JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.193.204

209.38.193.204 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.193.204

Whois 209.38.193.204

IP Abuse Reports for 209.38.193.204:

This IP address has been reported a total of 77 times from 71 distinct sources. 209.38.193.204 was first reported on February 20th 2026, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-09-17 00:15:13 (14 minutes ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
Anonymous	2026-09-17 00:14:22 (15 minutes ago)		Brute-Force Email Spam
🇵🇱 strefapi_com	2026-09-17 00:10:42 (19 minutes ago)	Brute-force or trying open relay ...	Brute-Force Web App Attack
🇸🇰 KlinikaMD	2026-09-17 00:00:18 (29 minutes ago)	Automatic report from KMD firewall log.	Port Scan Hacking Brute-Force
🇧🇬 Stoyko Stoykov	2026-09-16 23:11:56 (1 hour ago)	209.38.193.204 - - [17/Sep/2026:02:11:55 +0300] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" " ... show more 209.38.193.204 - - [17/Sep/2026:02:11:55 +0300] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" ... show less	Hacking Web App Attack
🇧🇪 boxed-it	2026-09-16 22:09:46 (2 hours ago)	GET /solr/admin/info/system (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇳🇱 oisecnet	2026-09-16 21:02:50 (3 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-09-16. 47 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-09-16. 47 requests from this IP. show less	Port Scan Hacking Web App Attack
🇺🇸 LotPhantom	2026-09-16 20:22:38 (4 hours ago)	209.38.193.204 - - [16/Sep/2026:20:22:38 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 146 "-" ... show more 209.38.193.204 - - [16/Sep/2026:20:22:38 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 146 "-" "Go-http-client/1.1" "0" ... show less	Web App Attack
🇩🇪 kkeyser	2026-09-16 20:15:56 (4 hours ago)	GET /solr/admin/info/system HTTP/1.1	Web App Attack
🇫🇷 EvoX	2026-09-16 19:54:10 (4 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 1234 GET / User-Agent: Mozilla/5.0 (compatible; O ... show more 🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 1234 GET / User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) Accept: / Accept-Encoding: gzip; 1234 [2] TCP show less	Hacking Bad Web Bot
🇷🇺 Mga Admin	2026-09-16 18:36:45 (5 hours ago)	209.38.193.204 - - [17/Sep/2026:01:36:44 +0700] "POST / HTTP/1.1" 404 1591 "-" "Go-http-client/1.1" ... show more 209.38.193.204 - - [17/Sep/2026:01:36:44 +0700] "POST / HTTP/1.1" 404 1591 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇬🇧 xpert-servers	2026-09-16 18:21:36 (6 hours ago)	2026-09-16T19:21:02.187127+01:00 web01.xpert-servers.net postfix/smtpd[955909]: improper command pip ... show more 2026-09-16T19:21:02.187127+01:00 web01.xpert-servers.net postfix/smtpd[955909]: improper command pipelining after CONNECT from unknown[209.38.193.204]: \026\003\003\001\247\001\000\001\243\003\003h\236M\023\023'\005\203\335\037\004\241w\267t\265\2230vy\213\341Z\375\026\306\277d\326\244\244\003 \361\204^\277\264F\344p\214\002\330aQQ\001\027k\231\b\363mS\357\332\233\333p\036l\306\335\207\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-09-16T19:21:02.219389+01:00 web01.xpert-servers.net postfix/smtpd[955909]: improper command pipelining after CONNECT from unknown[209.38.193.204]: \026\003\003\001\247\001\000\001\243\003\003H\0201/\335\345(I\247\226\236\364d\331\by\tA\241D>m\266\3304\254}Y\200\026\227\324 b\350\035g\307\352\311\233\263vq\362\266\204Oj\376\034\021\312\234\374\2230M\255\205T\315\025RY\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2026-09-16T19:21:02.252598+01:00 web01.xpert-servers.net postfix ... show less	Email Spam Brute-Force Exploited Host
🇩🇪 LRob	2026-09-16 17:48:19 (6 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /cgi-bin/authLogin.cgi \| ua: Go ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /cgi-bin/authLogin.cgi \| ua: Go-http-client/1.1 \| 2026-09-16 17:48 UTC show less	Port Scan Web App Attack
🇪🇸 raiolanetworks.com	2026-09-16 16:48:17 (7 hours ago)	Honeypot detection: port scan / service probe. 9 events observed. 3 distinct ports targeted. Reporte ... show more Honeypot detection: port scan / service probe. 9 events observed. 3 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Port Scan
🇩🇪 mist x	2026-09-16 16:46:04 (7 hours ago)	Honeypot Web Sensor: Malicious HTTP scanner probe targeting sensitive path: POST / HTTP/1.1	Bad Web Bot Web App Attack

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.71.127.30

🇮🇶 169.224.10.32

🇨🇳 101.126.4.240

🇨🇦 85.217.149.55

🇷🇴 80.94.92.179

🇧🇪 34.62.112.232

🇺🇸 34.24.136.46

🇳🇵 27.34.66.48

🇺🇸 20.98.133.3

🇯🇵 8.216.9.49

🇺🇸 4.246.61.185

🇺🇸 195.184.76.186

🇬🇧 193.163.125.35

🇩🇪 185.220.101.30

🇨🇳 180.173.167.237

🇧🇷 177.23.251.218

🇺🇸 172.180.64.130

🇷🇺 109.106.128.246

🇺🇸 47.231.0.27

🇳🇱 45.148.10.151