AbuseIPDB » 209.38.214.238

209.38.214.238 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 40%: ?

40%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	1305414.cloudwaysapps.com
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 209.38.214.238

Whois 209.38.214.238

IP Abuse Reports for 209.38.214.238:

This IP address has been reported a total of 124 times from 101 distinct sources. 209.38.214.238 was first reported on July 9th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
IP Analyzer	2024-07-19 22:12:07 (1 month ago)	Unauthorized connection attempt from IP address 209.38.214.238	Brute-Force
Block Rockin' Beats	2024-07-19 22:00:10 (1 month ago)	Malformed HTTP request	Hacking Web App Attack
Geppetto	2024-07-19 19:28:34 (1 month ago)	[19/Jul/2024:21:28:32 +0200] 400 - GET http "/cgi-bin/authLogin.cgi" [Client 209.38.214.238] [Length ... show more[19/Jul/2024:21:28:32 +0200] 400 - GET http "/cgi-bin/authLogin.cgi" [Client 209.38.214.238] [Length 252] "Go-http-client/1.1" "-" ... show less	Bad Web Bot Web App Attack
nyuuzyou	2024-07-19 18:39:59 (1 month ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": ... show more{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": "209.38.214.238", "src_port": "13978", "timestamp": "2024-07-19T18:39:44.215593"} show less	Brute-Force SSH
diego	2024-07-19 16:04:18 (1 month ago)	[rede-164-29] 07/19/2024-13:04:17.812074, 209.38.214.238, Protocol: 6, ET 3CORESec Poor Reputation I ... show more[rede-164-29] 07/19/2024-13:04:17.812074, 209.38.214.238, Protocol: 6, ET 3CORESec Poor Reputation IP group 7 show less	Hacking
ozisp.com.au	2024-07-19 14:03:02 (1 month ago)	US_DigitalOcean,_<33>1721397781 [1:2525012:1043] ET 3CORESec Poor Reputation IP TCP group 7 [Classif ... show moreUS_DigitalOcean,_<33>1721397781 [1:2525012:1043] ET 3CORESec Poor Reputation IP TCP group 7 [Classification: Misc Attack] [Priority: 2] {TCP} 209.38.214.238:57752 show less	Hacking
JCB	2024-07-19 12:59:00 (1 month ago)	209.38.214.238 - - [19/Jul/2024:04:09:40 +0300] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 406 "-" "G ... show more209.38.214.238 - - [19/Jul/2024:04:09:40 +0300] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 406 "-" "Go-http-client/1.1" show less	Web App Attack
Cloudkul Cloudkul	2024-07-19 11:24:40 (1 month ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
_ArminS_	2024-07-19 10:35:01 (1 month ago)	SP-Scan 22774:2525 detected 2024.07.19 12:35:01 blocked until 2024.09.07 05:37:48	Port Scan
RiSec	2024-07-19 10:30:17 (1 month ago)	[Fri Jul 19 10:30:17.456672 2024] [cgi:error] [pid 1987710] [client 209.38.214.238:30536] AH02811: s ... show more[Fri Jul 19 10:30:17.456672 2024] [cgi:error] [pid 1987710] [client 209.38.214.238:30536] AH02811: script not found or unable to stat: /usr/lib/cgi-bin/authLogin.cgi ... show less	Web App Attack
wuemeli.com	2024-07-19 10:12:51 (1 month ago)	209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; ... show more209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "\x16\x03\x01\x00\xC7\x01\x00\x00\xC3\x03\x037n\xD1\x0BFe\x02\x1C\x8B" 400 154 "-" "-" 209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "\x16\x03\x01\x00\xC7\x01\x00\x00\xC3\x03\x03\x13\x00\xF7Tg\x970^\xF9r\xA3\x1A(\xA9\x89\x86s+2S\x8F{\xAC\x0F\x94\xDF!P\xB9\xB8\x96\xCA\x00\x00P\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-" 209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 209.38.214.238 - - [19/Jul/2024:10:12:47 +0000] "\x16\x03\x01\x00\xC7\x01\x00\x00\xC3\x03\x03#\xEF,\xC0\x09\x8F1\xD5\xF3m\x8C\x87wZ\x0F\x91ai\xEDz\x8B\x9C\xEE?x:" 400 154 "-" "-" ... show less	Web App Attack
drewf.ink	2024-07-19 09:55:24 (1 month ago)	[09:55] Port scanning. Port(s) scanned: TCP/143	Port Scan
lauraorchid	2024-07-19 09:48:20 (1 month ago)	209.38.214.238 - - [19/Jul/2024:10:48:18 +0100] "GET /v2/_catalog HTTP/1.1" 400 255 "-" "Go-http-cli ... show more209.38.214.238 - - [19/Jul/2024:10:48:18 +0100] "GET /v2/_catalog HTTP/1.1" 400 255 "-" "Go-http-client/1.1" ... show less	Bad Web Bot
ilu-serv	2024-07-19 09:39:58 (1 month ago)	Unauthorized Access Attempt	Port Scan Hacking Web App Attack
webbfabriken	2024-07-19 09:22:02 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam