209.97.188.228
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
Abuse Reports
Total reports
94 from
79 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇺 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)
|
Hacking Bad Web Bot | |
| Anonymous |
GET /.git/config HTTP/1.1
...
|
Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
Reported from Nginx log analysis 19. Log: 209.97.188.228 - - [15/Nov/2026:xx:xx:xx 0100] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (compatible; Scanner/1.0)" "-" "GB United Kingdom Slough" "AS14061" "DigitalOcean, LLC"
|
Port Scan Brute-Force SSH | |
| 🇪🇸 loadsoporte |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:80) [srv1]
|
Port Scan Hacking | |
| 🇺🇸 azminawwar |
[209.97.188.228] triggered by honeypot on port [80], Timestamp [2026-11-15T04:26:00Z]METHOD=GET PATH=/.git/config HTTP=HTTP/1.1 UA="Mozilla/5.0 (compatible; Scanner/1.0)" HOST="95.182.92.103" REF="-"
|
Port Scan Hacking | |
| 🇺🇸 cunning-fox |
Automated web-application probing observed.
|
Web App Attack | |
| 🇺🇸 mw |
Web App Attack
|
Web App Attack | |
| 🇧🇷 Peregrine |
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 209.97.188.228 - - [14/Nov/2026:19:33:56 -0300] "GET /.git/config HTTP/1.1" 404 414
- 209.97.188.228 - - [14/Nov/2026:19:33:57 -0300] "GET /.git/config HTTP/1.1" 404 414
|
Bad Web Bot | |
| 🇨🇦 AEITS |
Fail2Ban www
|
Bad Web Bot Web App Attack | |
| 🇺🇸 RogueAutomata |
Detected malicious request: GET /.git/config
Detections triggered: Environment/config probe
Access via IP addr (v4)
|
Web App Attack | |
| 🇫🇷 Steph33FR |
Fail2ban (nginx-sensitive-get): automated web vulnerability scanning (probing for .env, .git and similar sensitive files).
|
Bad Web Bot Web App Attack | |
| 🇦🇹 vikal |
209.97.188.228 - - [14/Nov/2026:09:57:59 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
...
|
Brute-Force SSH | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.git/config | seen at 2026-11-14 08:43:44.767 |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown