JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.101.211

209.38.101.211

Neutral Activity

443 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇳🇱 Netherlands

City

Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

209.38.101.211 has been reported 443 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 209.38.101.211:

This IP address has been reported a total of 443 times from 223 distinct sources. 209.38.101.211 was first reported on September 6th 2024, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-09 05:25:41 (3 months ago)	tcp/8808 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-06-09 04:48:11 (3 months ago)	Blocked by UFW (TCP on 8082) Source port: 61001 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8082) Source port: 61001 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 209.38.101.211) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-05-24 06:18:38 (3 months ago)	tcp/9000	Port Scan
🇹🇭 Sawasdee	2026-04-10 02:15:09 (5 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇧🇷 somosbr	2026-04-02 22:35:03 (5 months ago)	[2026-04-02T22:35:03Z] Unsolicited scan from 209.38.101.211 to port 8880/tcp	Port Scan
🇺🇸 xmission.com	2026-04-02 22:24:42 (5 months ago)	Blocked by UFW (TCP on 8081) Source port: 61004 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 61004 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 209.38.101.211) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-04-02 21:39:51 (5 months ago)	Honeypot hit: HTTP/1.1 request on 8090 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 8090 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Full payload: GET / HTTP/1.1 Host: [SOME-IP] User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, defl... on 8090/TCP (2 attempts) show less	Hacking Bad Web Bot
🇩🇪 David Ferneding	2026-04-02 21:39:36 (5 months ago)	Blocked by UFW (TCP on 11000) Source port: 61006 TTL: 246 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 11000) Source port: 61006 TTL: 246 Packet length: 44 TOS: 0x00 This report (for 209.38.101.211) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-04-02 21:25:12 (5 months ago)	tcp/10000 (2 or more attempts)	Port Scan
🇦🇺 Anytech	2026-04-02 02:15:00 (5 months ago)	Blocked by ConnMonitor: DDoS Botnet Member	Bad Web Bot
🇧🇪 cmbplf	2026-04-02 00:58:51 (5 months ago)	5.524 requests from abuseipdb.com blacklisted IP (1yr2mos3w)	Brute-Force Bad Web Bot
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-23 20:11:43 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 dankmemer3920	2026-02-23 03:49:50 (6 months ago)	2026-02-23T03:48:26.519218+00:00 panel sshd[3384157]: Failed password for invalid user centos from 2 ... show more 2026-02-23T03:48:26.519218+00:00 panel sshd[3384157]: Failed password for invalid user centos from 209.38.101.211 port 45858 ssh2 2026-02-23T03:49:06.348150+00:00 panel sshd[3394953]: Invalid user centos from 209.38.101.211 port 34454 2026-02-23T03:49:06.471797+00:00 panel sshd[3394953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.101.211 2026-02-23T03:49:08.321317+00:00 panel sshd[3394953]: Failed password for invalid user centos from 209.38.101.211 port 34454 ssh2 2026-02-23T03:49:49.774137+00:00 panel sshd[3404263]: Invalid user centos from 209.38.101.211 port 42980 ... show less	Brute-Force SSH
🇨🇭 TrainerGamer	2026-02-23 03:48:25 (6 months ago)	Feb 22 19:47:41 LU-VPS01 sshd[1674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Feb 22 19:47:41 LU-VPS01 sshd[1674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.101.211 Feb 22 19:47:43 LU-VPS01 sshd[1674]: Failed password for invalid user centos from 209.38.101.211 port 60940 ssh2 Feb 22 19:48:24 LU-VPS01 sshd[1700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.101.211 ... show less	Brute-Force SSH

Showing 1 to 15 of 443 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.220

🇩🇪 167.94.145.16

🇩🇪 69.5.169.49

🇮🇳 2401:4900:86ed:3210:fcc2:b4ff:fe5f:e03b

🇺🇸 195.184.76.209

🇨🇱 186.175.181.51

🇨🇳 180.153.236.171

🇫🇷 85.217.140.33

🇺🇸 40.80.204.0

🇮🇳 2401:4900:57d7:dff0:dcd9:55ff:feda:fc2b

🇬🇧 217.146.80.102

🇬🇧 193.163.125.245

🇮🇳 173.205.26.5

🇺🇸 164.92.125.225

🇺🇸 147.182.205.99

🇨🇳 117.26.110.46

🇺🇸 94.72.166.102

🇫🇷 91.231.89.149

🇫🇷 91.231.89.132

🇧🇬 77.83.36.161