JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

209.38.104.216

Recent Activity

Abuse Confidence Score

40% Elevated

29 reports

25 reporters · latest 5 hours ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 25 distinct reporters

First reported

December 24th 2025

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇫🇷 France 6 🇫🇮 Finland 1 🇸🇬 Singapore 1

Most common categories Port Scan 7 SSH 2 Hacking 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Maxetow	2026-11-13 03:58:45 UTC · (5 hours ago)	Scan port: 6379 \| 1 total \| size=60B	Port Scan
🇸🇬 heyzg	2026-11-12 14:21:51 UTC · (19 hours ago)	HTTP Command Execution (observed): 4 cmds, 1 HTTP	Hacking SSH
🇫🇷 noi	2026-11-12 01:16:59 UTC · (1 day ago)	honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h	Port Scan
🇫🇷 thecocasio	2026-11-11 04:33:38 UTC · (2 days ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-11-11T04:33:38Z.	Port Scan
🇫🇷 uthul	2026-11-10 09:24:10 UTC · (2 days ago)	T-Pot honeypot: 11 hits on ports [6379] (automated)	Port Scan
🇫🇷 noi	2026-11-10 03:28:43 UTC · (3 days ago)	honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h	Port Scan
🇫🇷 uthul	2026-11-09 23:20:21 UTC · (3 days ago)	T-Pot honeypot: 1 hits on ports [6379] (automated)	Port Scan
🇫🇷 wiredalter	2026-11-08 15:30:39 UTC · (4 days ago)	Blocked by fail2ban on o2VPS [6379/tcp] Source Port: 33780 TTL: 47 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com	Brute-Force SSH
🇹🇷 alastyr	2026-11-08 08:43:13 UTC · (5 days ago)	Port scan: probes to 3 unused addresses of AS3188 within 60 s. 115 further packets from this source blocked during the following ban. Ports: 6379. Detected by Alastyr network sensor (XDP).	Port Scan
🇰🇷 ericshim.me	2025-12-24 14:55:58 UTC · (10 months ago)	Reported from fail2ban historical logs. (Detected at 2025-12-24 16:45:13)	Brute-Force SSH
🇩🇪 ps-center	2025-12-24 08:36:12 UTC · (10 months ago)	CAS-W: TCP-Scanner. Port: 22	Port Scan
🇧🇷 ItsClairton	2025-12-24 08:18:50 UTC · (10 months ago)	Dec 24 05:18:47 game-05 sshd[651095]: Invalid user guest from 209.38.104.216 port 47324 Dec 24 05:18:47 game-05 sshd[651095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.104.216 Dec 24 05:18:49 game ... show more Dec 24 05:18:47 game-05 sshd[651095]: Invalid user guest from 209.38.104.216 port 47324 Dec 24 05:18:47 game-05 sshd[651095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.104.216 Dec 24 05:18:49 game-05 sshd[651095]: Failed password for invalid user guest from 209.38.104.216 port 47324 ssh2 Dec 24 05:18:47 game-05 sshd[651095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.104.216 Dec 24 05:18:49 game-05 sshd[651095]: Failed password for invalid user guest from 209.38.104.216 port 47324 ssh2 ... show less	Brute-Force SSH
🇮🇱 31323334.xyz	2025-12-24 08:10:51 UTC · (10 months ago)	Dec 24 08:10:37 instance-20241026-2018 sshd[3282965]: Failed password for invalid user user from 209.38.104.216 port 45990 ssh2 Dec 24 08:10:43 instance-20241026-2018 sshd[3282973]: Invalid user wpyan from 209.38.104.216 port 36236 Dec 24 08:10:44 in ... show more Dec 24 08:10:37 instance-20241026-2018 sshd[3282965]: Failed password for invalid user user from 209.38.104.216 port 45990 ssh2 Dec 24 08:10:43 instance-20241026-2018 sshd[3282973]: Invalid user wpyan from 209.38.104.216 port 36236 Dec 24 08:10:44 instance-20241026-2018 sshd[3282973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.104.216 Dec 24 08:10:46 instance-20241026-2018 sshd[3282973]: Failed password for invalid user wpyan from 209.38.104.216 port 36236 ssh2 Dec 24 08:10:51 instance-20241026-2018 sshd[3282980]: Invalid user jira from 209.38.104.216 port 45264 ... show less	Brute-Force SSH
🇩🇪 kranem	2025-12-24 08:01:46 UTC · (10 months ago)	Dec 24 08:43:49 NODE-1 sshd[1123708]: Invalid user test2 from 209.38.104.216 port 39602 Dec 24 08:45:17 NODE-1 sshd[1174390]: Invalid user test3 from 209.38.104.216 port 59238 Dec 24 08:59:01 NODE-1 sshd[1667515]: Invalid user oracle from 209.38.104. ... show more Dec 24 08:43:49 NODE-1 sshd[1123708]: Invalid user test2 from 209.38.104.216 port 39602 Dec 24 08:45:17 NODE-1 sshd[1174390]: Invalid user test3 from 209.38.104.216 port 59238 Dec 24 08:59:01 NODE-1 sshd[1667515]: Invalid user oracle from 209.38.104.216 port 34000 Dec 24 09:00:23 NODE-1 sshd[1715270]: Invalid user user from 209.38.104.216 port 56178 Dec 24 09:01:45 NODE-1 sshd[1763240]: Invalid user wpyan from 209.38.104.216 port 39110 ... show less	Brute-Force SSH
🇺🇸 ras07	2025-12-24 08:00:21 UTC · (10 months ago)	SSH login attempts with user root.	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 119.28.89.249

🇷🇺 95.84.137.185

🇷🇺 91.202.233.64

🇩🇪 45.43.62.37

🇧🇪 35.206.153.174

🇬🇧 35.203.210.204

🇭🇰 34.92.33.39

🇧🇷 179.184.218.49

🇺🇸 162.35.176.98

🇸🇱 102.23.142.13

🇳🇱 45.148.10.157

🇸🇬 35.187.231.181

🇮🇳 203.192.247.84

🇬🇧 193.176.29.11

🇨🇳 123.129.205.22

🇰🇷 122.40.25.144

🇰🇷 121.183.122.199

🇮🇳 103.132.100.252

🇺🇸 91.230.168.209

🇳🇱 64.205.72.162