AbuseIPDB » 209.38.214.238

209.38.214.238 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 29%: ?

29%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	1305414.cloudwaysapps.com
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 209.38.214.238

Whois 209.38.214.238

IP Abuse Reports for 209.38.214.238:

This IP address has been reported a total of 124 times from 101 distinct sources. 209.38.214.238 was first reported on July 9th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
speedtaq.com	2024-07-20 06:08:51 (1 month ago)	209.38.214.238 - - [20/Jul/2024:08:08:48 +0200] "GET /solr/admin/info/system HTTP/1.1" 301 597 "-" " ... show more209.38.214.238 - - [20/Jul/2024:08:08:48 +0200] "GET /solr/admin/info/system HTTP/1.1" 301 597 "-" "Go-http-client/1.1" show less	Bad Web Bot
RAP	2024-07-20 05:37:20 (1 month ago)	Probing web services for vulnerabilities	Port Scan
Anonymous	2024-07-20 04:59:37 (1 month ago)	(eximsyntax) Exim syntax errors from 209.38.214.238 (DE/Germany/-): 3 in the last 3600 secs	Hacking
HoneyPotEu-AT	2024-07-20 04:52:09 (1 month ago)	209.38.214.238 - - [20/Jul/2024:06:51:23 +0200] "x16x03x01x01$x01x00x01 x03x03xE1xD8xADx8CxD0xEBx09x ... show more209.38.214.238 - - [20/Jul/2024:06:51:23 +0200] "x16x03x01x01$x01x00x01 x03x03xE1xD8xADx8CxD0xEBx09x8C]xFCn7xD3oQxC1`xB8CxFDxFCxE5xF5x97,_3bxA0QxFCx94 xEELxB3xE5xD8x1 ... show less	Bad Web Bot Web App Attack
diego	2024-07-20 04:16:06 (1 month ago)	[rede-arem1] 07/20/2024-01:16:06.009109, 209.38.214.238, Protocol: 6, ET 3CORESec Poor Reputation IP ... show more[rede-arem1] 07/20/2024-01:16:06.009109, 209.38.214.238, Protocol: 6, ET 3CORESec Poor Reputation IP group 7 show less	Hacking
NotACaptcha	2024-07-20 04:03:36 (1 month ago)	webserver:80 [20/Jul/2024] "\x16\x03\x01" 400 392 webserver:80 [20/Jul/2024] "\x16\x03\x01" ... show morewebserver:80 [20/Jul/2024] "\x16\x03\x01" 400 392 webserver:80 [20/Jul/2024] "\x16\x03\x01" 400 392 webserver:80 [20/Jul/2024] "\x16\x03\x01" 400 392 show less	Web App Attack
archiv-pm	2024-07-20 02:59:44 (1 month ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
marioselgreco	2024-07-20 02:02:14 (1 month ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
Nazgul	2024-07-20 00:55:38 (1 month ago)	SSH brute force attempt (MTMO)	Brute-Force SSH
technonerd	2024-07-20 00:45:39 (1 month ago)	1721436337 - 07/19/2024 20:45:37 Host: 209.38.214.238/209.38.214.238 Port: 143 TCP Blocked	Port Scan
xor.st	2024-07-20 00:15:32 (1 month ago)	GET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]]<br ... show moreGET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]] Body: show less	Web App Attack
DAILYKANBAN.COM	2024-07-19 23:26:30 (1 month ago)	(eximsyntax) Exim syntax errors from 209.38.214.238 (DE/Germany/-): 5 in the last 600 secs; Ports: * ... show more(eximsyntax) Exim syntax errors from 209.38.214.238 (DE/Germany/-): 5 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_EXIMSYNTAX; Logs: 2024-07-19 23:26:26 SMTP call from [209.38.214.238]:56610 dropped: too many syntax or protocol errors (last command was "?", NULL) 2024-07-19 23:26:27 SMTP call from [209.38.214.238]:56616 dropped: too many syntax or protocol errors (last command was "?", NULL) 2024-07-19 23:26:27 SMTP call from [209.38.214.238]:56646 dropped: too many syntax or protocol errors (last command was "\300 ?/\300\b?<?\232\300\234?\304\300\240?\210?\234?\276?5?E?=?\237\300\235\300\243\300\241\300\237?\235?k?A?9?\272?\236?\204\300\242?\300\300\236?\007?g?\004?3?\005?\026\001??\302\032\032?????\023?\021??\01695.217.246.244?\027???\001?\001\001\377\001?\001??", NULL) 2024-07-19 23:26:27 SMTP call from [209.38.214.238]:56658 dropped: too many syntax or protocol errors (last command was "\300$\300\255\300\257\300,\300r\300s\314\251\023\002\023\001\314\024\300\007\300\022\300\023\300'\3 show less	Spoofing
ne1for23	2024-07-19 22:55:40 (1 month ago)	Attempt to access invalid virtual host name (###.###.###.###:443). Typically used to access "intern ... show moreAttempt to access invalid virtual host name (###.###.###.###:443). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 209.38.214.238 - - [19/Jul/2024:22:55:34 +0000] "POST / HTTP/1.1" 403 153 "-" "Go-http-client/1.1" "-" show less	Hacking
IP Analyzer	2024-07-19 22:30:23 (1 month ago)	Unauthorized connection attempt from IP address 209.38.214.238 on Port 143(IMAP)	Port Scan
Gem	2024-07-19 22:19:12 (1 month ago)	Unauthorized web scan.	Web App Attack