JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.97.161.116

209.97.161.116 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 89%: ?

89%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.97.161.116

Whois 209.97.161.116

IP Abuse Reports for 209.97.161.116:

This IP address has been reported a total of 23 times from 15 distinct sources. 209.97.161.116 was first reported on September 18th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 lns.bz	2026-07-27 12:07:37 (5 hours ago)	Too many 404 requests [DOPP]	Web App Attack
🇳🇱 Site.eu	2026-07-27 09:12:10 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 COMAITE	2026-07-27 07:50:37 (10 hours ago)	Suspicious URL access.	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:26:38 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:26:34.761647 2026] [security2:error] [pid 1688620:tid 1688674] [client 209.97.161.116:59376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.plumberw10.plumberw9.com"] [uri "/.git/config"] [unique_id "amcIKnaXIRKgyharhhjabAAAAcE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Sockets-AR	2026-07-26 23:32:58 (18 hours ago)	CrowdSec: sensitive file probing detected (crowdsecurity/http-sensitive-files) at 2026-07-26T23:32:5 ... show more CrowdSec: sensitive file probing detected (crowdsecurity/http-sensitive-files) at 2026-07-26T23:32:57.726Z show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 21:59:13 (19 hours ago)	Auto-ban: >3000 req/min op 2026-07-26	Web App Attack SSH Hacking
🇫🇷 masterguru	2026-07-26 19:44:00 (22 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇸🇪 vaia.cloud	2026-07-26 19:15:01 (22 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-07-26 18:08:58 (23 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 15:47:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 11:47:50.749539 2026] [security2:error] [pid 3423266:tid 3423266] [client 209.97.161.116:57956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.parkplacemotel.com"] [uri "/.git/config"] [unique_id "amYsJvDSZHnFmOBLwbTHIwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-26 15:01:31 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-26 12:05:22 (1 day ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (27/60 min)'; Requests=27	Port Scan
🇺🇸 TPI-Abuse	2026-07-26 09:55:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 05:55:14.933234 2026] [security2:error] [pid 3699494:tid 3699494] [client 209.97.161.116:47466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ourhotmail.com"] [uri "/.git/config"] [unique_id "amXZgrcMXTnJ2mg7g-WRygAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-26 09:27:13 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-26 06:49:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 209.97.161.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:49:21.380927 2026] [security2:error] [pid 13114:tid 13114] [client 209.97.161.116:49878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orborienting.com"] [uri "/.git/config"] [unique_id "amWt8V90gme-2It65DJorAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 135.181.81.43

🇻🇳 116.99.168.91

🇺🇸 104.236.83.40

🇮🇩 103.139.10.189

🇷🇺 92.38.89.30

🇨🇦 85.217.149.29

🇷🇺 46.191.185.5

🇰🇷 14.39.98.19

🇮🇹 2a00:1450:4025:1803::12d

🇮🇳 202.141.101.27

🇲🇿 197.219.228.246

🇩🇪 194.187.176.81

🇫🇮 147.185.133.35

🇷🇺 91.231.219.137

🇫🇷 91.196.152.124

🇺🇸 45.38.206.102

🇬🇧 35.203.210.213

🇧🇷 209.14.149.157

🇨🇳 123.123.113.194

🇭🇰 104.28.156.211