2026-01-11 08:38:58] Unauthorized connection probe. Source on AbuseIPDB blacklist (AbuseIPDB Black List )
|
Port Scan Hacking | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 3000).
Source port: 53524
TTL: 237
Packet length: 44
TOS: 0x00
This report (for 209.38.95.209) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 openstrike.co.uk |
2 attacks on env grabbing URLs, VC URLs:
GET /.env HTTP/1.1
GET /.git/config HTTP/1.1
|
Hacking | |
| Anonymous |
Portscan: TCP/8080 (3x), TCP/8000 (6x)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown