64.23.138.38
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 [email protected] |
PrestaShop Security Module: Suspicious path detected (/.env)
|
Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 64.23.138.38 (US/United States/-): N in the last X secs
|
Web App Attack | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force | |
| 🇦🇺 GMan22 |
Triggered honeypot endpoint indicative of automated scanning
|
Web App Attack SSH | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET / HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.local HTTP/1.1
|
Hacking Web App Attack | |
| Anonymous |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 www.winos.me |
Shield: Layer4 Port 9 Trap
|
Port Scan Hacking | |
| 🇳🇱 bazter.pro |
64.23.138.38 - - [05/Nov/2026:09:07:15 +0000] "GET /.env HTTP/1.1" 404 414 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
|
Port Scan Brute-Force Bad Web Bot Web App Attack SSH | |
| 🇧🇪 taivas.nl |
Many_bad_calls
|
Web App Attack | |
| 🇳🇱 Mangelot Hosting |
(modsec_attack) srv101 ModSecurity attack 64.23.138.38 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
|
Web App Attack | |
| 🇦🇺 screwlooseit.com.au |
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/-
|
Web App Attack | |
| 🇸🇬 simpeg-adm.bandung.go.id |
|
Web Spam Brute-Force Web App Attack | |
| 🇳🇱 Roderic |
Insights: 9 probe requests within 24 hours on 1 site, e.g. /.env (no normal page views)
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown