65.38.97.20
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- IONOS Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8560
- Hostname(s)
- ip65-38-97-20.pbiaas.com
- Domain Name
- ionos.com
- Country
- 🇺🇸 United States of America
- City
- Lenexa, Kansas
No reports in the last 60 days
65.38.97.20 has been reported 38 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
38 from
22 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-05.
|
Web App Attack SSH Hacking | |
| 🇩🇪 big-cloud.nl |
Try to access /.env
|
Web App Attack | |
| 🇺🇸 mawan |
Suspected of having performed illicit activity on LAX server.
|
Web App Attack | |
| Anonymous |
"GET /.env HTTP/1.1"
|
Hacking Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host Web App Attack | |
| 🇵🇱 IROK |
Firewall Blocked - Unauthorized Port Scanning
...
|
Port Scan | |
| 🇺🇸 myagent.site |
Blocking for trying to access an exploit file: /.env
|
Hacking | |
| 🇩🇪 big-cloud.nl |
Try to access /.env
|
Web App Attack | |
| Anonymous |
git/env leak probe
|
Web App Attack | |
| 🇧🇷 Halux |
65.38.97.20 Probing protected path or service
|
Web App Attack | |
| 🇺🇸 S.O.B.A. Dev. |
|
Brute-Force Web Spam Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octablocked]
|
Web App Attack | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access. WAF block: crowdsecurity/vpatch-env-access from 65.38.97.20 (172.18.0.4)
|
Hacking Web App Attack | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown